Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
File: JUdfWtnsz_acNaYw3P8sWmY_188.cer (raw, json)
Hash identifier: uw8EEkcoO6WoqyC2JbKINxneUgZIxR66QVyOTnGcyUQ=
Subject key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682E442D0DAD15D452165AFF483538
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61067
IP: 185.20.36.0/22
IP: 2a04:1480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2e:44:2d:0d:ad:15:d4:52:16:5a:ff:48:35:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:a0:39:08:7c:ed:86:41:3c:d9:13:72:01:
9b:0c:6b:b2:78:31:f6:14:a2:4a:20:85:76:5a:f3:
ed:a8:2e:d7:b0:ca:6d:c7:4e:93:ca:17:83:3a:98:
53:e8:d2:76:36:36:8f:43:27:08:ea:93:df:35:19:
c5:fa:e1:c9:a7:e4:e6:71:46:e2:bb:b5:01:94:c0:
ce:6a:01:81:66:53:9e:23:29:f6:94:16:67:13:e6:
e9:e4:68:a4:f3:e5:31:80:2c:77:a1:3a:3c:bf:b2:
33:72:d5:a6:52:c2:c0:de:4e:cd:3d:37:1c:90:55:
dd:d9:a4:35:ed:b8:6e:80:20:75:e7:ed:6c:ab:66:
93:f6:a1:fb:70:a6:8f:74:0a:8f:b3:fa:f6:2f:d2:
b3:ba:0c:77:f0:dc:86:74:ec:1d:52:a0:63:81:ea:
57:a7:4e:1a:29:73:fb:6f:f6:0d:fa:3f:c3:c1:12:
94:ef:2b:03:b1:40:57:b4:05:12:04:b4:41:07:78:
3a:d0:c4:e1:55:f5:1e:41:2a:0b:e7:16:05:19:20:
ed:36:6d:22:d0:9b:25:01:1d:ae:59:21:e2:42:0b:
fc:b2:ad:0c:1b:1a:60:c9:d6:c4:2d:9f:e4:54:77:
45:65:ff:2c:47:35:55:18:af:5d:09:08:1c:7a:ca:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.36.0/22
IPv6:
2a04:1480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61067
Signature Algorithm: sha256WithRSAEncryption
3f:49:d7:59:49:88:03:4e:64:0e:3d:ff:be:6a:ed:f9:76:e0:
6c:a0:8c:25:5c:ad:1f:fc:54:9f:f2:5f:b6:7a:b1:a7:4c:42:
c8:17:ab:a1:ca:ff:ab:f9:f3:5b:b9:2b:20:89:ba:5e:c6:9a:
d9:92:0b:f3:3f:aa:79:1b:5b:e2:49:81:56:3e:23:09:b2:84:
d7:47:d6:75:ca:b1:71:93:17:dd:c3:8e:db:8c:7d:5c:c6:e1:
f5:01:34:62:f8:4d:f9:cf:18:c8:88:12:ad:0d:3d:de:7c:42:
e7:70:ce:36:10:f9:43:c9:d1:4e:f1:d3:0c:42:69:b6:83:5f:
8f:76:81:46:0d:a6:21:cf:43:dc:3d:9e:36:f6:11:97:c0:8e:
1e:8e:9e:49:c3:1e:03:dc:f5:f2:65:b7:34:a4:0a:ef:fa:cd:
91:6d:42:52:ef:d0:2b:6a:4c:c9:06:3d:25:6a:3c:6f:c4:00:
70:53:39:df:69:fc:8f:11:1d:6e:3e:af:03:70:46:3c:7e:15:
81:22:a1:2a:82:24:17:76:aa:d4:03:47:5a:a4:be:23:91:66:
ca:1b:35:ed:ed:48:84:d6:6d:f8:5f:7f:4b:dd:9a:4d:a6:90:
d6:e3:fc:d1:87:74:e1:bd:83:50:da:a1:0d:34:dc:5a:79:26:
bf:73:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:29 2025 by rpki-client