Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer (raw, json)
Hash identifier: pX7lQGSE9WuuwMfAXiKNPKapP+HHpxkvL9K57YkpGM4=
Subject key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3D2F014F788BD499BFDAAC072B651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56764
AS: 201284
IP: 185.79.216.0/22
IP: 2a05:75c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d2:f0:14:f7:88:bd:49:9b:fd:aa:c0:72:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:d6:ec:55:be:a5:60:e2:87:33:68:32:69:
29:40:af:99:a0:98:e8:3b:f6:fa:f9:18:46:79:85:
f1:b3:63:a5:0c:9b:81:d5:56:91:6b:f6:da:e0:6b:
cc:60:74:d3:3d:1e:66:2b:3b:a1:df:50:0e:d4:c7:
49:cc:89:11:67:6d:91:9f:44:58:f1:69:c7:c9:32:
ce:0a:c2:4a:c9:74:19:16:b0:ed:b0:55:b0:db:e4:
92:2a:1f:e3:b7:03:3b:42:f2:8a:a5:be:7e:72:1d:
19:05:8f:96:85:bc:5c:d1:8d:86:26:ef:a5:d3:4d:
0f:55:50:14:7c:84:70:b7:3d:3e:4b:90:52:28:0c:
eb:ef:d3:97:ec:a7:8f:3b:69:3d:9b:ac:d9:29:68:
3c:1e:8a:30:95:77:40:5b:56:8b:76:5e:0c:03:37:
77:8e:e5:27:b3:a8:13:60:c9:68:2c:5e:09:e6:84:
a3:4b:92:e2:28:38:42:e5:db:8d:24:97:8c:97:d6:
fb:fe:28:fd:dd:b4:f9:41:0b:57:eb:d8:78:53:7a:
a4:3f:d6:12:4e:12:0d:cd:b9:3b:97:2f:93:05:39:
58:6f:66:25:af:b6:2f:93:87:fc:d1:8d:5f:de:84:
ce:4f:53:50:03:4a:a7:b9:26:48:a0:c3:a7:e8:49:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.216.0/22
IPv6:
2a05:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56764
201284
Signature Algorithm: sha256WithRSAEncryption
a7:3d:90:64:0d:d6:d7:eb:1e:a7:16:dd:5c:56:f0:4e:eb:80:
14:b2:ab:c4:9a:0c:1d:e5:77:5a:68:2d:50:de:20:bb:2c:4f:
05:09:87:6e:57:c9:07:bb:d3:5b:33:c4:65:78:6b:51:b2:78:
75:ef:fe:62:72:e1:9b:af:03:65:8b:af:cb:af:dc:fb:33:ca:
30:8a:d3:85:8f:4d:b7:d0:bf:97:6e:3a:4b:dc:73:0c:bd:3e:
0b:4b:15:bd:88:89:22:55:aa:66:14:3a:25:df:14:97:75:c2:
9c:98:c4:56:41:c1:30:78:3a:89:f9:3c:2b:f6:ae:08:bc:7a:
40:4a:4b:f9:67:d5:d7:23:4b:9f:2c:c4:a6:24:60:4b:c2:88:
36:dd:2e:d5:cb:fe:4e:d9:15:b6:11:c8:1a:a9:ce:b9:9d:b0:
b2:5b:12:9f:00:da:cc:81:32:bb:42:87:2a:9a:ca:e0:0e:ae:
f2:03:ec:da:52:2d:ee:75:9e:c9:c4:71:f8:1b:19:c8:1a:3e:
d4:ed:93:f9:7a:3e:16:58:12:44:c8:6d:9e:1e:d7:0e:d2:ee:
12:f1:6b:28:6c:d4:ec:7c:bd:ba:12:64:41:67:22:79:57:8b:
f5:f2:42:ae:e9:3a:19:c6:c4:6c:28:03:db:d8:d1:df:db:30:
ec:07:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:38 2025 by rpki-client