Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
File: 7cOYioT5-7QYXqSsW3IYRcooA34.cer (raw, json)
Hash identifier: ARC9E1jr++yAmTNhgPHHtJ4fm+woI7e9mKB8Uyi2rEo=
Subject key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9AEA252B953B9D60B7BB7DAE4FD98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198398
IP: 95.156.216.0/22
IP: 185.184.20.0/22
IP: 194.110.155.0/24
IP: 2a0b:4180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ae:a2:52:b9:53:b9:d6:0b:7b:b7:da:e4:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:87:6d:8b:83:bd:f6:4f:42:ba:4a:1e:c5:
03:f6:89:1e:a1:36:97:a8:c1:ce:29:45:5d:31:96:
e0:77:6a:42:fc:1a:f8:7e:c2:ea:b9:a5:b6:dc:ae:
4b:6a:f6:b8:d0:40:ec:40:d7:c9:61:f3:d8:82:20:
c4:46:6a:12:b7:e2:86:65:44:9f:41:eb:37:bd:cc:
5d:c2:9c:77:94:4a:1e:a2:79:89:45:aa:a2:3d:e6:
5b:37:08:70:c7:37:da:6d:cf:a7:e8:9a:b1:af:49:
99:b1:11:94:9e:6c:07:a5:1b:08:f7:14:48:bc:ec:
df:ea:b8:50:56:da:98:13:f8:95:a3:3a:a9:b9:9b:
45:81:38:7e:0b:aa:a3:04:e6:d0:70:b3:09:bb:4f:
0b:77:79:97:10:d9:0d:f7:2b:4a:24:6e:78:cc:cc:
5e:a2:a2:65:11:20:a6:01:e4:f9:e0:8d:bb:cc:38:
10:f5:ac:6c:90:84:d4:d1:d2:66:43:85:49:16:a4:
3f:84:d0:ef:93:8a:c5:5a:c4:10:a0:5c:27:6d:2e:
57:de:4b:b5:80:b0:5d:63:28:23:e2:aa:a0:87:19:
fe:e4:c8:1d:5c:27:88:d2:94:95:9c:f5:c2:99:8c:
85:a9:19:7d:5e:84:b7:b6:77:b9:f4:fc:7c:a1:65:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.216.0/22
185.184.20.0/22
194.110.155.0/24
IPv6:
2a0b:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198398
Signature Algorithm: sha256WithRSAEncryption
60:68:2a:f4:ba:bc:12:f3:f5:69:74:a0:43:15:2e:a3:65:53:
1d:fa:ee:08:2e:98:2f:b0:0c:2b:36:4c:30:a2:25:5d:e5:15:
9e:37:f2:23:8e:06:47:f4:57:ab:89:7b:73:d8:c8:10:3b:5f:
90:e6:14:28:41:54:d6:14:99:7a:08:96:ff:2a:f0:9c:73:1f:
64:1d:15:3d:27:f5:f2:f4:d4:85:a2:f6:7e:d7:25:69:fb:e3:
74:17:b0:32:ed:f6:b7:bd:07:89:43:0b:7b:be:4e:9f:29:4a:
b3:a7:b6:13:13:d7:97:01:b3:7a:9f:dd:c0:7f:46:07:55:6a:
0b:04:4d:12:46:d4:8e:5a:6d:c3:e5:b4:2e:e8:78:80:a2:61:
62:88:83:7b:cb:14:28:c5:68:82:61:8d:12:5f:c7:af:67:0f:
db:f0:5b:c6:1e:e0:8b:fe:1d:13:35:71:16:13:27:ac:33:cb:
6e:29:96:36:3a:72:7f:2b:de:1a:d2:55:2f:70:08:7a:2f:b2:
87:13:91:28:83:01:fa:66:4d:a2:a2:8e:22:2c:0f:62:a7:6f:
e8:02:20:ee:d1:40:f7:24:02:f2:0c:e8:3b:01:05:af:73:f0:
76:d4:f6:ae:99:83:0a:c0:b5:97:41:72:1b:fd:3a:5e:19:32:
dd:79:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:06 2025 by rpki-client