Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.cer (raw, json)
Hash identifier: W97deaLsJLsHlF3pEU/cKtc05HPdEVYfhFZ45zGkMOM=
Subject key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B340F6D5CA3847B2F5597425AD2FD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49282
AS: 198243
AS: 209020
IP: 85.194.204.0/22
IP: 95.175.96.0/19
IP: 164.215.32.0/21
IP: 185.18.76.0/22
IP: 185.162.156.0/22
IP: 2a03:e580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:40:f6:d5:ca:38:47:b2:f5:59:74:25:ad:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:28:aa:66:b9:27:4a:f4:0e:33:a3:26:41:
d2:70:1f:fd:14:8c:b8:82:f8:2b:a1:00:6f:fa:1f:
67:82:b8:f2:15:05:25:23:fc:43:0a:1f:55:09:08:
7b:20:7a:e5:f0:29:d1:28:70:56:41:cc:1c:a5:22:
a7:6d:1d:59:3a:04:6b:0d:ac:f2:3f:b4:b6:ab:2b:
1c:c0:63:02:9d:74:60:f5:c9:6b:91:bd:89:57:5c:
ab:14:6a:a0:75:61:7d:9a:73:13:7c:34:4c:c6:8d:
4a:f1:91:42:fd:b6:db:85:8a:a3:00:4b:c2:1c:3a:
87:7a:de:c2:97:3b:f0:82:71:8c:0e:4c:7c:b6:c2:
20:17:a4:ac:d2:1d:a0:06:b5:66:41:37:01:8a:4a:
e9:c6:b2:f7:a6:9a:f1:b4:96:d0:ac:f3:da:30:9b:
fe:0b:07:81:49:94:4c:b8:5a:68:58:ad:ad:8c:e6:
b8:e2:bd:5a:bd:3e:97:57:93:f7:dc:30:2c:0d:0c:
b6:71:9d:55:14:06:ba:d5:0f:5b:e5:fd:c3:e0:50:
21:fa:b7:a3:f2:45:63:0e:77:8c:b5:41:7e:ef:25:
5b:3a:1e:e6:9b:49:da:b7:39:21:a2:66:20:5f:69:
87:ba:d0:2c:aa:dd:26:6e:8b:b8:68:59:38:60:7d:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.204.0/22
95.175.96.0/19
164.215.32.0/21
185.18.76.0/22
185.162.156.0/22
IPv6:
2a03:e580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49282
198243
209020
Signature Algorithm: sha256WithRSAEncryption
08:d3:53:35:e6:45:9c:32:7f:f9:37:79:31:e3:bb:42:c1:00:
0b:51:68:82:ad:32:fb:e7:73:55:41:ab:dd:3d:01:99:02:1f:
e3:66:a1:a6:42:67:21:88:46:bc:f4:ad:a7:14:41:a6:ea:27:
1a:15:d9:73:68:8c:27:81:cd:66:d3:8d:35:04:a1:df:93:56:
31:54:66:03:35:36:99:ff:ed:f8:0b:96:4c:2b:b5:a4:eb:f9:
b0:b0:f7:3e:6d:eb:e7:b8:54:7c:4c:e6:a2:ab:92:d4:79:96:
00:e3:76:3b:44:58:49:c3:0a:26:ba:df:fe:6e:4a:3b:54:4c:
e8:67:6f:9f:e8:28:5e:f6:3d:93:92:17:97:e7:18:9d:df:b9:
57:fd:90:1a:2e:26:f3:e6:b3:47:51:84:21:f4:37:41:2e:be:
b5:5f:5b:2a:b9:f2:7a:c0:99:29:d6:4f:b3:fa:84:16:ee:e7:
57:2c:1a:d2:fb:0e:76:fe:44:4a:d8:fa:e9:68:ed:ee:5f:18:
fa:65:ef:1b:17:73:ae:89:00:f1:ba:2f:d6:8e:d1:af:ac:7d:
63:8c:44:9f:25:1c:4c:4d:be:7f:83:9c:3e:01:86:54:6b:3b:
68:2c:52:0b:a9:4c:bf:a3:85:e7:61:84:aa:d5:ea:ea:1b:83:
5e:20:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:53 2025 by rpki-client