Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
File: 9O9duhAKkrJETz5RLQGlksAZUcI.cer (raw, json)
Hash identifier: JOyjqbkq1x9uCcAgenv8jqoVWXrWKtQyLjDzLOEnFPo=
Subject key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A415302142E858CBE7E68DFDBED52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57558
IP: 45.129.248.0/22
IP: 45.148.212.0/22
IP: 185.15.168.0/22
IP: 185.197.8.0/22
IP: 2a03:b140::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:53:02:14:2e:85:8c:be:7e:68:df:db:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:f8:f0:86:11:fd:41:5c:d1:d4:78:37:69:
35:f8:72:e1:97:12:e4:ea:a9:17:6c:3b:01:39:32:
bd:82:92:7f:23:c9:4e:d4:3f:b6:16:df:81:3b:6d:
d3:f2:6a:62:3f:cb:51:e1:63:be:ec:33:65:33:02:
eb:dc:e5:df:6e:ea:25:8d:df:96:12:ba:ce:b1:d1:
18:66:6e:6a:8e:f3:08:c0:62:89:3a:5f:fd:91:84:
5c:7c:63:bf:d5:f3:b0:1b:41:22:c4:39:d3:85:f9:
1e:30:b3:14:44:59:41:f3:8a:9a:95:cd:e8:e6:07:
07:3f:e9:7e:85:5a:32:2d:99:63:6e:08:ca:80:82:
b8:42:c8:cf:05:62:f9:a0:14:ba:09:fc:f2:96:8f:
76:75:e8:fc:8b:6b:85:a9:91:73:f6:de:74:28:32:
3b:96:d8:83:52:70:64:ef:d8:e7:81:b3:38:14:31:
6b:d9:60:cf:32:9f:e9:ce:18:67:d5:85:6d:01:22:
1e:31:76:72:9e:dd:8a:24:7f:90:0c:8d:6e:99:25:
50:64:74:c6:0a:9a:4e:53:18:35:ed:9c:ea:65:3b:
36:99:1d:df:e5:e7:a3:92:72:c8:19:5f:ee:bb:4d:
cb:15:ae:49:56:fd:c2:97:47:5e:99:e1:3d:98:e1:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.248.0/22
45.148.212.0/22
185.15.168.0/22
185.197.8.0/22
IPv6:
2a03:b140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57558
Signature Algorithm: sha256WithRSAEncryption
a4:2a:2d:6a:e8:39:22:7b:0a:62:8b:c8:0b:c6:ce:ab:31:14:
88:9a:39:5a:a6:8b:9c:43:21:18:a8:bb:b9:1a:8a:d4:33:29:
29:04:73:60:72:b6:2d:fc:97:b7:3c:53:fc:52:35:2f:a1:ec:
89:1b:c6:57:70:f2:81:dd:1a:d7:6a:0d:40:17:d5:1a:02:02:
e6:66:49:0f:68:73:5c:6e:63:48:82:a3:38:16:48:d9:d6:61:
11:71:9d:0a:40:e1:a5:66:17:3f:de:10:86:c9:66:3c:0d:37:
d9:16:17:1c:31:fa:0d:46:6e:bb:9e:2a:86:ab:c3:3e:37:62:
0b:23:80:2c:50:b2:f1:07:f9:18:ee:4c:bd:f0:d5:26:81:57:
1a:3a:92:bf:6d:3a:a7:7c:d3:55:86:89:26:d5:cc:40:23:a2:
55:06:fd:e6:dd:e8:d0:c5:47:04:48:86:b0:62:d5:d2:58:87:
05:9b:6c:81:60:cd:61:70:ff:63:ea:6c:05:9e:40:50:0b:54:
a1:fb:61:b9:67:36:2d:c5:91:00:38:e5:58:73:ba:84:ec:95:
22:f1:dc:cf:37:11:22:2f:c7:9c:df:ec:e2:64:ed:59:e0:2a:
1b:bf:1f:2e:f6:82:3d:a3:c3:ae:6b:3d:51:96:dd:44:db:f6:
7a:3c:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:24 2025 by rpki-client