Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.cer (raw, json)
Hash identifier: XBTGHveCw2m4UyhePanwKU/GcX7wSaAvQyeqNirFNWI=
Subject key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A2C8E48493AF55D41014A8B33B05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199348
IP: 45.86.148.0/22
IP: 46.31.132.0/22
IP: 176.105.152.0/22
IP: 185.20.64.0/22
IP: 185.76.140.0/22
IP: 2a04:1540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a2:c8:e4:84:93:af:55:d4:10:14:a8:b3:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:48:75:ae:ba:51:12:dc:f7:ff:b1:0d:fa:
41:c3:74:28:90:69:64:25:ef:1f:d9:33:5a:e0:e6:
83:49:d6:86:e3:80:69:98:fe:6a:be:eb:98:e4:af:
5f:25:ec:9e:15:98:9c:69:ed:a9:6a:87:80:36:53:
e6:c5:5e:92:8f:e8:48:fe:3f:48:7b:82:d8:c5:b2:
20:7a:ea:ca:21:29:24:1a:5f:0b:02:bf:82:09:01:
f1:ab:45:95:94:f4:4b:2d:a5:dd:74:2e:29:1c:03:
70:41:de:68:e4:e5:59:ff:15:5d:0f:ed:8e:b1:25:
98:6f:6b:0d:bb:8e:8d:a7:54:69:a5:ce:a7:5f:43:
7b:8d:af:c5:8a:8c:ce:7e:3d:f8:8b:0d:ff:53:51:
70:d1:c2:d6:42:1f:b8:c7:aa:c5:6d:f4:9a:47:96:
8c:0d:0c:81:38:e1:0d:9e:28:6c:a4:56:41:b6:d8:
c1:a5:f0:a3:e0:36:59:e9:56:66:cc:be:be:50:0b:
b1:24:95:a9:c3:f2:d5:3e:a8:df:b5:92:5d:2c:28:
f0:00:c3:6c:2a:04:2a:fb:53:08:22:89:8f:7d:32:
d5:e9:11:bb:f1:f6:ec:e0:61:f5:b7:37:e4:3a:a9:
ec:e1:1a:26:3a:0b:c9:7a:89:5b:93:b5:27:00:92:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.148.0/22
46.31.132.0/22
176.105.152.0/22
185.20.64.0/22
185.76.140.0/22
IPv6:
2a04:1540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199348
Signature Algorithm: sha256WithRSAEncryption
15:0f:3d:a4:8e:6e:b6:f5:02:20:9e:b5:75:58:46:af:25:de:
93:91:58:7b:d2:77:0c:59:f6:54:fa:1f:c1:80:9e:e7:e3:09:
95:96:5e:b4:8f:ad:95:38:60:23:d4:66:59:a6:93:18:2f:bb:
f9:2b:4b:89:21:df:4e:4b:65:c8:a4:30:93:7a:21:82:59:95:
23:57:98:09:81:d5:7b:93:36:53:b4:66:ef:e7:f9:b2:a5:46:
23:47:ca:8e:1c:8f:0c:a9:fc:71:f0:fb:c1:8d:4f:1e:82:d2:
b3:4f:c4:d8:0c:6f:b1:d6:ac:3e:0c:72:81:5e:84:93:80:9c:
77:8a:18:3e:97:d4:1c:e5:6c:1b:31:b7:45:3c:b9:d1:86:f1:
7c:6d:80:5d:84:a9:29:e8:73:e5:59:93:6a:ec:1d:c8:e3:49:
30:3d:46:c7:69:62:cf:1e:d4:69:b5:1a:45:74:a3:27:0c:eb:
8d:69:84:d1:9b:81:62:cc:c2:79:1a:a7:87:27:73:7b:ce:6d:
6e:d1:7c:f7:a2:d7:6c:14:a5:e2:bf:8e:00:90:7b:ec:7c:48:
cf:7c:a9:4a:9e:93:bd:48:80:85:f6:2f:c7:e6:be:a6:d9:3e:
f8:28:4b:8e:f6:29:f1:5a:53:43:32:57:7e:32:82:01:cf:e7:
88:45:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:14 2025 by rpki-client