Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer (raw, json)
Hash identifier: Szx3kBPzY1EZMKhsap3FDdi/FuATTnjofpFP/oUaydk=
Subject key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D71168C2E701838566FB16D869F1B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43942
IP: 91.200.128.0/22
IP: 91.223.155.0/24
IP: 185.208.16.0/22
IP: 212.84.48.0/21
IP: 2a01:4840::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:11:68:c2:e7:01:83:85:66:fb:16:d8:69:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:ea:2e:b3:59:a2:83:4a:a3:71:f4:01:3b:
ee:05:1e:db:3a:a1:94:8b:8f:ef:00:dd:bb:4a:bb:
4f:a6:60:42:03:3b:34:df:b2:36:41:03:fa:26:d5:
9d:17:12:57:3d:9a:57:4b:ba:2e:75:1b:3d:a4:06:
8c:4c:ee:62:f8:57:18:a9:eb:80:cb:02:a5:78:3d:
34:d8:07:e5:0e:58:d3:04:ab:15:af:3d:18:e2:73:
7c:e5:d1:80:f4:b0:97:81:b9:51:16:82:bd:52:60:
f5:f7:af:50:d7:d1:fe:cd:43:9b:07:22:54:b4:e4:
9c:50:03:26:13:eb:e6:7d:22:3a:87:01:e0:81:c1:
37:b0:fe:13:58:dc:c1:2e:64:9b:94:56:00:d2:99:
7a:6f:33:74:92:33:be:c3:ab:5b:c6:14:b6:a6:e4:
dc:e5:79:84:74:ea:8c:9c:19:fe:3d:93:d5:0d:29:
62:df:7f:69:44:ce:c6:52:13:e2:42:d2:40:d0:a3:
f2:b6:d8:3f:62:8b:55:66:1e:70:83:4c:f0:97:e3:
e2:84:a1:91:90:78:e7:e5:f8:80:0d:e7:67:9e:90:
d6:07:e7:c3:5c:cb:8f:34:0d:7f:ac:32:d0:6a:bf:
39:ba:ca:e2:ab:35:42:b4:12:4e:26:d3:74:36:4c:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.128.0/22
91.223.155.0/24
185.208.16.0/22
212.84.48.0/21
IPv6:
2a01:4840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43942
Signature Algorithm: sha256WithRSAEncryption
9f:b7:d8:22:e1:15:45:52:92:59:04:c0:5e:1a:0d:38:ed:86:
08:af:31:93:a4:eb:32:dd:55:ad:00:8c:02:04:1c:ff:c9:fa:
64:e9:de:73:f2:69:c6:f8:58:c3:82:e6:9e:01:b0:b9:a0:5c:
e9:59:19:57:18:9e:f2:9e:e8:a3:ea:37:44:70:34:1b:7e:42:
78:00:5a:5c:6d:64:92:71:7b:5a:b5:8b:00:3a:a2:d0:7e:f0:
f3:f4:23:ce:a4:27:76:0d:1e:1e:ed:94:a4:c7:3d:9d:89:97:
7e:d8:f4:63:7d:86:99:9f:27:6c:bd:2e:08:77:43:d0:a0:b6:
9c:c8:51:60:5d:56:cc:a6:8c:be:f6:53:69:49:b3:04:e6:d3:
e0:a1:8b:47:e6:4d:2f:c1:33:a7:4b:94:62:ca:3f:f1:49:6c:
13:5a:28:67:fd:80:f4:55:4c:e2:fe:8e:df:01:e1:ee:f8:aa:
34:61:4a:ac:9f:21:90:93:74:7e:7a:c9:30:f1:4b:49:f8:80:
25:f4:01:cd:ff:b2:17:5f:44:f4:c6:8c:bb:29:e3:98:a8:c9:
2f:57:fc:01:54:e6:95:e7:b6:08:08:5c:d5:86:52:4c:b3:4e:
a2:9d:9e:2e:23:c2:6e:b1:86:19:96:59:e0:d4:8d:b7:fd:32:
8e:10:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:23 2025 by rpki-client