Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer (raw, json)
Hash identifier: ntkUHMmGcFB46Pa01pcpnML2WHcTkvDyM9q4kIS4Z38=
Subject key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F40FB258C7DD5F99B0D05E8675C1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198023
IP: 178.239.0.0/20
IP: 185.60.184.0/22
IP: 2a04:e600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:40:fb:25:8c:7d:d5:f9:9b:0d:05:e8:67:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:bf:ed:92:c0:78:7f:bd:dc:97:52:ad:25:
af:a7:50:80:0e:3e:be:e5:15:5e:e7:8f:21:a3:59:
38:74:f8:27:6b:3a:a7:68:28:7e:a1:38:37:1a:34:
39:54:bd:49:c3:2e:a4:ea:3d:92:69:fd:80:7d:dd:
0e:5c:f0:8c:23:f8:af:c1:ed:ed:bb:b2:58:bc:0c:
be:b6:66:df:81:af:40:0e:96:4c:88:87:f3:14:ca:
b8:8d:54:be:3d:9d:04:05:bd:00:3c:1e:63:5b:8e:
7a:ef:6b:fc:68:0c:08:6e:65:3f:86:2d:d1:4a:76:
a9:f5:d5:88:9f:fd:51:5d:06:8a:5d:e7:df:74:1b:
40:08:ee:71:7a:d8:a0:29:9f:84:26:33:e9:5d:00:
e4:8d:43:bf:7c:40:45:5a:0e:95:0a:b2:64:6c:c3:
fc:c8:a6:f2:c6:45:c4:f7:55:63:75:58:54:cb:58:
5b:34:08:16:69:cb:77:1b:3f:14:5b:ec:c1:1b:27:
ed:95:12:e6:4f:a0:d8:ba:3b:d8:0e:bc:0a:ec:64:
6a:25:ff:a8:2a:27:c0:ea:b9:79:b7:2c:e4:9b:a1:
55:d2:c3:2c:b5:68:07:a9:0c:64:94:d1:bf:4c:b7:
39:4a:4d:70:9d:ed:fb:1d:e8:ae:ee:fc:5a:08:e4:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.0.0/20
185.60.184.0/22
IPv6:
2a04:e600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198023
Signature Algorithm: sha256WithRSAEncryption
4b:9d:41:63:f3:16:15:39:f7:88:99:d5:d8:bf:71:3d:83:b7:
a5:d3:87:13:96:1a:9b:22:03:57:22:3d:f2:c9:e4:88:77:79:
14:f7:94:63:14:3e:f9:df:2e:e9:07:d9:b5:e6:97:c4:98:20:
d9:fb:ec:d9:cb:0c:3e:1c:ed:ef:c8:9a:73:db:b4:49:ce:30:
95:36:fd:92:e4:be:ac:26:d8:8f:3c:39:8c:bf:65:73:c9:99:
20:b1:56:32:fd:15:2f:54:a4:82:17:9e:f8:5f:ad:f7:c6:a5:
6e:aa:79:e0:6e:b5:22:51:6e:50:2a:20:bc:c0:be:e2:57:40:
19:1e:c9:3a:4b:1c:ee:42:2a:60:7c:74:76:5f:80:36:6d:59:
01:2a:ad:4f:50:a0:9b:b5:f0:ad:58:d9:99:65:68:d7:9c:ac:
f4:8a:d1:ce:aa:b2:b1:29:7e:33:eb:ed:f4:95:d8:8b:5f:2d:
30:73:eb:6c:9f:0a:f6:f1:19:f1:4e:f8:f5:f5:39:74:87:6a:
e8:d1:f1:ce:f0:fa:4c:eb:90:23:22:86:be:1e:53:6f:bd:ee:
ee:58:81:86:2e:76:e4:a3:18:94:88:98:02:25:bd:ad:3d:80:
2c:75:99:b7:db:a7:6d:06:e6:dd:2f:c0:4b:b4:58:5b:92:72:
13:11:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:27 2025 by rpki-client