Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.cer (raw, json)
Hash identifier: k8GY3fwzKDb6h+Ce9NU08T315hD0PKvMmvd6JqIvhKY=
Subject key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA16CAA67396DAA06035D94E5CB897
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41557
IP: 89.205.0.0/17
IP: 185.47.56.0/22
IP: 2a04:69c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:ca:a6:73:96:da:a0:60:35:d9:4e:5c:b8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:13:3a:51:b2:cb:20:01:91:ee:bd:be:08:
f7:e8:be:a7:05:55:ad:88:cc:d1:62:d6:31:6b:21:
ac:06:21:02:06:13:0b:da:b7:82:48:86:33:2a:16:
ab:ca:59:d3:58:9e:31:91:12:8d:f4:66:a0:ed:9d:
a5:46:22:0b:53:29:e7:0e:fd:00:b8:c3:b6:33:38:
6f:ca:cb:a9:73:ac:cf:9f:0a:4e:a0:99:5e:b7:b8:
cb:17:5b:91:68:d2:dd:ff:28:72:e2:b9:07:65:e0:
63:6d:9d:5a:7d:42:11:63:ea:8c:ab:1f:c3:d3:53:
2a:44:da:c4:cb:9c:39:f4:23:8b:81:bb:d9:cd:53:
43:3f:6d:25:c3:a2:65:b6:d0:1c:7e:ca:56:fa:0e:
00:48:96:a8:07:ed:28:c0:62:65:81:dc:ad:a9:44:
07:83:60:03:4e:3d:98:5b:28:36:a8:0c:6b:9f:ff:
f9:55:5f:03:34:44:a2:3b:41:94:b4:6c:b5:05:20:
d8:95:b3:48:98:f7:bf:b5:29:55:20:e0:79:55:f4:
4c:4f:c7:f6:15:96:e0:62:7d:9f:9f:77:ee:60:4f:
a0:74:69:6f:1a:e4:4c:e8:92:29:7a:b0:5e:e9:56:
91:a5:69:ea:8c:e7:0a:92:50:4b:af:fa:b4:d9:69:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.205.0.0/17
185.47.56.0/22
IPv6:
2a04:69c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41557
Signature Algorithm: sha256WithRSAEncryption
22:2c:d7:92:63:b9:fd:9f:44:e1:f7:07:e9:3d:0a:0a:eb:06:
6c:1e:fc:46:de:62:ef:70:cd:bd:db:68:d7:31:93:53:ff:36:
92:ed:5c:ab:cf:5e:50:31:e3:4b:e4:18:1b:ca:9b:2e:da:42:
9d:02:ed:0c:10:31:bc:e3:c2:f0:6a:aa:eb:96:77:67:7c:4c:
9e:7b:5e:87:94:95:22:77:0e:71:a4:df:83:58:8b:71:5b:ea:
42:67:39:c5:2a:d1:6e:7a:a4:16:d6:1e:17:ec:a0:11:0c:4c:
57:7d:3e:66:84:f6:31:7f:6e:89:10:0c:d5:88:67:d7:bd:c3:
3d:63:2d:f6:74:a4:d1:8c:d2:09:bb:b3:a4:cb:89:ae:ee:f8:
ab:08:35:6a:7c:53:16:ff:df:28:79:b3:a7:47:6c:6a:f1:7f:
5d:c1:3f:a4:db:e6:51:60:86:cd:cb:1b:c7:f8:b6:ee:0a:ae:
b2:65:81:ae:4f:35:1c:06:33:ac:bb:8e:b4:aa:c9:cb:58:f8:
00:d5:1e:b8:ac:31:33:9b:fe:b3:53:7a:b9:5a:1a:d6:41:52:
bf:36:d1:15:3b:db:a2:b0:9a:92:a2:83:26:1a:1e:ae:95:06:
6c:f5:b2:35:44:7c:d4:23:7f:21:0a:e1:76:1c:6c:2d:61:16:
73:6f:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:47 2025 by rpki-client