Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.cer (raw, json)
Hash identifier: pl2RLeSYt4yd5QwdGrWyGw11k8rEeoKjUUXO8PrfWI4=
Subject key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3F702FC053C335A51C09FA0D379B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205269
IP: 185.247.216.0/22
IP: 2a0d:cd80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f7:02:fc:05:3c:33:5a:51:c0:9f:a0:d3:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:01:87:40:59:72:8d:cd:ea:ea:ea:b2:ab:
74:e9:57:35:fb:ed:20:8f:a8:8f:14:e3:8b:99:1c:
fa:ae:91:b8:0b:6d:16:b5:1c:e3:af:83:e8:c4:db:
08:95:ec:7c:e7:1e:80:86:69:82:ac:57:81:6c:18:
40:71:18:a4:bd:ed:21:5a:5c:22:c8:c0:2c:b5:35:
0c:5d:d5:17:67:dc:84:ee:9b:7e:af:3b:19:01:37:
2b:69:ed:ff:d2:d0:e0:59:60:c9:79:20:f2:69:e9:
ca:4e:e7:66:11:11:f1:3d:9e:fd:ca:62:a8:b0:e7:
8b:c9:f7:7c:33:8c:c9:53:ed:36:dd:61:9e:f8:1f:
15:47:74:0e:6f:3e:0c:fc:62:a7:f2:10:b6:e8:3b:
01:b3:04:c7:2a:27:2e:6d:22:2b:1e:ec:d3:ff:1f:
a7:80:e5:f1:28:e5:7e:a7:45:37:25:4c:67:ee:e6:
ab:86:8e:e1:39:9d:26:b2:a1:da:bb:2a:f8:91:f5:
e7:fe:ae:e5:8c:b9:18:fa:78:0f:1d:78:f7:2b:e1:
d5:3a:07:4a:a6:84:8d:21:68:48:da:86:4b:68:c4:
74:c0:06:8f:bb:12:1b:4c:8e:e7:b4:aa:75:83:b3:
53:3d:ed:8d:25:2e:43:a2:7f:5b:81:61:8a:cc:d2:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
IPv6:
2a0d:cd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205269
Signature Algorithm: sha256WithRSAEncryption
98:19:5c:4e:e0:1b:d9:95:f0:9f:e8:b9:00:10:71:e0:dd:86:
52:a7:56:e0:ff:47:ae:68:09:5c:b8:5d:0a:5b:c6:0d:f2:a3:
fa:2f:3e:6e:29:a1:cb:b1:a3:cd:5f:97:b1:56:0d:51:b7:05:
c0:d4:92:f7:e7:8c:62:6f:93:75:57:fd:7b:bd:e9:41:1b:b0:
89:2b:7c:35:c0:07:87:9b:05:c6:8f:4b:b1:f1:4b:77:e1:41:
df:49:f1:31:5f:2d:e7:e3:b3:51:02:39:91:ac:13:7e:40:19:
dc:1e:09:2b:6a:ca:83:47:b5:e8:c6:8d:08:4b:16:1e:e1:95:
2e:da:da:ef:30:f8:0c:2d:94:99:17:0b:c9:b5:1f:20:02:28:
f8:c3:3a:e2:bf:c2:6b:0a:83:84:b1:f3:a7:9e:db:e4:57:c6:
cc:ef:a3:df:da:1c:0d:f8:b5:fa:06:32:96:fa:dc:dd:b9:5f:
44:d4:a3:f6:ca:c0:d7:2e:18:3e:64:06:f8:26:26:45:a3:01:
bf:fa:f1:8d:5b:62:39:6f:41:c6:2e:1e:78:bb:8a:98:be:4e:
6e:0e:e5:04:05:a4:88:82:ae:68:ac:d1:17:73:68:e7:ee:46:
a1:12:a2:17:0c:3e:95:2c:23:21:28:f1:b8:b0:77:25:c1:44:
c4:b3:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:31 2025 by rpki-client