Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer (raw, json)
Hash identifier: IHbYoHTaIYWiEm6VDskfEjFHRXK/sEtticwSLG5viTQ=
Subject key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0B437EFADC118352A378CA3FB09E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57970
IP: 37.152.128.0/19
IP: 185.20.192.0/22
IP: 185.86.72.0/22
IP: 185.88.0.0/22
IP: 2a00:a340::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0b:43:7e:fa:dc:11:83:52:a3:78:ca:3f:b0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:28:78:91:75:7d:f6:30:90:66:fc:81:c8:
b7:9f:c3:52:61:b6:8b:50:33:1f:86:6d:ab:6c:17:
27:1d:89:a3:64:16:b8:3f:96:07:59:ee:a5:68:74:
ab:04:86:02:94:83:b7:65:8c:42:94:f1:ac:a5:6b:
b1:e2:37:dc:d4:f1:cd:bb:11:47:66:f9:89:22:d0:
6f:5f:45:43:3f:c5:3b:ba:c5:44:d4:bf:50:39:07:
19:e9:28:18:d8:0d:5d:21:57:ad:2f:cf:eb:ff:7a:
29:23:9e:4b:6f:f0:ac:9a:84:61:7c:f1:63:d5:27:
44:62:27:15:63:72:5f:ba:17:97:12:4c:d2:a5:b4:
a4:e5:2b:49:6f:af:23:47:86:8a:de:76:f5:94:3e:
67:d0:a2:d5:fe:f9:fe:0e:68:0e:d2:65:3a:27:94:
0b:24:c1:35:64:4b:c0:75:da:07:f4:9d:ea:4e:d6:
31:e7:43:92:a2:d0:51:d5:11:38:8a:90:f7:c9:e7:
98:7c:17:90:2a:4c:00:da:f5:f8:86:f6:b9:d6:d0:
9e:dc:23:39:45:7f:bf:b7:55:17:06:34:c9:1f:1a:
63:75:33:9e:c8:88:32:3e:af:90:ef:ae:d3:31:8b:
12:50:37:1d:3b:82:08:8e:81:8f:fc:9c:a5:98:a2:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.128.0/19
185.20.192.0/22
185.86.72.0/22
185.88.0.0/22
IPv6:
2a00:a340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57970
Signature Algorithm: sha256WithRSAEncryption
21:69:1a:4b:cb:57:fe:bc:3d:b3:ec:2a:2a:8a:08:97:e8:91:
4f:ac:62:b7:9c:f2:bf:43:0a:87:78:55:de:96:e2:b3:29:f0:
36:f6:40:15:05:a3:2a:89:f0:22:01:10:ab:85:d8:90:9c:c7:
de:4e:7b:8a:e0:7b:b0:ff:5b:a0:cb:62:51:e9:0e:25:2e:0b:
33:da:d1:b3:64:2a:1d:70:0b:a1:26:f1:4a:fb:f5:48:2b:02:
d6:7c:9c:2b:3e:e6:5e:ed:d7:0c:dc:54:32:34:ff:0a:10:40:
66:82:aa:72:63:b6:8d:8a:9a:71:a7:69:84:d1:c7:d9:52:63:
e9:fb:3e:c0:18:74:ac:ee:ad:7c:f7:df:ed:15:92:3b:53:1a:
40:52:aa:00:a2:4a:df:4e:41:a2:32:88:17:4a:0c:10:53:33:
cd:33:ca:00:cd:ae:7e:94:b9:11:cc:13:19:c5:bd:1a:d1:16:
fd:65:b4:38:40:e5:fa:94:d9:a5:6e:d2:33:c4:83:ef:03:8f:
1c:89:bb:3a:ac:98:fc:94:fa:f7:27:53:ac:38:b3:01:67:13:
5a:72:80:b7:6d:95:bf:f1:48:00:f8:6a:2d:27:2b:56:fa:a6:
21:8e:88:72:36:30:9d:56:5a:47:18:60:a6:b3:3d:9c:bd:ad:
2e:a8:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:44 2025 by rpki-client