Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer (raw, json)
Hash identifier: ViEyvoQZDPAD1hGmEQewNqAoiJYmgJnBYzG8+s7bg2U=
Subject key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DCF0F34BC259A310F59E34FE22CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205113
IP: 185.248.204.0/22
IP: 2a0c:1500::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:f0:f3:4b:c2:59:a3:10:f5:9e:34:fe:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:ba:8d:8e:52:e8:85:37:ae:1f:2b:a3:c3:
85:d1:56:c6:b1:ee:b8:47:d0:98:d1:5e:d3:45:07:
c7:4d:07:b6:11:b3:3a:ad:ce:a5:50:50:72:3f:e0:
22:cd:ad:63:6e:9b:28:5b:c2:f0:c6:b8:2a:a2:f3:
17:b6:d5:a2:55:79:a1:00:62:f9:7d:3c:5e:33:89:
ba:f4:1b:d4:a3:30:19:fe:90:3d:6c:69:dd:40:b5:
f2:0b:b7:46:b4:95:af:da:f0:e5:50:10:82:db:74:
1d:59:34:75:a6:59:8d:a4:f5:76:b9:cc:ed:85:59:
bd:83:3d:0e:ea:59:1e:1a:c8:2e:80:2b:50:06:bf:
c0:dd:2b:52:ec:2d:65:a0:7d:fc:e0:c9:0b:d5:01:
46:8b:fb:32:73:1a:9c:72:56:90:0c:66:b4:ba:0a:
a9:f1:49:22:28:0e:52:b8:78:16:89:93:07:80:f0:
32:31:fa:59:8f:fc:3e:9a:53:4d:4c:5d:c2:1a:46:
87:bf:bd:6a:8d:cc:25:f4:6e:72:44:0f:27:31:55:
87:70:dd:90:a4:85:ea:a1:56:93:c6:31:0e:15:e8:
57:0d:c6:f2:e4:61:12:a2:2d:7f:fd:6c:db:34:97:
63:70:c3:73:9c:e7:7b:1b:48:7e:50:4e:99:5c:e5:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.204.0/22
IPv6:
2a0c:1500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205113
Signature Algorithm: sha256WithRSAEncryption
6e:d2:db:29:64:7d:a8:49:d8:c7:b1:42:f1:96:aa:c4:56:cb:
0a:73:a8:e9:cd:19:ac:6d:96:00:b1:b3:41:8f:ab:ac:ac:7d:
cd:30:11:6c:58:14:1a:a8:a7:41:db:da:31:fc:7f:67:ef:66:
c0:f9:83:d8:6a:0e:88:0d:7a:dc:11:85:2e:1c:05:8e:00:ab:
c6:70:dc:9d:db:8f:b9:44:8c:04:c0:87:8d:dd:48:f2:1a:1b:
0a:96:aa:6d:49:9b:f6:74:ea:36:57:02:f4:1f:bf:e5:a3:ee:
87:58:ad:14:d7:49:37:e7:c8:9c:3a:59:aa:59:06:ea:c8:0a:
6f:3b:d7:2e:4a:df:e8:b4:79:e5:d3:dd:d8:01:d8:14:42:cb:
04:72:8c:2b:84:4f:0f:4f:0f:4d:76:e1:6e:9a:14:ac:53:8a:
8a:8a:79:34:db:4e:fe:7d:05:c9:1b:36:2c:c1:8e:63:2d:cb:
98:13:09:00:f4:e6:97:bd:48:a0:56:74:2e:b5:2b:fa:b0:64:
b0:59:5b:98:7a:62:48:5e:00:90:2c:e4:2b:50:cb:bc:9d:a3:
59:cb:f9:58:57:92:37:88:1f:73:83:a5:95:dd:a0:2a:8b:cf:
01:10:01:c0:aa:20:66:d0:15:c9:07:bc:6b:f5:8f:dc:a2:5c:
3d:86:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:08 2025 by rpki-client