Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
File: Bjutx4U7BRAKayJN3O_Bji59PdU.cer (raw, json)
Hash identifier: C86fLuosRSNEDpNbWmKDlwdUEH9uzIwuDY78+u5HAY0=
Subject key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425208FAC4B3E8643E19167C787655C4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8387
AS: 211351
IP: 46.17.224.0/21
IP: 92.61.208.0/20
IP: 185.49.176.0/22
IP: 193.162.45.0/24
IP: 212.31.64.0/19
IP: 212.166.96.0/19
IP: 2001:9d0::/32
IP: 2a10:f8c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:8f:ac:4b:3e:86:43:e1:91:67:c7:87:65:5c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:a1:05:c7:25:5c:1b:b3:53:92:35:a0:d1:
50:55:8a:87:8a:2f:38:ec:75:11:12:f2:50:56:37:
22:91:e1:9b:68:35:e1:f3:af:82:91:3a:1b:df:11:
9b:98:e8:34:74:f6:06:fd:52:a5:f4:95:d5:08:f0:
81:12:3a:5d:1e:71:c0:aa:ac:a0:39:12:0e:51:35:
cf:22:f6:54:09:b6:4b:d4:70:cc:4f:f4:a0:b2:82:
90:dd:04:c8:21:8d:8e:b4:74:59:b9:20:6a:44:d9:
cb:b9:95:cd:fa:22:28:d2:1b:0e:ad:cd:f7:a1:f8:
18:02:cc:17:24:47:2e:24:b0:b4:31:d9:6e:1a:04:
8d:c2:a8:13:9c:fe:21:27:7f:4f:fa:62:04:8b:03:
15:a7:14:01:80:b7:87:cb:d4:2a:f8:f5:de:13:c8:
e9:6e:b5:fd:d2:77:5f:d5:f8:f7:3f:fc:75:a7:d8:
b5:df:66:11:4a:e8:b2:6b:c2:e5:b9:64:6d:7c:37:
02:ba:a8:a8:0b:51:d3:05:0c:3b:f4:9e:c9:0b:2a:
7e:99:e5:e6:b1:48:f4:b9:97:bd:d7:0a:90:b4:f8:
cd:76:fc:fe:9e:0f:39:31:dd:7d:94:6d:9b:af:8f:
a6:10:f8:ad:74:5a:1d:c6:fd:a2:a4:f8:be:1f:48:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.224.0/21
92.61.208.0/20
185.49.176.0/22
193.162.45.0/24
212.31.64.0/19
212.166.96.0/19
IPv6:
2001:9d0::/32
2a10:f8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8387
211351
Signature Algorithm: sha256WithRSAEncryption
08:72:9d:b3:a5:31:50:a3:09:e2:d7:57:a1:a8:f8:67:6a:f5:
e3:07:0d:e9:11:b0:6f:d7:4d:4d:a2:bf:a1:c4:b6:1f:b5:16:
ec:ae:df:68:fe:69:39:42:02:6a:5e:b4:5a:ab:3d:bd:1a:1d:
c3:03:c9:b1:fa:7f:ec:d5:42:0d:c6:77:b2:8c:76:a2:4c:be:
6c:32:ea:ff:d9:dd:5e:30:b2:6a:a0:a0:43:c0:f9:53:35:57:
81:10:13:90:5c:1e:80:72:81:5e:7e:c7:9d:13:52:8c:0c:b3:
9c:b7:bf:62:41:6b:1a:49:2d:51:26:b8:c8:19:33:7f:d8:46:
59:c5:d0:fc:0d:25:5e:ee:a4:2a:d9:68:57:bb:93:53:05:c9:
25:42:ef:0d:62:a4:0e:05:a0:f0:3f:56:e9:96:48:c2:5b:b5:
37:a0:fe:bb:f0:04:e5:e3:6a:b3:8b:75:5a:18:a7:75:ba:4d:
13:a1:8d:a3:42:1c:7b:b2:9d:82:b0:34:b9:77:05:29:48:e1:
f7:23:95:c9:3a:83:0f:91:a5:bf:d0:8a:19:34:5b:42:36:23:
e6:6a:63:00:3f:df:75:6a:27:12:a3:a3:dd:a1:95:3e:75:9f:
6b:32:5b:22:41:17:34:e7:53:f1:43:41:31:d1:67:ac:e7:7e:
01:8f:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:45 2025 by rpki-client