Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.cer (raw, json)
Hash identifier: Lk4kwS0JNOp9Un3iJ3au0lURm4ceOWMVCSwPGbAbjVA=
Subject key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747A7B6830A3D0FF4E553A1FCE272CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35199
AS: 61233
IP: 80.73.245.0/24
IP: 91.246.13.0/24
IP: 178.219.16.0/22
IP: 185.14.148.0/22
IP: 185.135.192.0/22
IP: 185.143.160.0/22
IP: 185.214.67.0/24
IP: 185.226.98.0/24
IP: 185.234.208.0/22
IP: 193.19.164.0/22
IP: 194.146.4.0/22
IP: 217.28.134.0/24
IP: 2a03:ae40::/32
IP: 2a13:2800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a7:b6:83:0a:3d:0f:f4:e5:53:a1:fc:e2:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:ee:2c:f4:75:8b:82:29:6f:f8:08:f8:c7:
e7:72:a7:5e:c2:a0:a9:71:8a:51:5b:ea:c1:1d:3b:
ed:95:db:cc:01:33:69:01:75:a7:c3:db:76:b9:69:
8f:45:1f:91:ee:40:39:1c:85:bb:4f:25:3b:2e:52:
ca:33:c9:aa:d3:90:3d:0a:df:99:f0:35:1a:b1:bf:
45:3c:d2:f9:03:93:c1:0d:6e:52:83:2b:78:8c:f7:
bc:1e:f2:6b:d2:8b:de:a9:04:c3:78:02:66:91:b3:
d0:e4:c0:27:31:d5:05:27:7d:a8:fe:9c:7c:68:f0:
f8:d8:f9:aa:11:46:d4:0f:56:ff:74:1b:19:a3:dc:
53:47:3f:3f:93:a8:a3:bb:f4:ae:65:47:0e:bf:8e:
81:88:92:8f:ff:ee:a4:51:c6:21:44:39:c5:38:a7:
03:68:51:15:66:80:a0:61:31:57:01:30:c0:f7:68:
08:cb:de:c5:c5:f0:27:ef:51:d9:52:f3:d6:bd:30:
05:07:2e:59:53:63:a6:1e:30:9b:d6:4a:69:a5:86:
ed:67:15:af:a2:99:f4:e0:ad:39:d1:cc:cd:be:4a:
f9:6d:b2:f8:17:0d:9d:85:7c:8c:55:36:b0:d2:7f:
57:25:5a:9c:4c:1c:5a:3e:ef:80:78:f5:ad:5a:49:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.245.0/24
91.246.13.0/24
178.219.16.0/22
185.14.148.0/22
185.135.192.0/22
185.143.160.0/22
185.214.67.0/24
185.226.98.0/24
185.234.208.0/22
193.19.164.0/22
194.146.4.0/22
217.28.134.0/24
IPv6:
2a03:ae40::/32
2a13:2800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35199
61233
Signature Algorithm: sha256WithRSAEncryption
44:2d:c5:2d:29:7d:73:7b:62:df:7e:33:1f:78:c8:90:91:4e:
07:a6:e8:b0:80:47:77:5b:1d:de:14:ac:53:c6:9e:09:47:ad:
9d:d3:88:f1:9d:5a:fe:28:76:06:f4:39:ce:b9:6d:7f:24:2b:
73:ba:aa:51:60:3a:a0:d9:6e:f8:ef:44:74:c9:be:71:a7:a7:
a8:c9:31:64:ed:bb:f3:d1:9e:6a:28:9c:ca:0b:f9:38:07:eb:
71:b9:7a:49:08:49:4e:70:49:a8:6c:63:c4:66:52:43:93:92:
1e:4a:44:93:e1:18:8b:4c:a1:67:d9:aa:f5:8f:05:ef:57:d0:
1e:00:65:4e:d3:d8:67:e3:19:e8:a0:61:4a:7c:fd:fc:ce:6f:
5e:a9:5f:dc:e9:f7:07:59:7f:68:df:c7:2a:8d:68:d2:76:fa:
6e:ce:b1:6b:53:cb:9c:7c:3f:b9:d1:02:fa:57:64:e9:4a:13:
99:89:ec:1c:41:ee:d2:f6:7f:32:6f:d4:ae:c4:12:67:a0:6d:
15:b9:9f:fe:53:c5:71:0f:c0:98:3c:ab:3a:7c:03:7c:24:3c:
dc:4a:64:01:77:c3:23:6d:00:f5:55:88:a0:29:03:0c:c3:83:
c9:0b:0b:79:58:7d:5b:05:87:1b:7d:73:11:47:51:1e:34:2d:
82:4f:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:00 2025 by rpki-client