Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.cer (raw, json)
Hash identifier: 1t/2ygUK1T/Dw+EUFM0FMKEPZuHi6j+VurD7FQ09oo4=
Subject key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427481B83A933D4CF3AE6759D2CF52E0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12462
AS: 13186
IP: 185.123.120.0/22
IP: 212.66.160.0/24
IP: 212.80.160.0/19
IP: 213.170.32.0/19
IP: 2a0c:f5c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1b:83:a9:33:d4:cf:3a:e6:75:9d:2c:f5:2e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d1:e8:6a:e9:7d:26:15:18:6b:73:64:e0:d1:
a8:52:97:29:04:ab:6f:25:e8:17:4b:17:85:16:93:
5f:7d:7e:bb:3f:ae:bf:91:b4:07:dc:aa:b7:09:f5:
50:92:9b:43:e6:a0:22:24:ed:92:9b:dd:cf:d3:c4:
fd:26:cc:8b:8b:a5:5c:19:bd:30:b8:28:ed:69:0a:
f8:30:6f:e0:2b:75:1f:3a:9f:2a:a7:e5:0e:91:28:
ff:1a:27:8c:5c:3f:44:86:64:75:1e:7b:a8:34:33:
af:93:1d:bd:bd:ad:74:d6:3a:42:aa:0e:20:cc:00:
0c:dc:b1:09:90:bd:e0:42:7e:e1:2a:da:4e:a4:4e:
85:f8:9a:f0:36:c1:8f:b6:96:3e:25:5d:88:48:ec:
f2:2f:e8:bb:93:d8:97:74:81:1a:f9:61:a2:90:62:
00:e7:2c:04:be:4a:c0:c2:27:46:42:06:e2:fb:9e:
6a:f6:9e:84:91:e9:90:29:06:c9:d5:9b:ad:a9:9b:
82:dd:ec:ce:76:a6:34:6d:0a:80:0b:0d:69:6a:bb:
15:82:95:e5:e3:17:3a:5c:1f:82:7f:f8:aa:e7:61:
a0:d1:bb:06:c7:87:1f:53:66:9a:12:d8:21:d3:5c:
a7:c6:f3:85:93:c6:56:69:87:ec:04:3f:2d:57:32:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
IPv6:
2a0c:f5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12462
13186
Signature Algorithm: sha256WithRSAEncryption
50:22:15:77:d0:35:89:70:74:23:25:52:4c:59:f1:0e:15:5f:
8b:fd:b6:ad:fc:3c:51:f5:8b:47:39:96:52:36:fe:1b:76:1b:
28:42:6b:7d:ed:27:b9:7e:1d:90:a6:99:3c:20:a3:de:91:18:
d2:1a:23:41:e2:c4:f9:cd:0c:ab:95:f3:de:14:21:51:25:be:
17:e4:11:e7:bf:ec:4c:8b:ef:6f:c6:77:1a:21:bb:7e:44:76:
ad:fd:16:45:9b:3a:5e:f4:38:a8:5a:60:2d:8a:d3:e4:1a:c4:
2f:f9:52:36:71:57:d5:d8:95:58:09:f9:7e:ae:2d:fb:a3:31:
5e:2c:5c:e7:db:d7:a9:b2:7d:df:40:00:3f:0a:75:43:dd:09:
20:8f:b6:e3:25:bb:3f:05:27:0d:9b:1b:ea:5b:04:e7:8e:f1:
62:02:4e:44:a7:f3:e4:62:f2:1b:6e:50:3f:93:c4:e8:65:85:
c6:ef:52:20:2f:80:9c:da:98:66:ae:21:db:bc:93:35:f8:56:
69:04:3a:0e:77:ad:97:ab:eb:ca:47:8b:aa:35:ea:57:92:af:
60:35:9a:d7:67:a8:7b:98:a3:8b:da:81:c5:a7:65:10:56:4c:
d0:6e:af:c5:1a:a4:5d:25:b0:a3:51:2e:f4:60:0c:ae:5c:c4:
fa:b6:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:49 2025 by rpki-client