Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer (raw, json)
Hash identifier: 6bk99uvbEHCJKAu8Dqj14LKaziwrhuoUQ3eh70lwapU=
Subject key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FA4CDFF2497FD6044EB7BE70E0EB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205854
IP: 185.185.188.0/22
IP: 2a0b:6080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:cd:ff:24:97:fd:60:44:eb:7b:e7:0e:0e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:86:8e:a9:26:ef:4b:9d:1e:63:71:c3:dd:
15:ee:2c:f1:22:bb:8a:a7:8d:c9:12:91:36:57:1f:
b6:a3:e9:9f:3b:55:97:ea:b5:6a:04:20:1d:bf:e7:
b4:35:fa:a6:fd:99:28:47:95:29:d6:51:93:9f:28:
cb:37:51:df:94:8d:c0:1e:56:12:52:92:85:52:4b:
15:a2:47:25:04:b8:19:35:c0:5b:ff:14:0f:9b:4c:
49:05:4e:43:b6:26:b5:59:fb:e9:44:cd:84:a8:9e:
ad:04:0f:82:cb:4f:02:08:20:51:b7:e7:e5:26:9c:
0a:6c:61:65:fd:22:cd:30:c2:3a:35:c2:35:de:9a:
ab:41:eb:5b:ef:3f:bf:86:a2:b6:07:e4:87:c9:9e:
65:61:52:d7:db:aa:ef:70:bb:c7:b9:a3:b8:10:0b:
43:90:0d:d1:cd:53:b8:27:db:33:55:75:ee:31:76:
c8:67:a0:e5:d4:d5:4d:12:c9:c2:6a:0a:f5:01:32:
aa:6f:fe:36:f0:ae:84:d9:f4:d2:7c:ca:16:d8:2c:
67:9b:87:18:ed:65:85:31:7c:e9:d2:95:27:f9:78:
a8:17:7f:47:f8:89:36:d1:be:18:a5:a1:d0:5e:37:
81:8a:3f:fd:a1:df:77:f7:e8:ec:4a:90:dd:ff:89:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.188.0/22
IPv6:
2a0b:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205854
Signature Algorithm: sha256WithRSAEncryption
6a:9b:e5:ad:39:86:d4:86:64:9c:a1:d6:bb:6e:14:c5:84:96:
bc:c0:38:e1:b0:ee:b3:72:ec:6e:39:56:56:4f:87:39:19:a1:
b2:ad:0a:10:35:4d:b5:ea:02:16:91:8a:93:11:93:65:e2:73:
77:47:e1:15:e1:9a:9a:d7:f7:fd:0e:c9:d1:d6:87:2b:ac:18:
95:d0:a8:c1:3e:5b:6f:af:f7:86:52:23:07:05:83:14:e3:74:
8d:bb:e4:61:9b:19:9d:11:e7:5e:2d:8d:82:ed:5b:32:0b:c7:
d3:ce:48:e6:b8:ff:84:59:4c:25:d4:53:13:d0:b3:d5:1c:51:
7b:8c:84:58:f3:c4:74:b3:5b:b2:09:27:7e:f7:97:40:15:d4:
f7:6b:dc:ef:ef:bb:f7:90:35:84:4a:a6:2e:70:cc:45:f8:3a:
64:31:2f:5b:6f:e4:67:fa:9f:c0:05:4e:b2:74:bf:b7:52:0f:
90:80:57:ec:a5:e2:f5:2f:5b:94:b1:e7:d9:e1:58:d0:cc:eb:
b1:cc:09:1a:e5:df:08:7c:cf:70:b0:88:b6:e8:9d:82:73:7d:
f3:83:d4:6b:20:2b:2e:ea:f6:8d:93:3b:5d:91:14:6f:42:c7:
49:95:e5:1a:3d:bf:8e:04:a7:e0:67:98:2b:d4:4a:2c:c1:f9:
03:6c:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:08 2025 by rpki-client