Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.cer (raw, json)
Hash identifier: xBp+iFtWhxlYw9P6Fvg6uK/2sR/YEeqi9rRqwPeJuVU=
Subject key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7B9F6D33A4DF82F15DC02DE99880
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58138
IP: 91.239.32.0/23
IP: 185.43.80.0/22
IP: 2a04:9040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:9f:6d:33:a4:df:82:f1:5d:c0:2d:e9:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f1:d4:1e:7e:ef:45:24:5d:ca:86:f5:17:
38:9a:ea:3d:06:39:b3:ad:b8:05:4f:d2:34:3a:6a:
8b:4e:c1:e3:8a:cc:c1:45:06:8c:5d:a1:32:89:93:
58:29:41:6d:50:03:b7:93:35:f4:1a:3f:be:40:f7:
9f:e7:85:88:9e:10:1c:dd:57:a9:a9:fe:2f:e0:54:
56:d3:27:da:88:be:68:d2:30:ff:e0:84:18:c5:15:
d8:f0:e1:96:23:14:aa:bf:d8:48:46:12:1b:ac:a5:
07:e0:d8:9c:f7:dd:5f:15:af:b5:67:ab:2a:18:9c:
8f:7d:40:1e:d4:9f:cb:06:d2:1f:74:9a:e5:29:17:
60:f5:b8:26:35:75:d4:5e:6f:f4:46:3d:61:4e:98:
ac:3d:77:15:fd:fd:46:ce:79:9a:ed:33:74:2f:af:
34:55:50:16:17:ce:b1:e2:3b:9b:de:cb:71:dc:de:
f3:ff:e2:d1:87:04:9d:0d:7a:ca:18:fd:bb:98:70:
9e:4a:f9:a3:75:10:40:9a:09:ff:5e:d9:4a:37:b1:
28:ba:0b:da:4f:dd:d0:3c:5d:11:a1:83:15:d9:34:
e7:e2:31:99:99:c1:e5:86:fd:b4:60:26:cb:03:57:
ba:09:d6:01:c1:0c:cf:56:a0:46:fd:38:2b:12:8e:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.32.0/23
185.43.80.0/22
IPv6:
2a04:9040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58138
Signature Algorithm: sha256WithRSAEncryption
3b:73:69:1f:07:18:ed:e5:a3:68:f9:63:b0:7c:1c:06:4a:dd:
84:18:6e:ec:1b:90:03:75:2e:3e:44:48:18:d0:82:3a:04:ca:
bd:56:5c:30:f1:fb:57:3f:2d:de:3f:0b:9f:e9:eb:ee:60:5d:
a5:80:6f:b6:47:da:a8:ea:69:96:ad:9f:40:bc:6f:f3:61:b0:
1a:99:cb:eb:84:ef:d8:86:75:b2:28:df:d0:fb:df:d4:ab:ec:
b7:b4:26:b4:04:32:5e:7e:47:28:1a:59:25:4e:f2:19:9f:8a:
21:f7:ea:a6:c8:34:00:fb:61:28:8e:df:fb:49:03:83:42:f9:
dd:2e:c3:ef:33:ad:89:aa:cc:17:0e:5a:43:a1:0d:78:80:73:
6e:dc:02:45:dc:d3:ab:7b:3f:ff:59:6b:32:73:0b:d3:84:61:
9c:0e:aa:df:44:d1:df:d1:63:10:62:76:78:0d:94:5d:e9:cf:
df:56:a1:6a:51:24:b0:a1:fb:27:5a:fa:53:5d:47:9a:7a:78:
b3:fc:c9:bf:3d:30:a2:fb:6b:b2:b3:77:de:49:5c:55:51:74:
46:a2:9c:84:fe:19:b4:75:c8:fe:98:8a:fe:95:28:2b:5e:ab:
43:a7:d1:fc:eb:d1:7d:4e:23:44:76:79:27:4a:df:d1:4e:5e:
5b:d8:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:05 2025 by rpki-client