Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.cer (raw, json)
Hash identifier: qCJHZAT6GgztZx72xun4OHjVxP2UliCT4xMMr+hxYyk=
Subject key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C89B1E2FBD97FD7C83D48E04C74ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205110
IP: 185.226.88.0/24
IP: 185.226.90.0/23
IP: 2a14:4680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:b1:e2:fb:d9:7f:d7:c8:3d:48:e0:4c:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:98:0d:e1:50:12:bd:90:04:b0:ef:91:c2:
db:d6:5c:21:8d:31:41:02:f6:f8:01:e9:84:fa:31:
71:a4:d7:c5:b3:24:32:60:91:b4:74:1c:25:3a:e0:
f5:5b:1d:5e:d3:ee:a6:da:c5:ad:1b:89:8d:77:a5:
a9:fe:9b:03:95:45:b7:f5:43:9e:da:a4:69:9e:11:
8e:e5:83:eb:f1:0c:d0:3f:c5:35:23:6e:62:61:7a:
53:d6:83:e9:64:e0:1d:dd:0f:ce:42:3c:e9:f8:40:
7d:89:21:f8:ea:e4:29:d7:37:4e:1c:2c:21:5d:09:
53:0a:9b:b3:90:2e:90:54:18:22:02:f1:b1:e0:95:
71:63:ac:13:4f:96:7d:4a:eb:c0:92:f0:ce:fc:b1:
48:d8:89:fa:a1:ba:2b:82:e6:4b:42:bb:3f:8b:d5:
bf:77:14:f6:b1:f3:b9:8d:cb:28:ad:ca:d3:dd:79:
12:a3:c1:4e:e9:e1:f3:d3:07:a4:83:29:46:4e:4a:
61:9c:05:51:cc:93:14:6f:a9:7b:3a:9b:46:d2:ac:
01:32:53:c7:c4:ce:e9:2e:6f:60:7b:c0:11:6b:30:
df:56:99:eb:f8:89:8d:5c:80:b9:78:94:19:8c:ce:
d3:3e:9e:03:33:40:bb:a0:f7:27:04:d3:0c:fe:11:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.88.0/24
185.226.90.0/23
IPv6:
2a14:4680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205110
Signature Algorithm: sha256WithRSAEncryption
af:df:c5:8a:b6:cd:6c:2f:e4:75:5e:26:6d:85:e4:dd:ad:cc:
f3:18:cf:eb:59:84:06:40:f9:70:8f:6d:e5:ce:26:d9:46:44:
3c:82:70:6e:8b:82:0d:15:f3:f7:8c:f6:4b:cf:d9:ea:46:76:
35:a3:74:66:f8:aa:7c:57:90:91:50:1c:6b:15:e7:5b:22:b5:
df:33:34:85:bd:17:84:e9:ea:cf:12:c6:75:7c:65:3c:e4:04:
77:ee:83:21:93:97:65:4e:3a:c3:aa:bb:1e:e3:a1:05:be:c3:
48:b1:bf:bf:8e:dc:fa:1c:85:a2:e6:0d:49:6d:c8:61:9b:44:
ce:40:f4:95:d9:40:61:1b:0c:55:e3:ca:aa:fd:eb:6a:6d:d9:
f4:74:ba:7a:ea:28:c5:41:fe:df:0e:7a:11:5a:04:78:25:89:
59:52:9b:cc:db:b4:00:c6:d7:e1:88:3d:a5:91:d7:0a:95:3e:
ec:f4:51:9d:eb:97:5e:00:c0:2a:a1:2b:c7:87:58:80:16:39:
13:36:7d:55:f4:cd:b9:62:19:3b:86:cd:de:5f:46:c4:2f:10:
73:be:a9:3c:fc:a3:af:96:a6:15:09:a1:ef:a1:82:16:d5:52:
58:7a:d4:3e:7c:54:4b:52:38:c8:00:50:49:b0:dd:d5:7f:af:
df:a8:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:57 2025 by rpki-client