Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer (raw, json)
Hash identifier: 0Uc6PJWXA8xrIyz/BDu4N1Q7nmB9z09KJO871KRjbhA=
Subject key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5F272AE0067FFC534467F534D6F5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61425
IP: 5.198.128.0/22
IP: 185.239.216.0/22
IP: 2a0c:6380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:72:ae:00:67:ff:c5:34:46:7f:53:4d:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:5a:ae:65:44:3b:4f:1b:5e:53:7b:2d:d9:
a6:27:5f:91:ea:7d:91:91:95:59:20:f1:54:25:ba:
0a:7a:ed:1a:2d:5f:65:8b:71:5c:8e:ac:3e:30:ad:
90:36:f4:79:43:6d:63:cf:a8:9b:bb:20:6d:38:f6:
e6:fe:ee:06:6b:a6:5c:26:64:7c:a0:4c:a7:cb:06:
97:57:b2:2a:c5:f7:a8:bd:08:a8:90:ff:53:68:51:
9d:fc:00:de:8f:ca:0a:58:10:44:3d:07:23:a9:f9:
9c:57:d4:be:14:d6:c5:a2:7f:74:81:4e:b8:79:70:
ae:75:19:ec:05:49:96:d0:7b:68:08:83:9d:50:3f:
17:e5:12:0a:2e:d0:21:58:8a:52:95:5a:60:97:b9:
db:db:ba:8b:08:31:0e:e5:ef:0e:ee:b8:4a:a0:7d:
d6:75:49:83:eb:3b:48:d6:13:de:83:5b:21:9f:59:
6b:0a:f5:ff:03:8d:28:61:0f:d9:a4:cd:3f:99:66:
b5:a5:f6:72:cc:95:d4:7c:09:de:48:93:b3:c3:6a:
f7:4f:45:39:26:c1:ea:bd:a0:69:a6:29:62:45:a3:
3b:47:71:e3:1b:03:f9:a2:26:a1:59:cc:c9:29:e5:
2b:67:64:ce:fc:8e:72:7a:37:2b:ba:35:58:df:b4:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.128.0/22
185.239.216.0/22
IPv6:
2a0c:6380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61425
Signature Algorithm: sha256WithRSAEncryption
44:6a:8f:09:1b:bc:f7:ba:19:ae:1b:54:e2:9e:e5:9f:73:2f:
8d:e9:ca:8e:af:e4:f3:ee:17:a0:f2:d6:9e:86:30:a2:e0:cb:
a1:bf:d0:48:79:c8:5a:26:e0:2d:d1:e6:6b:64:b1:6a:28:bb:
69:96:12:c0:c5:35:30:f9:e5:fb:2f:f8:ec:31:a0:4a:7f:0a:
f3:2f:70:75:c5:e2:18:e3:1e:18:8b:37:24:05:41:9e:ec:bc:
a9:0f:a5:ac:1d:e5:63:c5:c7:f3:6f:76:76:bf:5c:32:3a:77:
d4:1b:85:06:ab:4b:03:43:35:68:e7:67:2b:e8:25:31:26:e9:
35:14:ed:85:04:87:55:ec:5d:34:69:23:bd:bd:55:bf:67:01:
5a:f3:f4:33:f5:9c:84:b8:ef:c1:4a:68:62:49:83:8f:8a:f9:
b7:d5:14:8b:94:24:60:98:96:1d:3c:c1:d5:17:20:6d:44:9b:
d1:50:3c:26:26:7f:99:21:94:db:37:7e:38:87:c8:2a:37:08:
f1:d5:dd:f0:37:a9:a6:96:cf:88:84:7e:d0:5d:94:5a:0f:82:
3d:c9:e5:8e:2b:80:2c:1f:00:b4:4f:a0:d6:4c:35:dd:ac:39:
ac:f3:72:ed:80:7c:eb:ef:0d:23:e3:11:03:3c:5d:cf:9d:8b:
1b:38:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:32 2025 by rpki-client