Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer (raw, json)
Hash identifier: rk6FavKcA0UmuEY+aXaSjp/vV6jKwMslfRkkj9prI5w=
Subject key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB39A0A98DD0462E3875DF1E9FD9EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44218
AS: 44516
AS: 49209
IP: 5.10.136.0/21
IP: 5.154.128.0/19
IP: 79.139.0.0/20
IP: 81.173.16.0/20
IP: 87.120.16.0/20
IP: 95.130.192.0/21
IP: 145.14.64.0/19
IP: 185.75.172.0/22
IP: 2a04:f580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:39:a0:a9:8d:d0:46:2e:38:75:df:1e:9f:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:1a:f7:12:10:15:af:55:55:56:2c:44:a4:
98:6a:51:ea:a5:60:c3:58:8d:08:7d:13:28:d9:12:
4c:7e:93:30:20:c1:51:dd:2c:16:e1:1c:f8:78:ee:
dd:42:5a:9b:ba:5f:43:56:db:ff:ad:84:5e:90:1c:
15:b0:ad:cd:01:92:fb:49:c2:fe:fe:0b:b3:6b:2a:
b1:4b:7f:f5:dd:29:b7:72:fe:b7:67:dc:90:13:28:
9f:18:f4:5d:d5:e2:5d:f2:42:15:d2:a2:31:5b:4d:
12:4d:2a:05:12:09:39:ce:fd:77:f1:45:e6:98:e2:
5e:6b:a4:b0:91:da:0d:a1:e2:7d:4b:6e:09:c1:bc:
c8:e8:b9:a1:9b:46:c9:3f:5b:9a:95:1c:59:55:92:
05:83:3b:48:4b:a6:bf:cb:7c:8d:64:f2:81:05:8e:
be:4a:e4:17:a9:b7:d0:23:b2:4d:38:b8:8c:a2:00:
18:f2:e4:aa:fa:bc:2f:34:da:b4:6d:0a:83:50:6b:
20:2b:36:65:fb:99:1e:50:37:b9:5e:1d:20:b5:77:
a2:30:2d:91:e7:03:32:ed:1b:91:d0:71:38:6e:b3:
66:27:bf:7b:33:66:4f:ab:29:29:81:98:2d:aa:c4:
ad:d0:8e:ac:5e:9e:d4:bd:62:7b:9f:a0:8c:34:2a:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0/21
5.154.128.0/19
79.139.0.0/20
81.173.16.0/20
87.120.16.0/20
95.130.192.0/21
145.14.64.0/19
185.75.172.0/22
IPv6:
2a04:f580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44218
44516
49209
Signature Algorithm: sha256WithRSAEncryption
11:cd:bb:57:dc:b7:d2:c0:53:19:24:f2:ed:bf:59:80:26:9e:
bd:1a:6d:a6:2c:fb:03:66:99:ca:6f:22:dc:0a:41:68:fe:75:
5f:62:18:26:b3:8e:71:c8:4d:fe:13:b7:00:db:5a:6f:16:eb:
9c:41:68:76:dd:91:01:04:6e:48:b6:c9:17:38:00:44:90:34:
73:43:04:31:c1:d7:e9:95:58:41:1f:65:f1:85:f3:b7:1c:1b:
94:af:07:06:ca:dd:df:b1:4b:84:12:19:41:0e:79:df:93:b4:
49:4d:a0:56:b1:ca:16:27:62:25:ba:12:3b:47:4b:7b:0d:3e:
e2:40:28:dd:c7:22:b4:f0:7b:ff:c0:09:0f:68:81:ae:99:c7:
8d:f5:49:c3:1d:ce:8c:b7:d8:7b:81:fd:d4:8a:76:60:eb:17:
09:79:01:45:48:89:2c:bb:da:3b:53:d6:d1:df:b7:28:b7:87:
57:80:0a:c8:90:7b:06:8d:c1:9e:5f:50:f8:30:24:bd:f1:3d:
22:33:ec:84:9a:28:21:42:2e:e8:af:4a:20:98:4a:32:1c:41:
fd:a2:a6:3d:58:0a:84:0f:8b:27:80:af:55:0e:4f:46:73:15:
8a:d9:bf:97:cf:bf:41:c0:70:51:24:42:93:fc:60:e3:59:27:
c0:28:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:17 2025 by rpki-client