Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer (raw, json)
Hash identifier: K5/H+XlUy4vGEqZS9eBoJe1awRnJ/tGecF1+Hs8sWAY=
Subject key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE99B0B2A2BC8A7C5994201D5ED80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15768
AS: 16166
AS: 41276
IP: 193.41.220.0/23
IP: 195.35.90.0/23
IP: 195.74.83.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e9:9b:0b:2a:2b:c8:a7:c5:99:42:01:d5:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:b5:85:db:2a:13:6e:e9:bb:d5:9f:49:16:
cf:df:6d:88:2f:e2:fe:55:62:4c:c9:06:a6:57:be:
b8:9b:8b:3e:93:9c:4b:a8:53:3c:a9:2e:73:d5:2b:
32:e4:73:e8:46:ff:33:ce:c7:79:a6:12:ee:c0:e9:
fa:4c:3a:4c:0e:b9:80:24:fd:31:5f:15:b2:1c:d5:
11:55:84:eb:e7:d9:d9:f4:e2:9e:1d:84:00:11:a8:
05:e8:eb:96:63:af:db:cd:08:04:09:a7:bf:04:1c:
18:a2:eb:51:86:37:df:97:86:b0:63:ff:f3:54:9a:
b8:8c:18:06:81:bc:85:63:3f:f1:99:2a:76:59:0d:
63:61:1b:01:6c:f1:53:ef:3d:5a:79:c3:54:d0:58:
ea:ba:55:c9:47:32:32:30:13:5e:f8:a0:ec:45:6f:
98:90:64:a4:b4:f8:09:c9:11:08:02:ea:97:92:7e:
80:0a:55:84:d7:8d:28:f7:84:d9:4d:98:4e:43:c2:
0e:71:62:0a:1a:f5:6c:1d:ce:b7:b7:67:5d:e5:b9:
3f:87:4e:0b:6c:b6:1a:eb:86:1e:aa:33:68:24:2e:
e2:65:ac:69:79:0d:7e:d0:8d:4a:63:ed:69:bb:78:
98:27:bc:7e:6f:39:b5:b8:66:07:b7:11:57:4d:86:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.220.0/23
195.35.90.0/23
195.74.83.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15768
16166
41276
Signature Algorithm: sha256WithRSAEncryption
0a:f5:6d:58:4b:67:5b:71:5d:bf:b7:ac:20:ab:8a:09:a8:ce:
3b:a4:55:ff:75:e9:90:86:32:b4:30:8a:ab:44:a2:67:df:5f:
d2:8e:74:d3:0a:ed:8b:03:d4:a0:c5:53:b8:5d:ff:f7:fb:5a:
8f:41:b6:3d:f5:cb:43:bb:ea:30:79:aa:52:f7:50:40:c4:c5:
95:5f:45:3b:c2:99:9a:8e:18:ef:35:58:69:d1:e9:39:3c:30:
bd:54:07:50:4a:34:f2:80:d8:96:72:64:05:2b:d3:16:50:ee:
ea:8d:3b:b5:c1:27:9f:46:8e:a6:b3:25:f8:ee:f7:93:c8:5c:
9d:a4:67:34:1c:3f:0b:b5:84:b7:3d:44:21:2a:81:46:5d:16:
10:5b:8e:9a:5b:7f:da:14:99:e4:22:33:1d:e0:cd:2e:a3:74:
8c:f1:e6:4d:b9:41:a1:eb:83:42:c9:6f:04:92:f3:7a:13:fe:
7e:c6:60:87:4b:40:b3:80:f6:96:90:56:fd:d2:a5:8e:c0:d7:
09:49:5c:d2:aa:06:13:cb:ce:00:bc:16:35:a3:42:fc:7a:a4:
ba:e4:99:ab:55:2b:c5:51:a3:f0:79:88:b3:01:9c:50:6e:4d:
50:da:1d:6c:fc:5b:30:02:26:c4:56:1c:df:f9:f9:0f:e5:ae:
19:d7:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:42 2025 by rpki-client