Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
File: Ka2L_getXSzLQ7DR26axkstR2-o.cer (raw, json)
Hash identifier: 4g5Sr1ZUouILmPyDBrHYVa1uwP7CA0zTtXfWsScdlj4=
Subject key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C0EFCA0838DCFB19B18023727D910
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48337
IP: 80.85.84.0/22
IP: 85.90.244.0/22
IP: 85.159.208.0/21
IP: 88.80.184.0/21
IP: 109.74.192.0/20
IP: 109.237.24.0/22
IP: 151.236.216.0/21
IP: 176.58.96.0/19
IP: 178.79.128.0/18
IP: 185.3.92.0/22
IP: 192.46.208.0 -- 192.46.239.255
IP: 192.53.112.0/20
IP: 192.53.160.0/20
IP: 194.195.112.0/20
IP: 194.195.208.0/20
IP: 194.195.240.0/20
IP: 194.233.160.0/19
IP: 212.71.232.0/21
IP: 212.71.244.0 -- 212.71.255.255
IP: 212.111.40.0/22
IP: 213.52.128.0/22
IP: 213.168.248.0/22
IP: 213.219.36.0/22
IP: 2001:678:34c::/48
IP: 2a01:7e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0e:fc:a0:83:8d:cf:b1:9b:18:02:37:27:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:06:76:20:ab:bd:f8:9e:b0:47:38:60:18:
9a:25:b6:8d:f5:3e:e0:e6:c6:b5:20:4b:aa:18:da:
8b:ea:42:e3:9d:d9:54:d3:01:ff:94:ac:c3:a9:08:
75:1c:b6:0d:e0:a1:87:7a:c7:24:f3:22:39:94:0d:
92:9e:aa:89:2c:d5:db:a4:10:15:4a:b6:8f:ab:cc:
ab:91:96:bb:21:38:95:b9:52:6c:41:3b:8b:8f:ed:
dc:b3:2d:f7:09:9a:88:53:ab:ac:ed:59:c1:21:df:
bc:89:3d:5a:c2:50:25:ca:2a:77:4c:2a:e0:3c:7b:
30:fe:6f:65:c6:67:bf:3c:cd:8f:95:3c:7e:49:6c:
8d:f3:26:88:47:e2:56:67:00:2f:e9:d6:a8:6c:eb:
7d:d5:ca:cd:52:d4:0c:8a:e7:41:8b:03:a2:21:70:
4c:ed:fe:ca:35:32:53:73:06:8a:06:ab:3c:a2:3f:
c7:89:c3:ca:cf:03:cc:42:fc:a6:1b:7c:85:cb:62:
eb:ff:83:7e:a1:a1:45:40:be:c7:bb:62:3f:20:8b:
dc:6a:eb:06:4b:f7:89:c6:9f:3e:e7:cf:37:7c:4f:
38:d1:29:58:cf:9a:f4:d2:26:2f:82:f0:cd:14:88:
df:15:c7:77:6e:65:a1:16:ff:34:41:93:90:2d:11:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.84.0/22
85.90.244.0/22
85.159.208.0/21
88.80.184.0/21
109.74.192.0/20
109.237.24.0/22
151.236.216.0/21
176.58.96.0/19
178.79.128.0/18
185.3.92.0/22
192.46.208.0-192.46.239.255
192.53.112.0/20
192.53.160.0/20
194.195.112.0/20
194.195.208.0/20
194.195.240.0/20
194.233.160.0/19
212.71.232.0/21
212.71.244.0-212.71.255.255
212.111.40.0/22
213.52.128.0/22
213.168.248.0/22
213.219.36.0/22
IPv6:
2001:678:34c::/48
2a01:7e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48337
Signature Algorithm: sha256WithRSAEncryption
aa:1f:d9:f1:23:a2:4c:17:a7:ec:57:d8:4d:90:7e:e2:42:af:
77:4f:b6:76:dc:11:ea:7b:ea:35:70:8a:df:2f:63:d8:2c:a6:
fe:0a:a1:76:68:8d:25:f6:bd:3b:12:e4:58:0b:84:93:17:64:
be:3e:83:c3:25:6a:7c:66:60:da:79:f8:fc:13:37:ae:46:a2:
50:09:e4:ef:ab:75:86:12:46:37:61:f4:4c:59:ca:48:bd:7e:
7b:ca:1d:c0:22:a1:d7:cf:26:62:38:89:d8:aa:cb:d1:54:8e:
65:71:32:e9:cb:3f:4a:12:71:0a:9c:7a:f6:fb:d8:81:08:b9:
cb:0d:15:93:09:22:0f:10:54:1a:4f:4e:ed:e8:d9:d9:f5:f1:
c9:77:6e:0f:14:99:8d:be:e1:f7:bb:2d:e3:c5:ac:84:ff:01:
91:42:91:aa:4d:de:cd:2c:09:d2:6d:ea:ef:47:18:26:07:21:
c2:7e:53:2b:6b:b4:d6:1a:d3:01:ca:59:36:92:c7:4c:70:81:
ae:5b:0d:cd:5f:fd:c5:2a:de:35:7d:a7:4f:5a:ff:c9:20:ad:
28:69:6c:c6:23:96:4e:4b:1a:9f:ae:3c:ea:4d:23:0b:8e:da:
3b:3b:34:22:76:f9:b3:df:73:07:a4:1f:6d:f6:8d:44:8f:9b:
77:70:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:10 2025 by rpki-client