Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.cer (raw, json)
Hash identifier: yzSWlZxU9v7I58/LxSuMvkRQ4mmTlyZqQkmMpkw2A14=
Subject key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23217AFF4F7250B06216E8EBE84C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48847
IP: 109.233.16.0/21
IP: 185.12.220.0/22
IP: 2a03:6900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:17:af:f4:f7:25:0b:06:21:6e:8e:be:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f08fba5263519b7c3a2155c69878217776defba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:23:06:c7:c5:45:d2:90:f9:2b:87:19:42:
55:18:6d:d6:b1:c2:8a:2e:1d:39:d8:b1:84:a4:92:
e1:d9:77:ee:a8:2e:d7:ae:b4:f7:04:93:8e:8d:ad:
15:3a:31:fd:68:ee:6e:d9:70:e0:f4:15:ea:4e:05:
fc:6f:50:de:06:64:d8:24:af:2a:9d:d0:0b:59:4f:
f6:e9:a8:df:a3:7a:e7:cc:e0:13:a3:e1:f5:ad:72:
20:bc:2b:24:e6:b9:2f:11:72:b5:d8:01:6f:b9:7b:
90:a8:c6:b1:07:07:8d:01:13:b2:ea:3e:e5:51:52:
b7:fc:b7:47:d7:fa:c4:d7:a8:9d:4a:8a:ac:9a:23:
cf:80:e9:5b:1c:58:15:41:65:75:13:46:fe:68:79:
d6:16:dc:72:4b:2c:10:ff:c3:3a:ed:a0:45:d9:6d:
21:33:de:ea:a2:46:b6:91:31:a2:d9:70:80:a2:be:
a4:b9:70:a0:29:2a:af:31:bd:f0:44:a9:88:31:0b:
fe:6c:78:45:04:b4:62:ab:a6:4f:e1:ad:c3:b1:5d:
73:3f:81:64:90:06:22:a3:ac:96:0c:ef:5a:32:67:
c4:7d:bf:55:ba:e8:9b:33:cc:b4:31:6a:5b:aa:b0:
e7:94:28:57:f7:f0:b6:6e:cf:29:df:69:4c:35:f3:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.16.0/21
185.12.220.0/22
IPv6:
2a03:6900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48847
Signature Algorithm: sha256WithRSAEncryption
66:b2:b4:d3:13:76:27:95:c1:b2:a7:fb:cb:67:a5:8e:3e:91:
92:f1:57:fd:4c:19:53:83:a8:f8:0a:3d:83:2c:3b:e3:06:24:
3e:aa:ae:45:82:28:25:c7:11:ed:ca:52:b7:5f:2e:f7:07:db:
0f:76:8c:a3:69:cd:23:f3:3f:dd:73:a6:9c:43:fd:b8:9a:f7:
67:40:fd:b2:6f:f5:ec:9f:ed:ae:97:2c:fb:1e:21:70:a2:b9:
75:17:5a:79:9b:4b:e9:93:93:e2:1f:11:1e:ae:98:96:48:e4:
51:73:9d:5b:df:46:da:8e:ce:d8:ee:6e:bd:41:ef:a6:91:5d:
52:71:29:da:ef:db:1c:5d:23:1e:96:bd:d3:d9:e7:67:63:92:
5e:97:d5:d4:27:9a:d1:2d:31:fb:0f:3d:14:7b:2b:1c:0d:eb:
d8:26:c8:5e:47:18:a5:f1:27:51:85:7e:1f:26:20:f8:b1:37:
cf:7e:2e:08:c1:41:73:28:70:cc:a9:f5:22:71:d8:60:22:e6:
85:40:97:98:27:cc:ca:42:be:16:33:ed:c0:cc:3f:25:fe:1f:
26:d8:99:0a:6b:21:34:c5:50:17:5a:b6:61:a6:0a:a8:92:48:
5b:14:27:71:00:12:3b:eb:34:fe:7c:e0:ea:17:29:12:db:af:
16:b0:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:43 2025 by rpki-client