Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer (raw, json)
Hash identifier: 60MpQy0dpCWT2k5/qai7zOeqrvqIUQYok+Xta/rzsq4=
Subject key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427484BC04FCCEF12AA15DAF58D3CA7CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51164
IP: 178.217.128.0/21
IP: 185.93.48.0/22
IP: 2001:67c:224::/48
IP: 2a0b:8880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4b:c0:4f:cc:ef:12:aa:15:da:f5:8d:3c:a7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:8f:04:4d:9c:b9:f8:06:e0:0e:27:15:36:
8c:19:24:dc:55:2f:45:86:fc:9c:62:de:d9:69:e6:
ec:09:fa:cb:0b:c6:30:27:c7:34:99:58:84:9f:dd:
32:06:b7:84:64:60:83:58:14:40:20:fa:37:90:c3:
44:ea:0c:68:71:39:99:59:46:85:d7:2a:1e:0e:9b:
f2:bf:e0:6f:89:19:12:f5:db:36:e9:06:48:e2:a0:
b6:d0:cd:04:48:81:0f:7b:a5:46:72:41:c9:08:ba:
d1:a6:50:df:8b:f1:f6:cd:4c:dd:10:62:3e:4c:f6:
e2:7c:81:7a:40:86:f6:37:a3:14:b1:a9:d3:d2:ac:
fd:94:a8:c0:50:3a:33:3f:44:b0:3f:d2:63:7a:0e:
a6:fc:e6:84:e1:75:f1:2a:76:8f:72:28:84:c5:ab:
91:7a:55:a3:d6:a7:46:6b:f4:79:e4:c9:de:58:dd:
a9:6a:9f:fc:6f:8c:3a:b8:9f:71:08:21:0b:89:6a:
ea:c9:cb:5f:1d:2e:29:6b:5a:a1:4d:b8:30:ce:8d:
35:95:2c:17:0c:38:88:f0:17:78:56:95:0d:03:0a:
81:c0:50:c9:1e:f0:b6:4a:4c:e9:46:40:4c:e4:d2:
63:7d:c3:07:b9:d0:c2:c1:de:9b:54:c4:f8:cf:29:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.128.0/21
185.93.48.0/22
IPv6:
2001:67c:224::/48
2a0b:8880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51164
Signature Algorithm: sha256WithRSAEncryption
7c:1a:a4:44:f4:3d:bd:96:fa:9f:6f:30:90:e8:69:64:0c:e5:
58:cf:a9:d2:f6:26:e6:05:66:03:bb:dd:d7:dd:73:fc:3e:c6:
39:04:c2:4a:17:ac:14:ce:64:01:79:ac:32:6f:a7:ce:6c:c7:
c4:61:8e:c3:8c:0a:6b:68:71:a7:15:0c:8f:f2:ce:2c:7e:48:
66:71:ae:c3:a5:20:42:21:30:34:0f:57:a5:ed:67:d5:77:7e:
c7:76:00:e4:4b:1c:8d:76:76:48:32:2b:63:0b:3a:4d:ce:5b:
0a:1b:c6:40:94:a7:71:08:46:a0:36:40:f0:34:64:ea:fd:db:
a1:2b:57:38:7d:97:53:25:a0:85:28:cc:b9:f2:e8:55:5a:17:
a0:17:67:3e:d8:df:3f:64:dc:85:4b:c7:97:4c:e8:a3:0b:c4:
7f:18:79:13:26:e4:c4:01:91:36:57:d1:83:a5:16:58:15:28:
ee:6a:80:a5:ef:06:9f:7e:8b:35:0a:0b:0e:65:d2:6b:10:1a:
07:f8:11:ef:48:00:d2:9b:67:0b:65:a5:92:8d:5a:ab:59:6b:
c8:8b:b4:1e:b4:ff:77:27:67:13:ca:ac:c4:ea:86:89:d0:7a:
ea:ba:37:81:ed:3f:b1:97:e8:a8:36:36:65:2d:59:71:b9:d4:
d8:02:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:19 2025 by rpki-client