Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
File: 8AoiTeba0aHtExtflbgyMaKryvE.cer (raw, json)
Hash identifier: gftLYh25//TJmWmML2mIGxZ20z9bi18HtnhjUotNtm4=
Subject key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F84C234E9187AE68029D560989BE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43362
IP: 78.108.80.0/24
IP: 78.108.82.0/23
IP: 78.108.86.0 -- 78.108.95.255
IP: 83.220.164.0/23
IP: 178.250.240.0/21
IP: 185.84.108.0/23
IP: 2a02:dac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:84:c2:34:e9:18:7a:e6:80:29:d5:60:98:9b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:d4:e5:1b:ac:df:b3:16:f0:6e:d6:d6:68:
0c:7e:68:5a:fe:f8:04:04:f2:d3:76:f5:7d:eb:f9:
25:6c:ee:c1:5e:21:6f:56:13:e4:76:6a:58:1a:b9:
39:aa:7e:8f:ee:cc:79:2c:fb:7f:44:bc:7e:7a:e2:
dc:a4:31:81:9b:70:c1:49:1a:fb:bb:bf:37:44:5c:
81:14:dc:0b:78:d4:32:31:ff:3e:24:b6:ce:1c:cb:
df:32:43:03:db:2d:90:0f:71:64:1d:fc:a8:3f:25:
d6:af:c8:8e:97:7a:61:70:6e:ce:c7:a9:9c:ca:f6:
68:79:ba:2c:a4:75:cd:90:6c:35:b4:36:a6:39:f5:
fd:2b:6e:f0:c0:43:5c:23:39:14:33:b0:7a:48:7e:
21:02:39:11:72:a8:ec:71:6f:7d:02:05:bc:e5:f1:
f4:4a:07:bc:bb:32:82:bb:27:f6:aa:78:c6:df:d9:
74:e7:42:ba:2d:56:f5:a1:dc:00:d9:e6:96:db:53:
f8:3d:6e:fb:58:e1:b2:f9:f7:86:a1:9a:e3:8d:8f:
d6:ab:f2:ce:54:3f:14:d1:97:f4:a3:5c:f5:28:97:
47:0d:ee:b4:91:bb:47:3b:92:a7:3d:05:13:e4:f1:
00:38:27:fd:7e:4f:40:fe:56:0f:25:ec:91:b7:36:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.80.0/24
78.108.82.0/23
78.108.86.0-78.108.95.255
83.220.164.0/23
178.250.240.0/21
185.84.108.0/23
IPv6:
2a02:dac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43362
Signature Algorithm: sha256WithRSAEncryption
a0:22:55:e7:53:da:88:c7:fc:dd:21:9d:fb:00:f8:cf:a2:1e:
1e:40:4b:c4:dd:b0:d5:e3:d0:28:6e:4c:1c:c0:36:c3:11:99:
71:90:19:87:a4:a1:2b:32:ec:30:b4:be:27:39:79:93:ae:43:
fb:3b:37:b0:ee:03:65:7b:07:9f:2b:4b:76:78:ef:72:be:48:
70:70:d5:87:3b:57:c2:21:07:5b:9b:52:6a:8d:44:f2:86:16:
92:79:03:78:f8:29:36:73:a2:77:39:ca:c4:a2:21:f6:81:2b:
d3:54:70:95:d2:d8:5a:b3:94:0b:ed:a3:71:10:af:95:21:94:
8c:24:11:8a:9e:cb:0d:0d:f7:be:66:fe:d2:59:57:cf:99:17:
4e:40:f5:39:fb:00:0a:84:e6:9a:83:f5:c9:e5:be:d6:85:89:
84:b6:c0:c4:15:05:0d:6c:f4:b6:90:d0:49:20:91:16:32:93:
25:11:9d:aa:cf:69:9b:09:7c:53:ae:4a:6a:9c:54:10:a3:84:
06:7e:74:5e:1a:ad:0c:21:00:51:d8:02:ca:e6:c7:04:6b:9f:
e9:87:e8:7f:eb:cc:b5:8d:3e:27:84:f9:11:e8:79:19:41:07:
1e:fc:b7:c7:a1:38:55:04:aa:2f:fe:4e:0c:85:0b:15:d5:58:
11:fc:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:53 2025 by rpki-client