Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
File: RKqBMTnAax3PG_6DMrm4Aas-swI.cer (raw, json)
Hash identifier: SH9wmd+bSIP15tqympx9mRwYbIKWegwdvCF91ZolT1M=
Subject key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266A18C4A7386099A4CE1EDCFFDB6186
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202693
IP: 80.75.220.0/24
IP: 2a06:c640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:18:c4:a7:38:60:99:a4:ce:1e:dc:ff:db:61:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:97:1c:91:93:64:98:14:3b:68:15:5f:ee:
09:38:9d:e7:fd:0e:95:9b:db:f9:86:67:65:2e:7d:
a7:89:0d:3e:04:00:42:94:64:8f:ab:33:23:8b:73:
b8:7e:9a:ee:e8:62:55:29:84:bb:a5:9d:d3:ae:13:
53:85:b3:8d:a5:13:6b:17:59:a8:29:a7:81:6d:b4:
7b:c4:3d:0c:9b:a8:69:41:eb:e9:23:17:7f:5e:0d:
ba:a2:61:a7:de:0e:94:e0:91:59:0b:3b:f4:40:2e:
51:38:73:72:de:e9:46:43:1a:f6:20:fd:9e:18:bc:
e5:95:05:91:22:a5:33:11:ae:4e:59:b3:fa:7a:07:
a5:3b:a2:b7:6e:85:ee:ac:ce:77:68:41:ad:b6:2f:
9d:31:a1:a4:ce:02:5a:14:72:14:ae:ba:e7:47:67:
5f:81:33:dd:3a:25:0e:a8:2e:ba:ab:dd:24:78:f7:
8d:9a:6a:14:4e:b1:b3:9a:a4:1b:42:23:f1:10:ff:
4c:02:88:50:a0:e0:4a:e9:bd:e2:d1:34:f1:3f:53:
a9:fe:53:42:23:4e:ae:7d:8d:09:84:6f:af:f8:82:
7c:38:2d:d7:95:fe:54:c1:d6:10:29:da:e7:34:f1:
0b:66:63:03:93:a5:cf:c5:91:89:4a:f7:c4:4e:a2:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.220.0/24
IPv6:
2a06:c640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202693
Signature Algorithm: sha256WithRSAEncryption
0b:5a:cd:d9:a7:72:ec:1f:7b:8c:5f:aa:77:4e:5f:55:f3:32:
12:cd:58:71:44:2a:50:05:64:e4:4b:f4:b1:e8:e9:af:c8:fb:
3a:be:ec:03:2b:36:58:aa:ee:d7:e1:1a:0d:01:2b:a7:3f:5d:
53:c3:43:c5:ad:07:7b:36:4f:af:a7:6b:ab:0e:40:f9:88:4d:
52:65:1f:7c:c0:6c:c8:79:16:27:ab:bd:3a:60:2c:25:6f:11:
fd:ff:8f:aa:57:4b:75:92:5d:b1:1d:9f:e9:5a:18:8c:27:e6:
82:83:be:d3:69:81:21:5e:96:44:6e:40:57:e6:98:35:b7:ff:
8a:0f:e6:b0:cf:59:20:aa:55:14:cb:2e:2f:dc:ff:b5:21:81:
e8:f0:89:26:27:0c:a3:1a:83:13:87:3e:21:b7:3d:33:af:91:
15:fc:a2:59:d8:f9:fb:ae:a0:e9:2a:cc:6d:bd:ee:e7:5c:e2:
32:18:d0:6c:87:e1:18:48:03:96:54:29:21:24:fc:8b:ee:da:
7f:6d:fa:f7:80:b3:05:94:d4:2d:01:25:62:28:37:2c:fc:e8:
31:74:ad:bc:1c:77:cc:5c:31:6c:76:02:6a:1d:49:a5:06:98:
92:a8:da:5a:55:d3:c5:e1:1b:ed:75:07:53:6d:89:3e:4d:ed:
29:84:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:50 2025 by rpki-client