Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
File: D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer (raw, json)
Hash identifier: aR6GUC9A6hmoLPATEQHD8I4wfpZAFUEsfgU/6kijkGw=
Subject key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F21D990B35BFCE4305E9EE85DD568
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42807
AS: 206227
IP: 5.253.140.0/22
IP: 31.207.80.0/21
IP: 37.230.104.0/21
IP: 88.218.128.0/22
IP: 92.119.76.0/22
IP: 94.199.200.0/21
IP: 109.232.216.0/21
IP: 141.98.204.0/22
IP: 152.89.36.0/22
IP: 171.22.184.0/22
IP: 178.157.8.0/21
IP: 185.15.40.0/22
IP: 185.99.196.0/22
IP: 213.159.0.0/21
IP: 213.159.28.0/22
IP: 2a03:adc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:d9:90:b3:5b:fc:e4:30:5e:9e:e8:5d:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:24:23:1e:48:2a:4a:54:1e:69:b1:73:76:
64:5a:76:e6:40:66:f8:3c:71:c5:04:ca:0a:ff:66:
00:2f:c8:54:42:c9:11:c4:4b:8c:72:9d:9a:27:e9:
6c:51:62:3d:57:b7:54:11:2c:8d:6d:92:be:8f:02:
c1:6d:fc:1a:a6:5c:fe:24:d3:21:b5:0e:ba:51:0b:
23:e0:2a:90:7e:57:00:be:6f:35:5b:d7:8e:65:20:
4b:3e:30:86:64:1f:80:ce:c5:73:71:b0:7e:21:ca:
91:49:e0:39:09:f3:b7:8e:9c:52:83:fe:dc:b7:df:
f3:91:7f:3a:27:1b:f2:19:ca:df:2c:3d:90:a5:b5:
e4:04:5e:ba:0c:d3:6f:eb:d3:3c:74:c1:f6:c0:da:
77:1d:ad:fc:bd:34:56:75:68:21:cd:a2:05:ed:e4:
6a:c9:2b:f0:0d:8c:48:ff:1a:fc:a9:ff:94:0d:b1:
db:b7:6c:63:28:fb:ce:22:f6:1f:85:d6:e7:8f:b3:
06:b8:6a:34:bd:0f:27:ce:3c:ad:75:05:ec:9b:3e:
30:4e:c7:bd:a9:03:29:e7:dc:48:36:43:ca:e7:07:
ed:c8:44:e3:ec:90:ba:cd:2d:f4:bc:a7:91:12:2c:
23:7e:e1:3b:19:7d:02:40:8c:1f:4a:9c:78:25:77:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.140.0/22
31.207.80.0/21
37.230.104.0/21
88.218.128.0/22
92.119.76.0/22
94.199.200.0/21
109.232.216.0/21
141.98.204.0/22
152.89.36.0/22
171.22.184.0/22
178.157.8.0/21
185.15.40.0/22
185.99.196.0/22
213.159.0.0/21
213.159.28.0/22
IPv6:
2a03:adc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42807
206227
Signature Algorithm: sha256WithRSAEncryption
42:32:89:cf:c6:8c:eb:3e:13:24:58:78:23:05:e5:41:87:3b:
6a:7c:05:4d:3d:3a:02:01:da:06:a5:0f:a9:ab:27:9d:15:71:
56:c0:52:aa:3a:9c:df:ce:0f:2b:3a:79:7b:22:68:85:da:50:
03:1f:76:44:15:f1:bc:86:1b:f2:3c:9f:f3:1d:be:cd:8c:f6:
05:7e:55:ef:46:da:bc:17:ce:cf:aa:37:93:84:b4:ec:f8:03:
94:32:9d:f5:82:3b:c7:c4:aa:14:c3:70:8a:2e:84:fa:9f:ec:
5b:fb:e5:d3:14:86:25:40:66:58:9f:09:03:5d:96:47:d1:6d:
11:3e:9e:85:3d:f7:c1:7a:c9:ff:d8:fb:06:cd:1e:ba:d7:88:
ef:7a:cb:86:b5:da:39:0e:1b:c1:35:6d:18:ca:d3:6b:81:6f:
2e:4b:25:62:86:18:ea:a7:8a:28:10:57:84:bf:f9:56:a6:ce:
f7:dc:16:9b:de:00:c9:3b:1e:1e:0d:05:c1:26:ab:00:41:a2:
64:5e:8e:c8:06:17:8e:2a:a6:2b:4e:17:e5:7a:65:d0:96:b7:
93:46:06:d2:ed:e1:96:95:82:ee:cc:5f:71:4a:ce:3c:d6:be:
67:cb:41:3d:aa:d1:5b:d8:db:07:00:fb:ef:c7:f3:25:86:ae:
fc:fb:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:04 2025 by rpki-client