Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.cer (raw, json)
Hash identifier: Wo4j4kS2fcUyc1q5YZjfllDIivU/u9s5mcNzQYEpjo8=
Subject key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D7C2AB8F631D11A9C7649D8E9B69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29691
IP: 5.148.160.0/19
IP: 92.42.184.0/21
IP: 94.230.208.0/20
IP: 178.209.32.0/19
IP: 185.88.236.0/22
IP: 193.17.85.0/24
IP: 217.150.240.0/20
IP: 2001:67c:2f98::/48
IP: 2a02:418::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:c2:ab:8f:63:1d:11:a9:c7:64:9d:8e:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:71:4a:b7:2b:1c:37:a7:fa:7c:85:3c:91:
34:dd:2c:3e:ea:e1:b7:ec:64:68:51:9f:5c:a8:1c:
50:34:8c:71:7d:07:cb:ec:c1:76:8a:f0:25:9a:ea:
3c:ec:cd:38:68:79:87:ae:53:36:95:70:c8:e4:4d:
68:86:4b:eb:27:8a:ca:2e:a4:3d:03:92:51:43:f1:
ae:8d:02:76:6e:1a:a5:d5:2a:a0:d2:de:fb:6d:53:
76:d3:ce:ec:0b:43:ea:81:4f:11:7e:d4:c1:90:47:
9a:7b:71:62:5b:7e:60:1b:46:ef:ba:88:d6:2a:6e:
f5:20:12:20:40:04:b9:17:f5:da:df:87:fe:3c:2e:
71:55:23:40:61:92:8a:51:3b:5a:b0:4d:37:9a:a7:
c5:87:71:37:1a:ba:8e:9f:b1:ac:9e:df:c4:1c:00:
df:37:b4:8e:1d:86:b5:c5:28:bd:46:8d:63:86:ef:
0e:af:5e:a8:c4:c9:89:2a:d1:3a:3b:84:e3:93:80:
84:77:14:80:83:c2:21:62:af:55:fe:bc:55:d4:da:
d6:92:0a:4c:c3:c7:c3:12:17:2e:82:54:c9:81:2e:
ca:2b:01:22:bc:69:32:06:30:5f:eb:77:d0:72:d8:
d9:7a:11:25:15:90:7c:5d:68:1c:c9:ce:28:cb:1c:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.160.0/19
92.42.184.0/21
94.230.208.0/20
178.209.32.0/19
185.88.236.0/22
193.17.85.0/24
217.150.240.0/20
IPv6:
2001:67c:2f98::/48
2a02:418::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29691
Signature Algorithm: sha256WithRSAEncryption
38:c8:db:72:b7:07:1b:06:3c:34:dc:96:51:29:51:e2:12:06:
21:27:64:ec:51:90:64:26:f2:4e:1e:fd:f1:cc:d3:62:1f:4d:
6d:a1:a3:e0:11:77:93:98:47:ee:1c:20:d3:a9:69:37:24:e2:
45:c9:12:dc:40:13:e0:9f:6d:5d:6b:f2:2d:57:81:ef:35:e5:
f3:19:f0:70:a0:6b:0d:e4:26:79:fb:39:10:9a:db:96:5b:35:
cf:f3:47:3c:6e:73:51:8d:fe:c1:9d:35:2e:3c:cd:ea:d0:5f:
1b:2f:87:db:f9:98:33:de:2e:46:68:07:8e:67:3a:82:90:52:
7e:dc:01:c6:06:20:29:ca:6c:ba:b2:7e:c6:e0:e5:70:a5:a3:
a1:c5:ac:b2:c9:06:f9:43:4d:dc:b1:6f:56:8c:87:8d:40:1e:
ed:56:70:f1:65:e7:bc:5f:07:b8:45:57:f1:8b:14:f7:0d:da:
74:63:0a:81:14:78:ef:60:f3:1e:89:08:d5:12:be:45:45:d4:
53:a0:dd:fe:2f:1c:48:86:ce:4c:9d:db:e0:4a:f3:2b:54:69:
23:90:06:a6:30:fc:ee:db:7c:03:36:8d:00:a4:c3:5c:01:57:
96:68:eb:9a:5b:6e:76:c3:5a:94:01:05:02:89:53:a6:0c:a4:
7e:8a:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:27 2025 by rpki-client