Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.cer (raw, json)
Hash identifier: kDeSTt4Js20baV7quTvcAcsau4KSy7C50NIOCbeDCzo=
Subject key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F9E0E9278EFA51F6A5D632CBFDEFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.90.132.0/22
IP: 185.134.84.0/22
IP: 2a06:ec00::/29
IP: 2a0e:3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9e:0e:92:78:ef:a5:1f:6a:5d:63:2c:bf:de:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:5c:53:86:09:21:d0:67:87:f6:74:02:c0:
cf:e2:3a:79:9e:ab:4b:f8:bf:fa:34:27:4c:2c:bc:
4f:4c:ab:8d:ae:ac:73:88:25:37:ee:7b:e4:ad:fc:
fb:86:87:fe:22:60:16:1e:a1:1f:e1:17:4f:ad:aa:
03:cb:8c:5b:00:df:8a:87:87:91:3c:e1:8f:72:1e:
e5:8f:30:18:4b:c8:8f:16:73:97:63:99:7a:38:da:
36:ff:14:94:d4:01:15:06:ad:c5:e4:e7:67:a5:a5:
78:81:ff:66:13:a6:f6:5c:be:04:4d:61:d9:99:69:
f6:83:d0:e1:e9:e6:b9:b5:56:3d:cb:30:45:f3:6f:
28:e8:38:dd:ff:24:6a:37:a3:96:b9:66:8a:86:60:
9d:ec:e6:a2:0e:74:ae:6d:3d:55:db:02:f9:71:a8:
a0:0c:52:ac:f4:ef:36:aa:ea:5e:d0:76:74:d0:3a:
eb:a7:63:fe:2e:06:6f:bd:ff:90:ae:01:ed:16:1b:
a3:58:d2:39:68:7d:7c:2b:e9:ca:66:31:88:6d:64:
b3:ba:1e:87:c4:13:e3:7e:42:62:e1:2c:a9:60:94:
b5:b9:df:4a:5d:bc:7e:95:22:93:a9:7f:2f:b5:24:
95:4f:6e:94:41:26:29:dd:ab:4a:80:f8:24:ae:55:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.132.0/22
185.134.84.0/22
IPv6:
2a06:ec00::/29
2a0e:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:ee:a6:1e:12:37:ff:4f:a1:3f:c1:ea:67:bd:a8:81:01:27:
6f:67:f8:3c:f8:cf:de:42:e1:b9:13:e8:7b:75:c5:53:22:d6:
c9:54:92:92:5e:41:37:58:70:47:a4:d7:8b:01:cb:51:9c:82:
cd:c3:23:ba:4a:b3:60:9a:2a:32:0e:fb:0c:b6:1c:e8:6b:20:
0e:ba:07:e3:33:0a:2e:21:fc:f1:fa:68:de:6a:09:e0:67:51:
53:14:3b:6e:b8:a4:4a:49:11:1b:93:32:c2:19:fe:e3:fa:8c:
4d:a1:2a:18:51:6a:d0:a3:53:fb:cf:52:2e:bd:3f:9d:bf:f4:
53:e8:2f:b3:ba:cc:b8:35:cd:c4:70:16:f7:07:6e:bc:5e:5d:
40:4f:fd:a5:6d:af:29:ea:18:98:d3:29:3e:52:07:83:11:9d:
3e:26:24:45:c1:d6:62:b2:c4:93:e5:17:ec:21:66:da:dc:e9:
7c:16:08:3b:21:02:e0:29:48:c5:f6:e0:a0:6f:b0:3b:5d:ef:
2b:c8:12:55:05:e9:a3:3e:8f:ec:cb:93:12:5f:f2:c7:42:b4:
9f:af:19:fe:d7:fb:e7:2a:cf:47:ea:e9:a7:c2:06:1f:af:d5:
d5:f5:26:45:a5:cf:9e:ab:94:f5:d5:28:b8:b2:6b:93:17:8b:
02:58:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:06 2025 by rpki-client