Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer (raw, json)
Hash identifier: gGRb2/XIz+uv31GlXKhyuUVJoXJBpzHbXfWa31CUZ7k=
Subject key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425217F1C65D57822C2D310E53EFD4B37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198401
IP: 31.24.83.0/24
IP: 31.193.187.0/24
IP: 45.82.144.0/22
IP: 62.3.27.0/24
IP: 91.234.12.0/22
IP: 176.126.118.0/24
IP: 185.96.52.0/22
IP: 185.146.244.0/22
IP: 2a07:5040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7f:1c:65:d5:78:22:c2:d3:10:e5:3e:fd:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:21:eb:6c:4c:d9:97:70:43:93:ca:33:9c:
cd:44:e3:8c:f4:5a:22:09:45:5e:bf:de:a0:67:43:
df:f3:e5:0b:98:ec:85:d8:30:40:15:0f:de:79:07:
98:09:1e:06:a3:5c:7a:04:8c:c2:f6:8e:1a:3a:89:
3f:2a:f5:fe:65:7e:4e:10:b1:fd:f8:1f:d2:d2:b7:
ec:a1:2b:e6:75:27:05:51:f3:d5:41:45:cb:84:b1:
c1:ec:87:1d:b2:c0:ba:5a:cf:1c:0d:8c:0d:6f:21:
4d:47:ee:df:09:75:3e:d8:53:f6:ce:8d:b5:14:97:
9b:df:8c:4f:ad:cc:bf:26:e9:e1:53:d4:2b:ba:6e:
7f:4c:4e:f9:03:97:18:6e:16:ec:93:ee:fd:61:77:
88:93:0b:8c:2f:48:30:04:23:1f:52:cb:45:64:0f:
8c:e4:1b:98:f0:1c:67:66:d0:f5:2e:f5:76:e0:7f:
85:9a:27:19:dd:8e:00:3f:f4:90:78:82:56:f7:dc:
b2:35:69:e6:7a:7d:9b:79:76:cf:f5:91:49:bf:64:
f8:03:20:0e:26:95:e9:f2:ad:1f:1e:e7:5c:39:b6:
bf:37:6a:e9:79:4e:0c:53:c7:ce:27:75:78:fd:c8:
67:30:ce:fe:a9:5f:16:f6:a0:5e:b1:4c:6c:6a:4f:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.83.0/24
31.193.187.0/24
45.82.144.0/22
62.3.27.0/24
91.234.12.0/22
176.126.118.0/24
185.96.52.0/22
185.146.244.0/22
IPv6:
2a07:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198401
Signature Algorithm: sha256WithRSAEncryption
2a:b3:cf:47:d3:c2:4f:84:85:57:a9:70:7e:28:ff:e6:f0:f7:
a9:c2:35:8f:b8:89:5b:8d:7f:5f:28:7c:dd:9b:d3:e9:5c:20:
88:20:17:1b:98:0f:e7:5a:2b:39:05:5b:44:1e:40:4b:bb:dd:
bd:a9:9e:c6:50:92:6f:31:c4:c8:3c:92:52:d5:54:eb:25:3b:
e0:0d:c4:aa:98:17:9d:86:ac:f0:6e:97:8c:d8:34:6d:92:c0:
c4:e4:5e:c1:4d:46:57:3b:52:b0:ea:86:d1:da:1b:be:f5:05:
34:c8:12:10:6e:5d:37:6f:35:2f:de:4a:9b:55:b5:a0:8c:6d:
b7:c2:10:61:8c:90:0d:8b:86:35:33:9d:7f:d0:86:eb:88:65:
6f:8a:f0:82:2e:ce:7a:3f:15:ab:2d:cb:01:68:98:8e:75:6c:
b6:e5:49:ed:78:01:d6:3a:cf:5f:cb:c8:02:51:4b:a3:3d:cf:
fd:8b:4d:3c:3b:e0:ec:aa:46:c6:84:6f:f8:bd:a2:a0:f9:ca:
7b:82:a4:33:b0:a5:a8:57:44:f9:ed:b3:b2:cc:46:3f:9f:f9:
c0:02:13:99:28:93:b6:60:a4:af:ce:bf:0f:2d:d0:94:c4:7c:
bf:2f:02:83:a6:e6:d0:b5:b7:25:83:2f:a0:29:91:25:04:95:
03:7d:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:13 2025 by rpki-client