Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
File: BPD3XK7T8miFrGVjD_qu53pw69k.cer (raw, json)
Hash identifier: 4FvmqFs4Fawlh4trOJtP9r7agmc9g18MxvuaZ8xG3fo=
Subject key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214453D8C3CFCB24488829135D93A55D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207356
IP: 185.16.248.0/24
IP: 2a10:280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:53:d8:c3:cf:cb:24:48:88:29:13:5d:93:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:47:97:ad:85:f6:a5:83:35:cb:65:b6:bf:
3e:04:85:14:38:84:28:27:8c:54:bc:7a:52:b4:14:
bf:a7:05:bd:03:e3:09:7a:d2:09:1e:26:2a:e1:39:
30:76:e6:3c:98:54:27:48:83:fe:82:fa:3b:20:93:
8e:08:85:49:54:01:c4:99:53:44:c6:bd:85:c2:0e:
82:41:9e:bf:b7:11:e7:d0:9d:f1:e4:98:5e:1a:8e:
69:d9:49:92:cc:40:cd:6e:25:6e:b4:bb:da:71:5f:
c2:8a:65:1d:16:8a:25:dd:ce:f9:a2:a0:ef:18:b4:
45:eb:88:6c:c1:a0:cd:2b:70:58:46:69:2c:e2:85:
28:96:1a:eb:6b:80:31:51:fa:7b:7a:5e:b7:cf:5b:
2b:44:b9:4d:b1:21:f2:4c:06:35:75:78:69:cb:b9:
cf:eb:f5:0f:25:7c:cc:2d:75:98:af:2f:92:69:34:
92:fe:f2:21:48:b9:5c:0f:5c:7e:c6:a6:ac:d5:80:
de:09:e1:e5:36:03:9e:ca:b5:6b:fc:1e:11:e1:84:
dc:24:5e:8d:e3:e4:ac:f2:96:dc:a1:a4:4b:bd:d3:
8a:f5:3a:a5:76:b2:70:c4:3d:0a:19:5e:63:7e:f8:
f3:a0:47:64:47:63:ed:37:94:db:3a:16:a5:c1:32:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.248.0/24
IPv6:
2a10:280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207356
Signature Algorithm: sha256WithRSAEncryption
42:31:06:87:9d:bf:a6:9c:28:e3:05:55:2e:f8:f9:fc:55:c1:
63:e1:db:14:20:e3:d2:e8:54:f3:88:c9:40:74:9b:c8:2f:1c:
4e:35:3f:18:4f:5b:36:65:4c:a8:fd:09:1d:82:39:92:27:7a:
c7:36:7e:17:d0:59:a3:05:df:b8:69:bf:ef:dc:85:1c:52:fe:
cd:c9:df:26:f8:a7:cf:f0:7d:eb:80:60:dc:7e:da:28:70:ff:
c4:e6:ac:ae:e0:34:4e:4e:6f:db:1b:91:8d:e6:4a:6f:94:84:
89:59:c6:e4:75:3e:83:4f:54:f1:b0:d8:6d:f8:b9:b9:8c:bb:
ec:16:be:72:1a:dd:5c:94:10:c5:0a:86:4a:a5:59:3f:55:72:
01:0c:47:31:c4:9d:d3:46:38:68:96:ef:05:54:1c:68:24:c0:
ec:9a:a1:a4:ff:ed:d2:e8:39:46:94:8e:f1:b5:12:a3:a1:e8:
fe:6c:0c:d1:34:d8:37:78:02:3c:03:42:59:40:97:55:8e:62:
89:24:e7:7d:0c:72:8b:a7:25:fa:3e:52:03:6e:a4:34:dd:0e:
86:26:68:09:a6:0b:96:e2:f0:4b:27:a6:a1:8c:1b:e5:21:41:
f7:75:be:b8:66:42:eb:c5:a5:73:23:f7:dd:90:7b:05:18:00:
f2:04:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:38 2025 by rpki-client