Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
File: SepQocYggnYq_aAH1vyLS9sFdJ8.cer (raw, json)
Hash identifier: CvkHOeajZZudMntFoF9udjtYhwKCUcWjlfc9BulrdjE=
Subject key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428255E18A4E9A1E3D4700301568F4856
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207796
IP: 194.50.204.0/24
IP: 194.50.209.0/24
IP: 194.50.216.0/24
IP: 194.50.218.0/24
IP: 2a14:5ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5e:18:a4:e9:a1:e3:d4:70:03:01:56:8f:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:53:45:c6:de:e6:ab:ef:69:fd:41:24:60:
ab:d5:01:13:28:a2:0d:f3:1a:9f:24:63:89:7b:80:
72:51:66:94:f1:6b:69:9d:98:ac:0f:f6:cb:d3:1e:
5f:2d:b4:48:97:87:95:50:c2:51:48:31:f8:5b:a3:
87:cc:12:fa:64:27:94:6b:67:a5:02:3d:4c:36:75:
50:76:94:ce:71:2e:6e:2a:03:a6:14:28:e5:11:d5:
ea:e3:6b:ba:d3:af:30:b7:c9:05:45:28:5b:12:de:
3d:39:16:fc:65:80:cb:f1:d0:d8:04:f2:5b:f7:34:
ea:99:74:a9:2e:19:12:fd:2f:a5:cd:28:97:21:97:
f2:07:f0:a3:31:27:9b:fd:12:81:84:92:d9:cf:35:
07:f0:41:dd:51:ab:5c:c1:dc:0a:f5:ae:b7:c0:6a:
0a:98:3c:06:22:5d:ed:10:12:9a:84:95:e4:8a:e8:
c1:cf:24:c6:fb:3b:d7:19:1c:bd:33:2f:10:d8:d9:
d6:c8:73:ff:4e:be:f3:78:8d:31:b7:50:4e:a4:07:
87:d8:92:d8:09:44:d8:fb:97:00:96:a6:07:06:7c:
c8:22:3f:26:6c:cc:9c:17:34:95:ed:b1:8c:d7:61:
f0:46:0b:e2:05:70:b3:11:21:76:0a:2f:6c:d5:af:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.204.0/24
194.50.209.0/24
194.50.216.0/24
194.50.218.0/24
IPv6:
2a14:5ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207796
Signature Algorithm: sha256WithRSAEncryption
55:2a:71:a8:cb:27:cb:02:78:91:8a:a0:0c:e1:82:dd:04:98:
52:fd:f9:b4:8d:1b:83:aa:c0:ea:91:02:18:9d:b2:cf:07:7b:
42:65:a0:aa:df:32:d2:eb:c0:f3:fb:66:7a:79:37:cc:8a:52:
a2:df:d7:c0:3e:7e:b6:03:16:30:59:f8:79:d4:15:63:9e:aa:
d8:b3:f8:77:5d:e5:9c:45:6a:36:2a:8f:7a:cd:3a:f7:00:bc:
d9:4e:37:5d:80:d5:f0:da:88:d5:74:a6:36:3d:7c:24:ab:76:
5a:40:f5:1a:a5:c3:df:66:28:8f:8a:5e:c2:f1:be:63:2c:fc:
43:01:22:d5:ed:83:43:32:c0:ed:58:d0:82:29:75:ca:b3:2d:
d4:14:95:78:1d:73:f0:11:e4:59:be:50:1b:fa:77:d1:23:3b:
ef:72:16:02:de:20:c5:4b:2c:6d:83:a1:ab:49:89:cf:f6:40:
4b:fc:f1:47:6a:cf:17:b4:e1:98:85:92:0c:83:cc:6c:bc:f5:
9a:57:85:12:99:6b:b4:bd:e9:1a:1d:57:9e:a9:25:66:f9:4c:
03:47:39:43:80:c1:87:85:c3:6d:c6:c8:59:e2:79:11:8c:2b:
e2:11:28:0e:e0:59:24:d2:c9:f7:52:c4:98:70:47:7a:eb:5b:
89:26:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:45 2025 by rpki-client