Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
File: JSxOK_XyE4Ri70pdng9uenY1MP4.cer (raw, json)
Hash identifier: ynbdjASHP+hpWT8DXATfXMxIV/+/C68UDx5z3KOwops=
Subject key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427483D76A012C989714DC65BB045D269
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211987
IP: 185.234.102.0/24
IP: 2a10:da80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:76:a0:12:c9:89:71:4d:c6:5b:b0:45:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:64:23:fd:fd:09:cb:b9:66:c8:c9:d4:76:
a1:e7:ff:e0:2c:93:7c:c0:1a:41:26:e8:87:31:84:
6a:71:9d:2a:79:cb:17:00:04:25:92:df:88:7d:80:
2d:2a:b3:c2:a6:95:49:51:95:dc:29:dc:a3:d2:4b:
a7:8e:3f:41:1b:00:ba:c5:cd:c4:28:5e:b1:29:21:
65:cb:7d:74:7f:d4:2f:9b:12:cf:5e:f3:c0:e6:e9:
f0:c4:92:f6:a5:c4:9f:e4:11:66:fb:ef:2e:53:53:
52:27:10:d5:a5:fa:02:e4:bf:f1:e8:e4:8a:e4:af:
a7:0c:4a:59:9b:07:eb:e5:04:9d:81:15:48:d5:fd:
6f:10:95:d3:31:ea:0a:fd:ba:c4:35:75:80:ad:ca:
25:f2:76:cf:77:48:dd:91:d8:08:ed:13:c7:8c:73:
63:eb:0b:4a:bd:0c:2f:e4:78:5b:1c:27:9f:69:0e:
98:0c:85:9d:19:7c:89:c7:04:be:ae:35:a3:64:c7:
85:69:6b:3a:5d:e3:21:64:fd:c4:af:9a:7a:d1:54:
c5:0a:9a:58:58:c6:6f:cd:38:46:de:2c:4b:cb:a4:
52:bd:40:a7:66:50:0b:99:eb:b6:0b:fe:66:5a:8e:
b7:c5:d1:1c:7c:ea:dd:d8:5c:dc:9c:1c:9d:9c:4a:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.102.0/24
IPv6:
2a10:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211987
Signature Algorithm: sha256WithRSAEncryption
9a:36:02:54:3a:55:6b:9e:89:f4:61:d1:84:01:d3:74:69:38:
df:b8:f6:6a:7d:39:20:71:fe:fb:30:1b:f0:70:46:f3:cf:44:
9f:8e:e8:98:74:18:8b:49:ee:91:58:b9:7e:8b:79:14:e1:fe:
d4:d0:7e:de:9d:33:7a:08:5a:28:85:c0:76:25:81:27:39:16:
e3:c4:24:85:c9:af:98:34:82:a3:16:12:45:4a:2c:38:0c:af:
10:c5:c7:29:9f:7d:ca:86:62:4f:63:9b:02:35:3a:5b:1b:22:
4a:02:e8:ab:41:80:02:11:28:d8:8d:88:f2:61:6f:7a:92:00:
de:9b:d2:dc:56:4f:1f:49:30:ad:a8:40:84:39:89:df:c4:6b:
b6:8c:0f:bb:c8:ea:50:97:e1:d3:07:90:97:60:63:f4:e7:8d:
c3:3a:8e:27:c6:1d:f0:b8:8a:3a:d4:2e:eb:4f:39:44:ad:38:
50:9b:e9:08:15:d6:c0:2b:5a:b7:fb:0f:bf:76:5d:86:98:2b:
2e:4e:07:38:ac:5c:3e:fc:b6:53:31:2a:eb:6d:b8:5a:f3:d3:
59:33:1d:77:5b:7a:14:5c:23:9c:8a:ad:47:57:54:97:92:64:
d1:dc:6a:e9:e0:f0:f8:13:dd:03:71:23:43:80:cd:23:17:a2:
41:1c:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:26 2025 by rpki-client