Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
File: H_p_dysyOyTb5p0_Os91XmnWAc0.cer (raw, json)
Hash identifier: SPNRS6AQdp9PhIpJW0omeCSBbVQxxnwUbG9fO9ecVy4=
Subject key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6339310551C49183FA46E2E53EE55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202936
IP: 185.148.64.0/22
IP: 185.241.232.0/22
IP: 2a01:e4c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:33:93:10:55:1c:49:18:3f:a4:6e:2e:53:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:e9:b5:4b:62:60:40:25:d7:0f:5c:0a:a6:
7c:60:9c:53:01:62:10:50:cb:ee:8e:aa:53:0d:e9:
68:9b:67:af:67:b5:a6:d0:45:97:13:f9:1c:d2:47:
34:ca:d3:81:39:f2:a9:01:29:f0:a1:7d:d0:2d:d1:
ea:24:e7:b2:ce:38:45:e3:90:76:97:5b:b2:ea:62:
b4:5b:56:cf:fe:6d:82:eb:b0:0d:84:e5:83:0a:f7:
db:4d:5b:0a:38:e9:eb:5a:89:c4:f5:bc:13:d8:e1:
19:93:1f:ea:ff:f9:36:09:f8:13:69:a0:e1:ca:27:
6a:54:37:cb:ba:fd:49:65:41:f5:b7:e8:2b:8b:16:
ba:4a:eb:a9:74:95:01:d1:65:7e:56:81:70:8f:66:
a0:43:70:ba:13:52:2b:8f:2d:1e:ad:54:4c:5c:51:
84:7d:64:7d:3e:b4:4f:2a:6d:da:34:48:45:8d:20:
9d:1d:08:12:86:c5:cb:d1:ee:dd:53:9c:fc:72:c7:
21:a1:a7:b0:2b:2c:84:96:7d:4c:8a:f8:e3:36:f4:
51:77:10:53:9f:2a:34:23:08:bd:44:f0:23:f0:77:
08:37:5e:a2:72:d5:0f:1e:f7:8a:07:41:5d:be:b6:
f0:c4:cc:8d:37:a2:48:14:a7:51:8c:cd:4e:28:35:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.64.0/22
185.241.232.0/22
IPv6:
2a01:e4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202936
Signature Algorithm: sha256WithRSAEncryption
31:f2:7f:51:96:74:7c:1e:63:71:da:e7:5a:ed:b4:a0:c6:ff:
71:71:8e:4b:4d:68:9a:dd:47:0a:eb:d3:eb:52:ca:87:a9:50:
93:2d:05:dc:87:e9:b5:32:7c:e2:33:a2:a6:fb:cc:41:48:ad:
a4:eb:47:42:79:24:24:2b:38:66:35:95:93:98:ab:80:9c:23:
25:af:03:6d:d6:07:a0:31:c4:d1:7c:7e:a7:6d:33:4a:b9:ff:
d0:62:b2:1a:06:d1:dc:00:ea:a3:1d:1d:f3:86:7a:be:26:4c:
e5:75:f3:c0:ad:04:f0:19:8a:ca:cc:5b:43:eb:67:17:e6:3a:
ea:9f:21:b9:be:77:59:58:3a:96:35:ba:88:36:0b:a9:7e:58:
e8:74:70:78:b5:be:92:db:36:4c:fc:ba:37:20:a0:b9:96:13:
3a:53:20:b7:26:9a:ab:39:91:6c:19:d0:00:f7:4b:66:29:64:
27:ee:e8:1f:1a:4b:ab:e1:d2:c9:90:6b:01:e9:70:af:f2:b7:
be:24:a3:78:6c:b1:60:ef:ed:87:29:74:f3:fb:0a:cd:f2:fa:
80:23:e2:61:99:39:6a:b5:05:1f:86:f0:dd:ef:4f:a1:50:69:
9a:fa:ec:5b:b0:d9:e7:1f:86:bd:69:7d:59:da:1c:62:08:4b:
6e:1e:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:16 2025 by rpki-client