Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
File: Ib-nezzXgpM-XyVURdQorfvcoOE.cer (raw, json)
Hash identifier: lnQNDgWD+usbw/SpmBQyybTKjv0H3y792Jvx+3fa64E=
Subject key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC19855171DA3C5DBEE04D72E59F91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13302
IP: 185.166.16.0/22
IP: 2a02:17e8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:19:85:51:71:da:3c:5d:be:e0:4d:72:e5:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:25:3e:e3:d9:30:b3:70:a0:e8:0d:57:43:
f5:2e:71:0d:97:1c:8a:1e:fa:54:a8:2b:12:50:be:
c2:a6:21:79:f4:95:a0:27:d3:d1:da:d0:22:61:4a:
00:0d:55:15:63:75:45:5b:65:83:97:e1:01:78:26:
93:54:da:1d:cf:25:57:8f:6c:c2:72:fb:16:fd:71:
5b:c0:dd:8a:d7:15:5a:a9:7f:e8:ba:23:27:80:3b:
51:e6:80:ee:8f:98:b7:eb:4b:05:fc:ae:35:77:9c:
e1:00:24:37:ef:04:04:32:ae:41:2b:4f:b0:47:ba:
63:d4:d1:db:fa:20:33:96:5a:af:2b:d4:7a:6c:7f:
76:6e:eb:52:65:c8:bb:f0:b1:61:75:3d:cc:60:b6:
86:af:29:49:49:4a:6e:81:b9:fa:22:d1:64:2d:ef:
e7:29:99:8c:c1:80:90:01:11:52:57:a0:10:af:c8:
75:16:d9:dc:bf:7b:fb:d4:b5:a7:df:f6:22:f7:ce:
44:39:13:70:ac:61:d8:cf:c2:75:9d:12:87:2a:73:
9d:4a:21:1b:e0:c5:de:cc:b0:33:b3:e8:3e:3b:b3:
75:20:12:f8:b7:63:18:f3:c9:a9:0c:c7:d5:58:d9:
67:35:55:c2:67:ad:b2:a4:e4:c6:7c:bf:e6:3a:82:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.16.0/22
IPv6:
2a02:17e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13302
Signature Algorithm: sha256WithRSAEncryption
8e:8b:cb:46:49:06:dc:fa:c4:50:d9:7c:0d:a6:f1:b8:64:1a:
7a:12:8a:6b:0e:dd:b7:e0:be:5f:57:2e:a6:69:05:7f:e8:a9:
4c:05:fd:4d:42:f8:2a:fa:ba:5d:a4:df:ee:a6:0d:d8:92:5d:
ae:78:f7:7a:67:5b:74:45:da:6d:68:d5:24:98:a0:af:20:16:
73:8d:74:64:b2:ca:e9:98:e4:2d:d0:04:d5:c1:d0:fc:8a:0f:
3b:f8:25:70:19:60:17:fb:ab:be:fb:71:5a:46:1a:ab:88:db:
b2:26:c8:4c:b2:ec:c6:73:b4:70:48:c6:4c:a4:63:40:ad:2f:
0c:be:b6:39:93:73:b4:82:43:e9:cd:b0:45:4b:30:2e:f2:c2:
c0:4d:ae:c9:64:31:13:7c:13:51:1f:67:1c:78:31:58:71:88:
47:7c:3e:45:ff:61:3f:5c:cf:da:7f:fe:2a:57:9e:33:33:55:
71:9a:fd:bb:16:fe:7d:a1:47:d4:c4:75:53:9d:fe:bd:40:06:
a7:cb:e5:8d:34:1e:d0:24:c5:ac:61:a3:d9:5d:41:5f:30:f5:
56:cf:61:02:d5:ce:1c:81:b6:fb:8e:7f:c3:0b:a2:bf:41:bc:
e1:5e:2a:a5:dc:24:2a:1a:7d:91:9d:54:3c:9b:9f:78:9e:42:
30:71:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:57 2025 by rpki-client