Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer (raw, json)
Hash identifier: 9YCD3uFFIHUSbiWMjgsqn1ZVkckhuHUQnkl7bGEXMg8=
Subject key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826592E3410A32C851AC7A807E72369
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198623
AS: 207339
IP: 37.77.192.0/21
IP: 37.123.248.0/21
IP: 193.104.81.0/24
IP: 2a00:ce40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:59:2e:34:10:a3:2c:85:1a:c7:a8:07:e7:23:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:e4:2c:cb:0b:13:78:5a:d1:e6:e6:9b:93:
42:88:a3:33:42:d3:31:39:8e:70:23:6f:26:64:2e:
cc:20:94:93:e7:7a:99:f2:d0:59:59:2a:bd:29:66:
d1:f6:00:51:be:26:6d:cc:01:df:63:5d:d3:6d:c6:
61:1e:9f:56:2a:68:cc:a7:70:ab:eb:41:8d:dd:0b:
ca:cd:cf:d9:95:2b:7c:75:e8:5f:e9:c5:a2:2f:85:
5b:d3:44:7c:31:e1:37:0a:a3:2b:4c:f3:3a:f6:d7:
7f:97:5a:37:17:ce:72:81:5b:f6:0d:a6:d3:76:01:
66:a8:7d:42:fd:ee:37:ff:b0:d2:62:6b:99:75:94:
49:0e:0b:50:1f:8d:95:91:fe:9b:67:94:27:f7:dd:
0d:d4:32:51:37:40:7a:b6:3f:80:81:58:22:d1:18:
5d:a2:71:9b:6e:2e:79:6e:4d:97:2d:df:47:d0:b2:
15:02:1a:40:25:8d:69:55:f0:61:72:aa:04:10:fb:
d6:5b:1b:28:7e:ea:0e:d6:cd:fb:66:5d:68:2f:60:
21:d2:82:e4:2e:ba:57:bd:23:81:c0:c2:6d:40:d6:
a8:be:f1:0e:8d:36:c7:b9:26:1f:4f:bb:87:b0:b5:
02:32:e7:9c:ca:a6:f3:f4:50:7c:47:03:2a:6d:54:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.192.0/21
37.123.248.0/21
193.104.81.0/24
IPv6:
2a00:ce40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198623
207339
Signature Algorithm: sha256WithRSAEncryption
2d:bd:2e:83:d6:75:02:27:32:f1:0a:d2:91:b8:d5:e1:a1:89:
83:39:f4:4c:30:80:e6:47:58:70:68:21:47:0f:85:4b:3d:ea:
5c:c3:75:08:33:47:28:ea:c9:82:c8:12:ad:34:c8:fc:bd:65:
bd:5d:2e:9c:0c:ca:8d:fc:96:54:76:d5:13:88:12:0e:51:2e:
14:ca:48:42:cc:2e:a5:6c:c5:4a:c7:a2:26:6d:a8:f9:d0:2a:
d8:e2:f0:0e:d4:bb:88:9c:c2:4a:36:b8:64:87:bf:4e:48:f9:
11:50:13:88:ee:3e:e5:18:d0:1a:12:e6:2d:a7:92:39:ce:fe:
3c:fa:90:61:62:f1:0e:8c:da:c5:e5:10:bb:57:f1:9a:fb:fb:
bc:3a:6a:a7:e1:0b:64:fc:50:1c:c5:9b:10:d8:9a:ce:8e:fc:
a0:c5:06:f2:d8:2e:3e:e3:6e:10:81:e8:5a:af:5c:f2:05:e7:
f5:41:80:28:d6:97:a7:0b:15:fe:f4:1a:96:bb:d6:98:4b:7d:
9b:75:81:b6:5f:7e:a2:2e:2e:06:d8:6e:a3:25:ac:54:2e:a9:
38:bb:41:e6:be:77:d1:eb:f6:c6:56:97:21:8c:d9:e8:49:67:
36:fd:f3:04:dc:8e:6e:8b:5a:12:4e:4c:34:78:95:e0:10:a5:
37:a9:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:52 2025 by rpki-client