Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.cer (raw, json)
Hash identifier: 482cI6qQd1UXqcGSsJZxIN6iipOgIhWdAwypHlN76Zc=
Subject key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F362859BD620C63586FC6E39F87E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210892
IP: 5.1.45.0/24
IP: 37.235.120.0/21
IP: 79.135.124.0/22
IP: 94.198.80.0/21
IP: 109.224.223.0/24
IP: 109.224.232.0/24
IP: 213.254.180.0/22
IP: 2a11:2b00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f3:62:85:9b:d6:20:c6:35:86:fc:6e:39:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:30:b0:01:51:ce:6b:31:5f:30:5c:b1:12:
f9:a1:50:ce:d1:7b:7f:5c:a5:d9:a4:e7:72:98:67:
32:56:be:ec:ba:d9:88:b6:02:72:7c:51:da:b8:0b:
69:de:8c:b3:b3:c1:b1:5a:3a:e7:89:ea:41:25:ed:
db:f2:a0:10:90:d7:c7:8d:f1:16:39:c8:fb:0f:7e:
6a:bc:91:64:f5:0c:cf:e0:b1:23:46:0e:d1:35:b6:
98:1c:be:f6:74:a1:b9:e4:8f:c2:1a:91:d8:59:2e:
78:16:64:72:1b:b3:db:b0:63:7c:44:2c:5b:90:fb:
d8:69:c7:d6:09:3f:0d:a9:61:db:6a:45:c4:62:a9:
8b:db:19:47:4c:10:7f:b4:16:d7:b4:96:8e:e6:01:
a6:8b:20:6d:fb:b9:90:1f:26:43:1d:7a:f8:8c:17:
7b:98:91:f5:eb:9f:0d:18:ae:7c:a0:78:c8:23:ce:
14:1d:30:48:30:12:60:33:7c:8d:2c:cd:4e:13:82:
8c:a6:12:4b:76:b9:16:a0:d5:92:4d:46:84:f7:8e:
a1:91:24:7b:47:56:c4:ec:2c:1c:14:a9:57:31:a6:
98:72:51:8a:82:0c:b4:76:44:f8:de:de:41:db:45:
67:91:b3:e9:03:09:ce:13:1b:48:f7:9d:68:64:bf:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
37.235.120.0/21
79.135.124.0/22
94.198.80.0/21
109.224.223.0/24
109.224.232.0/24
213.254.180.0/22
IPv6:
2a11:2b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210892
Signature Algorithm: sha256WithRSAEncryption
28:d7:c8:4f:5b:64:54:26:44:36:c1:7b:d4:98:7b:24:b0:13:
19:7c:0b:db:7f:04:5b:48:db:2d:4c:02:53:f1:37:71:d7:89:
6a:56:cd:e4:e7:98:cb:cf:86:a8:c7:50:e0:2e:9a:2d:5f:41:
e6:87:cd:7b:56:8f:f9:43:e2:df:b7:67:9c:40:ca:ee:ae:a8:
05:c1:9b:fe:1d:37:97:b8:8a:f3:6e:a9:b3:e8:09:c1:78:e9:
0e:71:06:a1:ff:2d:93:38:dd:3f:a6:33:6a:4d:62:43:57:ab:
3a:aa:6a:74:fc:e8:17:ea:37:2f:ee:d5:64:ad:af:92:72:0a:
02:54:dc:e5:d2:ec:bc:51:95:c7:ed:ae:9d:63:ae:cb:1d:b6:
94:13:c7:aa:94:69:f7:5d:51:3b:c5:a2:75:a3:37:52:62:6a:
ac:78:f3:28:9d:f3:a1:30:08:40:f1:8f:aa:50:b8:f1:77:6b:
1b:ae:f8:38:6b:8b:f6:5f:9c:35:52:c6:88:3f:f7:fd:03:6e:
6c:1c:b5:7b:8e:1e:7a:72:34:99:db:2a:cc:d8:6d:12:0f:a6:
95:0b:2b:95:16:c4:0e:ca:cf:86:7c:86:56:a6:16:6f:d7:a7:
61:92:4d:20:f0:97:3f:e5:0a:5b:db:5f:28:bb:fb:cb:db:85:
f2:15:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:03 2025 by rpki-client