Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer (raw, json)
Hash identifier: rOMszgA/idxAgxmL0PHAMVccmVh0c8loJOYA+46IpvE=
Subject key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FBCF8ED32CB073D8E0A7F0D637F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15752 -- 15753
IP: 149.177.128.0 -- 149.179.255.255
IP: 149.180.128.0/17
IP: 149.181.128.0 -- 149.185.255.255
IP: 149.187.0.0/17
IP: 149.189.0.0/16
IP: 149.191.0.0 -- 149.196.255.255
IP: 193.29.160.0/20
IP: 193.36.173.0/24
IP: 194.53.121.0/24
IP: 194.127.154.0/23
IP: 2a12:3680::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fb:cf:8e:d3:2c:b0:73:d8:e0:a7:f0:d6:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:52:d3:e9:1b:0b:9c:0f:90:09:33:1d:c4:
c2:4b:db:09:4f:de:37:ea:f8:66:a6:d7:b7:07:bf:
cf:8e:55:3b:75:60:29:b3:8d:48:00:73:0b:10:31:
2b:f0:00:6f:f5:1d:c0:6f:dc:28:d1:ec:2c:d4:e0:
96:ea:79:90:03:f0:6d:40:4e:92:a2:11:78:f3:86:
36:ca:f2:7f:6f:ab:db:17:cf:5f:60:3c:d9:5f:56:
71:3e:7b:bb:40:ed:24:ab:d5:05:65:8c:10:d0:31:
a7:cc:b8:de:b3:06:c6:16:39:70:47:a7:fa:3a:59:
c6:d7:6c:1d:d4:72:a5:d0:3e:6c:23:dd:c4:c4:22:
52:7b:ca:b3:52:1c:df:30:74:78:f0:2f:99:e6:be:
9e:2e:13:13:71:a1:a8:43:94:e9:71:a8:2d:a2:28:
08:b3:c7:b4:8d:46:4b:ee:1c:3b:8a:f6:ef:08:3f:
aa:96:ab:75:a4:1c:84:18:d7:03:6f:fa:81:a1:80:
04:d7:88:50:d3:1b:e6:02:a5:8c:52:1e:cd:86:44:
b4:1c:fb:19:c7:cd:b4:b3:94:28:ed:1f:3b:ab:15:
15:7c:61:ff:eb:fd:32:56:b4:b6:28:df:23:44:e9:
58:40:fc:07:b3:54:4f:19:b2:2a:6b:06:d0:a7:da:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0-149.179.255.255
149.180.128.0/17
149.181.128.0-149.185.255.255
149.187.0.0/17
149.189.0.0/16
149.191.0.0-149.196.255.255
193.29.160.0/20
193.36.173.0/24
194.53.121.0/24
194.127.154.0/23
IPv6:
2a12:3680::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15752-15753
Signature Algorithm: sha256WithRSAEncryption
2a:cc:11:93:6c:78:0b:2a:31:d0:ea:03:b7:55:c6:3a:c6:8c:
c2:1a:04:68:90:7a:b1:2a:83:2e:50:66:18:c4:39:a6:19:1e:
e2:97:a1:a1:55:e6:14:3d:02:e4:66:83:f8:5c:a4:03:26:8a:
e3:05:f3:fb:5e:87:e3:a5:e1:b8:f7:12:61:5c:bd:b9:8f:ba:
68:06:d5:d1:b8:8b:bf:59:37:b0:b9:01:4b:8b:63:d2:18:52:
73:5a:80:1f:ea:52:c7:81:44:2a:95:7a:cf:70:57:28:1b:2b:
b4:fc:a4:bc:d7:0a:ba:bf:cf:23:e3:bc:db:5c:1c:ef:95:a2:
a9:15:89:1c:93:4b:1e:f0:b8:5d:8d:88:66:11:34:85:54:2b:
d7:fa:6e:1c:5b:e9:c3:8e:54:bc:69:8d:4b:61:a7:e4:06:45:
fd:a8:95:65:7a:09:5a:29:d3:90:c8:eb:f7:a1:e6:0d:ef:77:
17:e6:84:4e:b8:a3:06:c1:df:b4:7f:0a:3c:bd:c8:bc:b1:5e:
cc:f5:b4:83:25:52:2e:30:0a:54:be:18:40:47:52:0a:76:53:
5a:b3:d2:06:75:ff:3d:6f:43:72:2c:a1:6f:33:a1:50:fe:55:
2f:60:02:47:af:74:04:bb:8e:9f:e2:36:47:78:39:bc:5b:98:
2c:a1:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:47 2025 by rpki-client