Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer (raw, json)
Hash identifier: LT1knbRInRGFOR/KVedusXVkP0aq3CXuaJJ4gDF05Rg=
Subject key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823BD414BF0D014C941A98D6A257616
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209830
IP: 193.135.120.0/22
IP: 193.141.23.0 -- 193.141.24.255
IP: 2a09:fb00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:bd:41:4b:f0:d0:14:c9:41:a9:8d:6a:25:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:11:59:db:33:05:92:2d:64:2b:3c:c2:af:
ce:07:2f:8f:8f:7d:18:b6:ed:85:df:64:c4:11:29:
9a:be:f4:59:bc:49:39:78:84:fb:c7:30:f5:41:f5:
be:71:51:6e:9d:af:30:2e:af:ab:7a:c8:67:71:3d:
a4:82:09:6f:7d:0d:4d:be:02:63:76:ee:61:f2:60:
33:f3:49:6f:30:8c:22:be:ee:15:48:34:b1:c5:05:
da:3c:87:50:a7:84:0a:e8:da:a0:3b:c9:bb:66:41:
31:9d:92:fb:d6:a4:a5:22:6e:db:ad:0a:99:ce:6e:
fc:84:29:61:6b:8f:cd:4e:7d:27:8e:22:7d:4a:5b:
b6:36:9a:2a:05:94:e0:72:42:62:9f:ae:29:33:d7:
c4:fb:56:4c:b8:e4:3c:58:ad:b9:b0:7f:11:e9:4a:
6d:f3:57:48:8c:8b:17:e9:a1:67:48:41:e7:14:6e:
67:ac:a4:5f:9a:db:7d:a9:9b:46:79:ed:c9:e6:ff:
15:94:bb:53:3e:8b:01:32:92:7c:4f:c4:00:d0:e2:
b7:45:b2:70:cf:76:c2:05:5e:f9:99:cf:f9:3e:18:
9c:f6:1a:53:e5:18:93:94:6b:c6:65:0a:69:1e:4a:
8a:6c:aa:57:17:0d:b3:c0:d6:6e:cf:17:82:60:ca:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.120.0/22
193.141.23.0-193.141.24.255
IPv6:
2a09:fb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209830
Signature Algorithm: sha256WithRSAEncryption
5d:de:4e:84:41:d7:b7:de:49:71:c7:06:2b:39:13:fd:ca:6d:
b0:31:01:75:e7:ec:e5:23:45:b3:cd:c9:c4:23:1a:32:31:5e:
b3:4f:c0:9b:8b:b9:3d:26:7a:e6:c7:86:02:80:80:52:21:69:
6d:18:a9:ad:54:a1:44:4c:6a:5c:29:4f:88:b2:8d:71:fe:e6:
2b:7b:e6:78:bc:76:c3:47:a8:f3:95:02:98:bd:4e:b0:56:9e:
eb:82:30:9b:45:b8:4a:eb:4b:9f:87:07:78:c8:00:35:30:31:
47:30:8b:f9:bf:72:4c:12:04:a0:82:98:39:a4:b8:ce:42:b5:
1b:c2:34:4d:df:5b:ed:18:1f:bb:ea:db:aa:b2:a2:2f:e6:5f:
71:d0:dd:8c:90:a2:6b:f3:bc:1d:38:3f:b5:60:22:13:aa:ee:
69:ad:98:ee:dd:70:72:98:09:80:0a:51:5c:22:03:82:f4:c3:
20:3a:22:40:61:62:b8:9f:a9:cb:28:19:61:a6:79:91:38:da:
af:9b:71:16:44:b2:47:b6:97:34:14:a5:b0:1e:76:57:bb:b9:
07:23:0a:c4:91:9d:2d:7f:3a:69:0c:65:b8:60:41:e6:86:ea:
bd:63:e2:42:42:30:cc:f6:22:3a:fd:c5:7c:92:ea:ff:7f:df:
f6:a1:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:37 2025 by rpki-client