Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.cer (raw, json)
Hash identifier: 5g5iKsNnDKC3beHg53C2ZJvs1UzJsXtlccbhLFoEppU=
Subject key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B58222803D100B0DB3B3AF7DE8A131
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56327
AS: 205322
IP: 185.219.224.0/22
IP: 185.248.72.0/22
IP: 2a0f:78c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:82:22:80:3d:10:0b:0d:b3:b3:af:7d:e8:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06785117986adaa437bec30a2bf9f157a9257df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9e:0e:94:35:eb:27:d7:9e:bf:f1:5b:27:94:
a6:dd:a8:c7:fd:c0:4e:97:21:1a:68:89:c2:aa:33:
df:93:4c:cd:d6:a8:22:f5:54:08:bc:55:be:3e:de:
61:e9:65:b1:ad:00:93:b6:44:de:05:fb:bf:2d:18:
34:aa:86:c1:f6:77:44:4b:40:e9:1f:5b:8c:46:b5:
4a:50:d2:a7:69:ae:a1:28:d8:3c:fe:ae:7c:7a:26:
b0:89:9a:bc:bc:5f:c5:95:0c:6c:44:21:31:c9:90:
af:f4:42:99:cc:0b:f9:2b:87:3e:14:7c:0c:ed:e3:
8c:1a:6b:e2:6e:61:b1:ae:6d:e2:97:37:3c:46:1a:
71:31:ad:ef:c4:5c:8e:4a:e8:90:4b:2b:98:b6:c7:
e3:93:09:3d:23:3d:a3:4e:af:95:98:1d:2f:96:b0:
ef:a6:e8:9e:aa:e2:2a:bb:53:0e:4e:3d:6d:f9:6d:
a2:f8:b0:68:9c:d1:3f:1f:af:31:ca:1d:ad:d1:cc:
98:9c:ac:8d:eb:98:ab:de:6e:69:22:a7:8f:f6:8d:
b9:5a:9f:dc:6f:80:38:fd:b3:be:a6:cc:22:88:00:
88:91:a9:52:8c:da:11:32:0f:c2:8e:2a:c4:22:75:
5c:e9:fb:b7:56:e2:2a:fc:8e:61:b2:5c:cd:17:6a:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.224.0/22
185.248.72.0/22
IPv6:
2a0f:78c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56327
205322
Signature Algorithm: sha256WithRSAEncryption
24:fe:6e:82:a6:d5:97:05:d9:74:8e:0a:8f:b3:11:3a:6b:24:
bc:28:02:91:f6:08:cf:03:5b:28:c2:75:1b:96:be:f3:c0:4f:
e1:7c:34:52:07:9b:52:a9:c2:dc:0f:ab:7f:e2:8d:05:00:bc:
f5:b7:19:79:f7:d3:2e:65:cc:6b:a7:55:25:e2:58:b2:ff:0c:
a0:fa:f8:77:18:6e:48:30:a5:5a:03:7a:72:e8:f1:51:90:b4:
32:bf:79:59:4e:53:d3:36:a6:25:3b:a6:60:db:d0:c7:40:69:
01:c8:4d:06:97:cd:f6:9b:d8:25:62:c1:94:e6:88:10:5e:68:
0e:92:d1:45:8e:89:d6:fb:37:e3:be:88:66:e9:a6:69:2a:6f:
b8:77:a9:68:4e:9f:46:c7:9e:bb:23:15:61:eb:70:89:64:86:
c3:7c:b1:9f:1b:cb:fe:6c:1e:7c:1b:df:c9:1a:99:4e:64:cf:
a1:ba:e4:d0:6a:da:04:e5:29:3e:de:64:eb:f0:39:45:a6:07:
18:46:3f:cb:08:17:17:c1:3f:87:63:4f:ee:5f:e1:74:07:fd:
3f:83:2b:b4:bb:96:39:c2:86:e5:e7:c9:6f:81:9f:c6:a4:0b:
8f:d7:4e:04:d7:77:e0:69:53:e7:e2:6a:24:a9:2e:88:4b:0b:
ef:18:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:37 2025 by rpki-client