Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
File: B6zZpp4bhJhwhFisUiB8-sHyw8s.cer (raw, json)
Hash identifier: 7RB3vKVToLdwa/oKDRVX+6q8jYowgamSn0I7qFI3//Q=
Subject key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C6EABFD1F39123B503E54AF282A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50698
IP: 109.202.64.0/19
IP: 159.253.232.0/21
IP: 185.116.76.0/22
IP: 2a06:4400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:ea:bf:d1:f3:91:23:b5:03:e5:4a:f2:82:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:14:5f:eb:a9:bb:db:15:74:5f:ab:78:6f:
5a:1c:b4:13:75:f7:bd:eb:8e:86:28:c3:fb:2c:d4:
f0:93:a6:4f:c2:a2:78:45:24:29:2a:f3:6a:48:53:
6b:1b:a7:9c:dd:6f:89:d6:67:08:56:57:fe:e0:4d:
9a:77:9c:27:9c:bc:1a:00:ba:d8:6d:6d:91:e4:86:
27:36:43:05:6d:27:e9:59:d5:35:b6:f8:fe:b5:f3:
0b:06:fa:68:c1:d2:99:d5:13:dc:d3:b2:55:ff:b9:
ea:c3:d8:0e:89:f6:0f:cf:58:17:7f:4e:cc:36:32:
4c:36:ca:65:d0:06:0a:cb:fa:f5:2a:5f:29:32:e9:
be:f8:af:59:07:8c:11:61:97:ac:ff:bf:e5:bb:c2:
cf:65:85:d3:c1:1f:e2:4b:b3:06:38:fb:ed:b4:2b:
5d:7d:10:e7:a7:c5:bd:cd:f0:16:23:ee:af:f1:13:
d9:5d:b2:23:01:03:02:d4:e1:fb:46:24:14:0e:69:
46:c7:b0:5a:42:26:f8:0b:8a:00:0c:7e:22:68:57:
fc:1f:f6:73:75:5d:71:1e:41:72:83:44:14:e6:8b:
cb:e8:cd:46:16:f8:1b:c7:53:95:36:7e:3a:44:e0:
e2:21:78:30:5f:5c:71:4e:af:4a:af:56:b0:53:e0:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.64.0/19
159.253.232.0/21
185.116.76.0/22
IPv6:
2a06:4400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50698
Signature Algorithm: sha256WithRSAEncryption
69:67:7b:b7:66:47:0b:9f:8c:d2:98:27:f5:72:8c:45:63:ed:
76:32:f5:94:80:7e:19:eb:49:55:0f:e2:63:33:e2:3d:ba:7d:
1c:7d:76:30:f5:56:1b:23:7c:22:d8:97:71:45:72:b6:21:06:
4d:96:20:0e:a3:03:e5:20:3e:c0:58:68:1c:c9:bf:fc:55:0c:
0a:7a:85:37:fa:7d:48:b3:41:20:7a:50:ed:ac:94:87:f1:39:
9e:8b:82:06:52:37:5c:69:5b:28:0b:74:64:d6:de:2a:ff:fc:
a2:11:cc:c9:a8:00:f7:52:af:4f:c8:0d:c0:0f:cc:2d:e5:88:
6d:05:f0:99:50:6e:28:a6:89:51:db:bd:32:67:14:6d:33:fd:
7e:5b:40:0d:f0:8b:03:fa:9f:a1:af:a7:e3:36:6f:05:08:c8:
00:37:e8:c0:a6:dc:4d:bb:3d:b2:9a:cd:f2:47:a2:17:af:f5:
22:06:40:63:84:63:82:e9:e1:64:32:40:76:99:1f:b6:5e:e3:
19:21:1c:53:7f:08:6c:5d:36:87:a6:67:84:33:dd:aa:48:bf:
a0:ac:cf:c7:c4:d2:43:45:56:2d:4c:cc:04:94:d2:8b:7d:16:
49:fe:ae:3c:fe:96:17:e2:3b:3a:80:74:c3:ab:c9:40:14:d3:
27:c8:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:16 2025 by rpki-client