Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
File: HxKTy74vaSVA08xaboI2YElMQGM.cer (raw, json)
Hash identifier: nyTWZzWAEkJ3/s2UqD53WU1Rju3fguoVcV59H4d9PIM=
Subject key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422201BB4EC1E6A99A0FFBE18B6E19DF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8448
IP: 84.225.192.0/18
IP: 188.44.128.0/17
IP: 217.79.128.0/20
IP: 2a00:1878::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1b:b4:ec:1e:6a:99:a0:ff:be:18:b6:e1:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:01:d5:20:50:f4:9f:6a:36:0f:4e:b2:e2:
87:de:e3:09:75:59:4f:6a:98:ad:96:aa:5b:10:7b:
90:4c:d6:47:46:b3:ae:18:76:76:08:97:fa:24:ee:
ca:7e:b5:bd:7c:11:db:8c:67:b6:08:f1:b0:0c:2f:
50:bf:3c:ab:e6:56:cc:87:f6:f7:17:ce:92:4c:bb:
9e:ef:55:ec:13:64:6f:dd:d7:15:f1:23:34:5e:f2:
a2:12:51:be:bb:e6:21:fe:77:bf:71:8a:f7:88:4a:
59:14:d8:89:a5:50:ab:39:bf:06:a4:a2:59:56:48:
58:a3:e3:f6:a1:8e:81:10:a7:f7:89:03:1e:61:70:
85:b8:21:3c:64:f2:82:0e:6b:48:40:c7:6a:bf:3d:
89:30:18:9c:7f:4e:ef:dd:08:ab:7c:0b:84:31:fa:
18:24:15:91:0c:33:a0:26:ad:26:3f:b2:08:ac:78:
09:31:e4:59:22:fa:ae:8e:34:31:68:d9:d5:c0:39:
cb:bc:09:25:68:2a:f0:fe:a1:2b:09:a3:08:f4:70:
4c:a8:24:95:3e:0a:d4:61:4c:33:65:06:5b:4f:7d:
d2:94:68:8e:2e:47:ed:eb:eb:2b:1b:aa:4b:99:d8:
8f:c7:38:62:cd:46:f4:8b:42:e7:fd:82:f3:b6:ff:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.225.192.0/18
188.44.128.0/17
217.79.128.0/20
IPv6:
2a00:1878::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8448
Signature Algorithm: sha256WithRSAEncryption
76:2b:d1:64:41:a7:18:c6:91:29:8e:33:05:83:37:83:e7:e4:
c6:74:dc:77:60:3c:b3:f8:22:6c:84:78:78:40:eb:db:59:b9:
bb:9c:f4:b0:66:5c:ec:ea:0b:3d:0a:41:84:a5:3f:a5:d7:5e:
82:21:37:df:50:6f:a0:05:1f:0a:99:1d:16:a3:44:7b:d2:21:
c8:18:1c:e0:75:b4:93:24:1f:d8:66:ce:eb:e2:33:a2:ff:8f:
c1:7c:9f:74:c1:2d:02:30:7d:e9:58:ff:60:db:ba:53:0e:51:
10:2b:8a:c6:7e:de:77:6c:8b:b1:83:74:3e:76:e1:92:69:76:
90:7b:9b:5e:47:14:e9:e4:c8:f6:c1:e3:a6:1c:fc:72:28:96:
93:70:26:55:f6:94:68:49:75:c4:77:54:ba:dd:41:72:89:1f:
bd:e3:0c:48:c7:92:7b:4d:96:fc:95:75:5e:39:cb:a9:71:c9:
07:f5:af:03:39:0e:9a:2c:d2:67:1c:19:f8:61:0f:b8:92:dc:
7d:62:57:da:4c:77:f5:1a:d1:b7:f4:7e:fb:17:c0:a7:fc:f3:
a4:02:dc:30:86:c2:31:85:b2:48:0e:c5:42:91:7e:1c:ab:17:
fb:19:99:70:1a:37:21:a5:9a:5f:1b:54:7a:66:a2:d7:b5:5d:
ca:7a:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:54 2025 by rpki-client