Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer (raw, json)
Hash identifier: EQgH3EJ+PApX1UXh49Wx8dd93PELPk/w7wuANvppS6M=
Subject key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274834901196A7B792F8CE1D6C1B1CE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.133.144.0/22
IP: 2a0e:75c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:90:11:96:a7:b7:92:f8:ce:1d:6c:1b:1c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:b5:89:c3:dc:4b:90:e3:30:80:9b:2a:6d:
ae:c1:35:9c:37:67:13:ed:bc:a1:2f:6d:7f:7f:40:
65:1b:13:19:b9:f1:44:f4:81:1e:57:ec:ad:9e:1d:
1e:db:54:c1:44:cc:11:2e:92:93:ca:45:28:a0:7f:
9b:1f:0a:95:ad:a7:ea:a0:93:80:8e:d9:e9:c0:03:
b3:dc:93:68:f3:7c:8b:a4:e9:2a:f3:85:a9:39:d0:
68:6f:cf:9a:db:89:8a:c0:94:9b:a9:fd:06:60:63:
bf:f2:db:ec:85:0c:36:d7:ea:33:df:94:29:a8:62:
8f:54:d9:4b:bc:fd:19:97:70:f0:bc:b2:d2:e5:96:
a3:b7:65:97:d5:de:20:26:db:26:8f:88:20:7d:c7:
3c:93:d4:12:12:24:88:e1:c9:53:e8:e8:bc:ab:f9:
6e:eb:63:b3:23:ac:d0:00:cb:ca:6c:f6:16:4f:c6:
65:6d:2d:85:6f:54:61:68:db:cd:17:68:b8:33:9d:
9f:c9:7c:cc:ec:a1:bb:da:e1:33:0e:44:8d:fe:d2:
81:b8:ec:6b:01:25:78:18:a5:23:a5:27:b1:0c:a6:
ef:3c:4b:1d:1c:3b:92:db:97:fc:d2:1e:e8:3a:14:
5a:94:01:18:66:9d:a2:9b:32:99:7e:9e:ed:04:9b:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.144.0/22
IPv6:
2a0e:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:3c:d3:40:0e:24:b8:a2:7a:2d:b5:26:7a:87:58:b2:f0:18:
c1:14:4a:73:c8:91:47:b2:52:72:ef:86:2f:f3:3c:cf:1c:95:
cd:15:bb:77:5b:e3:29:97:dc:7f:0d:bd:8d:c2:ce:1a:1a:a0:
69:4d:e8:2d:43:d3:a7:16:5c:79:65:5b:e6:77:fc:07:f3:a6:
bd:43:83:99:6d:d3:f7:5e:71:81:f9:ec:d5:84:ed:9c:d4:21:
e4:1a:37:f5:f6:41:8d:0e:27:a8:a8:aa:70:d2:d5:42:d4:00:
e7:4f:d1:8c:84:58:e1:d0:d2:40:5f:1b:de:5a:2a:ef:1f:f0:
d1:a5:e2:fd:8a:28:53:b8:d2:79:db:d5:b9:aa:22:f9:43:a4:
64:a9:05:52:b2:f3:79:fb:47:c3:07:fa:4e:9c:c0:64:f5:75:
19:fc:fb:4c:cd:44:9f:ff:56:9f:a0:1d:2e:41:f9:94:1a:5e:
0d:de:bf:9e:a5:55:aa:63:28:bd:65:1b:da:8e:43:81:23:94:
0d:cd:43:45:9c:f8:62:64:33:6d:0c:b6:d1:75:77:64:27:8e:
f7:c8:6f:2f:9b:cf:91:fa:3f:eb:2e:81:4c:90:27:63:fd:70:
36:3a:91:44:a6:f2:e6:59:9c:d4:fe:d5:cc:ad:9f:a2:fa:5a:
eb:78:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:31 2025 by rpki-client