Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer (raw, json)
Hash identifier: SiMRpihdbpNKMzbBtrV1HoSDPKfI92sA7cG04op6EJU=
Subject key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218B018A02EF944D7BB09D8E4AB283
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44482
IP: 91.199.138.0/24
IP: 91.225.92.0/22
IP: 194.28.52.0/22
IP: 195.238.116.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:01:8a:02:ef:94:4d:7b:b0:9d:8e:4a:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:60:e2:e5:ab:57:43:56:6b:45:1a:84:7b:
5c:09:bd:8b:eb:a1:71:19:01:d9:a4:5d:d3:b6:54:
e9:7b:18:4b:7f:7f:55:34:68:d8:7a:5c:9e:23:fd:
ac:eb:12:f4:7a:81:30:b4:3f:1e:ea:17:47:b0:b4:
12:c8:09:62:a1:cc:59:c5:49:1e:39:3d:be:84:86:
e0:69:df:da:aa:01:d5:8e:d6:5a:4a:a4:64:7e:ba:
3c:15:b6:0f:c7:fa:3e:e9:f5:f3:3f:5c:4a:51:f2:
c9:12:50:f0:40:7b:6f:76:06:26:b1:18:fb:5e:f2:
80:d9:b7:f1:97:cc:6f:15:8c:c3:cf:cd:4d:9e:b2:
ce:b6:48:ab:c7:bd:58:4c:05:86:3d:76:3f:bd:76:
e4:04:06:3a:d1:42:8f:ac:fb:da:2b:ae:85:c6:d2:
24:ea:91:87:e4:e9:fb:d3:51:78:b0:7d:13:34:6f:
4f:f4:16:99:0a:0c:49:9c:e7:67:01:b0:46:61:36:
07:5f:51:8d:cd:20:a0:1c:a6:30:bf:31:92:a7:cd:
1f:a3:0e:09:0b:3d:10:49:61:82:f1:e8:e3:81:bb:
1d:30:83:e6:35:c5:61:e5:e4:97:64:d0:94:e6:d4:
5c:fb:24:11:70:c0:dc:57:71:5d:fc:bb:2c:28:df:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.138.0/24
91.225.92.0/22
194.28.52.0/22
195.238.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44482
Signature Algorithm: sha256WithRSAEncryption
0d:13:44:d8:6c:eb:c1:d7:da:90:0f:e4:c0:b5:06:3d:99:da:
b9:43:0b:51:6f:84:a9:bf:aa:10:cf:18:23:cb:36:c1:ce:3d:
96:63:d9:1b:03:9e:ab:59:fd:f5:de:dc:64:11:38:46:b4:2e:
5d:9e:1f:23:f3:01:8c:23:6e:02:f1:0b:6d:58:d3:66:f3:63:
b5:c9:1c:b2:10:28:95:54:83:cc:f7:30:72:28:64:95:a7:a3:
e6:86:1f:6b:31:8a:bc:78:f7:f2:62:26:a7:35:46:64:fe:e2:
47:68:74:75:a4:b3:60:22:49:79:b7:2d:50:1c:cb:94:ca:08:
e4:b1:5b:8c:e1:4b:d9:dc:12:d3:54:85:13:68:3a:aa:81:c7:
2e:20:c0:fe:4d:15:57:dc:1c:9f:32:ec:49:49:00:9e:64:c8:
2f:24:2a:e4:02:6e:e1:bc:aa:7e:55:f5:5b:ab:57:04:2c:ce:
1c:9c:c6:c1:d0:87:05:d2:8a:76:96:e1:dc:6a:9f:62:0b:f8:
9d:37:aa:af:3c:b5:93:d2:95:64:ab:1e:4b:87:00:15:ed:6a:
7b:76:9e:41:a7:7d:08:64:b9:47:96:74:48:36:28:4b:04:30:
56:65:9f:a7:60:3f:b4:87:a7:0c:15:cc:c8:2f:3b:79:7a:77:
c9:75:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:53 2025 by rpki-client