Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.cer (raw, json)
Hash identifier: r9MxbcBFoSO4Sry38mR2wSJhTXkl4N2UpsOgIqlDk0I=
Subject key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425208879755CD2F6027A46606D7D6137
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62211
IP: 185.43.228.0/22
IP: 2a04:9780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:88:79:75:5c:d2:f6:02:7a:46:60:6d:7d:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:73:c5:ac:1a:f1:d2:cd:73:a1:e7:6f:a4:
8e:12:f1:6c:9a:aa:d1:9c:24:6f:44:30:ce:10:27:
7c:df:b2:30:0a:cb:16:80:2a:de:71:12:e3:32:aa:
4d:db:8d:33:2d:bd:cd:67:da:10:9e:1c:f5:10:43:
8d:76:96:85:22:a9:93:8e:ef:68:eb:d2:36:88:61:
23:89:ba:b0:e5:b9:b3:02:33:7a:c0:af:c4:4c:e6:
df:35:37:0b:d4:f1:1e:10:69:0a:19:60:2e:26:e2:
e2:e6:ea:d1:56:5a:bc:3f:fe:9d:0c:1c:47:aa:07:
e0:f3:e3:e9:8a:c0:d3:54:35:17:14:b2:78:0f:84:
31:52:7a:ca:15:dd:69:f6:17:8f:45:70:1b:0e:1a:
f0:b0:aa:33:8f:e6:a8:53:15:36:12:5b:5f:85:67:
86:61:f5:c5:61:0b:f1:75:4a:91:b1:e1:fb:7c:1b:
52:73:99:2a:cf:66:78:39:ea:06:9a:f2:75:4a:0b:
f2:74:a8:55:8b:6c:46:e7:5f:7f:fb:17:de:ae:24:
46:0d:1c:22:6d:2d:dd:a4:df:cf:66:90:80:c0:34:
71:9d:f6:a2:92:96:b3:f5:c5:44:3f:7f:29:7a:fc:
b9:b7:20:37:b1:b3:a0:19:c4:1c:f7:0a:47:49:d7:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.228.0/22
IPv6:
2a04:9780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62211
Signature Algorithm: sha256WithRSAEncryption
61:7a:6b:21:a5:85:07:bf:e5:69:4f:26:f9:44:59:36:c2:5f:
87:b6:13:75:9c:9f:1c:de:ba:72:22:57:b7:3e:b5:c2:8e:89:
ef:f3:e7:55:03:46:39:51:7e:9d:ae:d9:9a:d8:0b:c8:7e:4d:
a7:39:10:32:77:c9:21:73:eb:ba:b7:de:0c:cc:45:13:84:6b:
f1:14:ec:82:e0:57:fd:02:72:bb:24:6f:a0:0e:9e:9f:3c:29:
c7:ab:b9:f4:f6:35:c1:66:2e:e1:71:82:27:01:8f:b5:b3:22:
23:61:10:8c:0d:f4:4f:ff:ad:07:29:95:f3:46:f8:a0:7e:87:
0a:4a:bd:f5:67:00:4e:fb:6b:b8:c6:78:43:54:26:3c:82:2b:
c8:36:52:89:71:eb:08:0a:bd:f4:15:bd:d3:48:6a:48:bc:0e:
49:cd:9b:dc:d1:83:9c:87:89:a8:c8:0e:9f:28:4e:94:4d:67:
a1:28:5c:20:0a:a1:f2:4c:0d:2c:94:de:c2:48:c3:d0:0f:1e:
1f:08:58:e0:84:8c:49:d0:21:c8:8d:cd:2b:8c:59:04:8c:5e:
30:5a:25:36:6b:c1:c6:f5:75:96:92:e2:fa:b5:8e:f1:11:cd:
3e:67:05:64:e6:8c:59:26:72:1f:6f:22:16:d9:1a:0a:fa:79:
24:65:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:43 2025 by rpki-client