Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.cer (raw, json)
Hash identifier: Bs+O7nhTsy+yMnncd/NG1DCUQLtm49UK8zszC6MR3/8=
Subject key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946934441EF61264A8957883A6167C89A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 09:03:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62068
IP: 5.182.208.0/22
IP: 45.14.224.0/22
IP: 45.87.41.0 -- 45.87.43.255
IP: 45.148.120.0 -- 45.148.122.255
IP: 62.68.71.0/24
IP: 91.226.227.0/24
IP: 91.230.49.0/24
IP: 146.19.248.0/24
IP: 185.224.128.0/22
IP: 185.244.36.0/22
IP: 2a0d:2400::/29
IP: 2a0d:2780::/29
IP: 2a0e:16c0::/29
IP: 2a0e:1740::/29
IP: 2a0e:2000::/29
IP: 2a11:b240::/29
IP: 2a12:a8c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:34:44:1e:f6:12:64:a8:95:78:83:a6:16:7c:89:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 09:03:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:4b:0b:ac:dd:1b:97:aa:95:c8:4f:e9:49:
72:e7:92:ce:ba:d5:5a:f3:2b:28:3e:d4:68:d8:7a:
b7:42:97:f2:d4:7c:ba:a9:78:dd:5e:30:d2:13:81:
4c:6a:e8:3e:70:6b:7d:8a:52:24:30:f8:f1:22:0c:
ab:a1:bc:50:61:be:4a:2d:a2:8b:1e:65:cf:07:57:
6f:7b:c1:c8:31:2a:0d:fa:27:5f:dc:9f:33:97:aa:
59:e9:d3:4f:59:95:6d:35:a4:68:74:1d:e8:76:85:
6c:ee:40:e0:1e:42:f3:0b:75:80:68:f7:0a:ca:fb:
e1:96:88:99:cd:cf:50:d6:a0:96:30:82:53:06:14:
b8:3c:97:f3:10:4b:ad:4c:81:d8:e8:86:e2:62:57:
5e:ff:e7:fc:b7:c2:d4:06:23:67:58:a2:10:7e:ae:
5d:ba:49:79:91:01:a0:a0:1d:1c:f0:67:ad:3c:31:
ba:33:e6:de:50:d7:44:31:18:ba:fc:87:54:16:94:
a2:45:63:30:5c:51:ef:e0:2f:6a:88:60:50:5f:b8:
89:0c:44:21:13:d9:f7:6e:6e:cf:ed:00:27:a2:8d:
66:23:41:4a:f7:a1:4a:df:92:01:a4:e7:22:cb:e2:
8f:5b:ad:d1:34:91:88:55:3a:94:37:cb:4b:c3:06:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
45.148.120.0-45.148.122.255
62.68.71.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62068
Signature Algorithm: sha256WithRSAEncryption
72:d8:e0:1b:ba:30:37:03:b3:39:bd:12:23:e1:d6:79:65:c0:
11:09:20:4d:ac:41:51:9d:08:9b:18:b1:bc:f1:41:c7:cc:53:
f8:fd:0a:33:5a:6e:eb:03:57:c1:53:78:b4:7a:b8:1c:83:ed:
54:ac:2e:af:d6:5c:94:5a:c1:aa:59:07:ae:cb:96:87:cc:b5:
4e:27:12:c4:60:ac:ab:6d:b9:98:f7:89:cc:cf:80:b7:67:d1:
32:4e:38:2e:bb:98:33:4b:76:6a:0e:6c:c6:8f:59:1b:21:49:
4d:0b:13:93:fc:8e:da:95:a8:b2:c5:46:87:ec:f1:dd:d4:4c:
ec:bd:2b:39:2b:b5:9b:ef:aa:f0:25:e8:2e:dd:65:f0:cc:e7:
7f:b0:eb:88:83:52:65:c7:ac:49:66:7e:37:3b:04:a5:c1:67:
2f:23:98:86:82:bc:cf:ba:94:a7:de:c3:4e:40:1b:1c:e2:7f:
de:c2:73:b0:69:fa:ab:be:23:ce:dd:53:c6:c8:f4:43:1f:4d:
f0:4c:81:ab:b1:66:c9:57:6b:52:db:33:95:2f:63:62:c7:23:
e8:3e:7c:14:a5:b1:20:74:6c:95:a6:86:60:01:fd:56:20:a1:
7b:75:dc:a8:77:f6:f3:5e:b1:ab:3c:56:6d:9e:07:16:de:f8:
75:82:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:29 2025 by rpki-client