Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.cer (raw, json)
Hash identifier: YmToXIk1slp9VPWc6Mo9p67mX76AxyzsHCCCltSlpck=
Subject key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24F8219AFCF71390C376ACC38E37B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212086
IP: 185.231.64.0/24
IP: 2a10:b780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:82:19:af:cf:71:39:0c:37:6a:cc:38:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:dc:32:4e:6e:07:99:aa:c6:37:c6:b8:6e:
60:60:fd:45:67:bb:a8:79:b8:69:50:d3:29:d9:93:
b9:b1:be:56:fb:e5:38:96:fe:1d:d5:c5:a1:bf:30:
27:cd:9e:5b:b6:0a:cf:18:0c:52:ef:b8:8a:e4:e4:
46:f4:ca:a6:3c:b8:57:20:6f:81:13:6c:f6:cc:af:
49:ff:37:8d:b1:2b:21:21:88:07:b8:6c:2a:9f:2c:
21:6a:c8:eb:92:55:f8:be:20:75:2d:13:30:60:95:
00:21:b2:8e:50:0c:a0:93:e7:6d:d0:33:c3:bd:a9:
ea:1d:63:6e:66:b4:80:d7:4f:60:e3:09:61:2e:45:
29:24:b6:28:97:ef:b1:8f:a7:34:9e:58:ef:dd:86:
4f:f4:bd:27:e6:72:98:6d:93:52:bf:76:51:67:c5:
2b:a5:f0:8b:3a:b4:ad:4c:8f:45:c0:97:67:65:72:
71:64:14:d8:7a:7a:33:e7:e5:f6:ce:18:a1:5b:60:
72:24:55:d1:98:60:ce:79:10:2f:b5:7b:0b:bf:c3:
0e:d0:f4:bb:f6:47:7a:eb:99:fb:4a:36:5f:3f:79:
f3:4f:21:9b:dd:cd:0f:4d:71:66:30:7e:fb:b6:36:
6b:bc:30:44:5b:a8:7c:38:1d:69:e2:2b:af:62:2f:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.64.0/24
IPv6:
2a10:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212086
Signature Algorithm: sha256WithRSAEncryption
18:18:e8:84:19:85:6c:4c:97:24:c0:fa:55:dc:89:a8:6b:6f:
22:09:6b:d2:6a:6c:9a:3c:b8:2d:5b:f7:65:01:9b:b1:ea:01:
b0:cb:11:c8:5e:95:82:b9:5f:d1:a3:f1:05:90:37:9a:45:8f:
a5:47:c6:8f:b9:e9:34:e7:33:83:84:0d:78:16:96:16:6e:ff:
ad:d7:5b:f3:e7:74:a8:68:75:ec:6c:73:2b:9c:ac:bb:3c:4b:
39:e7:e9:8f:39:8d:05:e6:66:2a:d7:20:d8:63:f1:25:7c:cd:
ce:35:37:9a:d6:24:f9:4a:f9:64:3b:c2:a6:77:b6:db:2b:92:
66:02:1c:01:15:18:d7:f5:b9:43:0d:55:d8:b7:5c:12:5b:b1:
e2:a0:71:de:88:3b:cf:47:8d:8c:fe:14:8c:57:87:56:e1:8c:
40:b5:72:ee:14:8f:b4:a0:a8:c8:67:23:19:e5:80:b9:a1:b2:
ac:8b:cb:76:e1:fa:94:49:1b:62:36:9b:d5:70:66:0d:86:51:
2f:3f:09:82:f3:86:1a:e2:e5:bc:0f:91:82:26:09:69:60:c0:
32:f9:54:17:85:b6:da:0d:e5:17:bb:02:2f:3b:d1:86:9b:bc:
03:a2:1b:e4:19:d2:62:85:f9:56:31:f5:14:36:59:60:e5:48:
b0:1e:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:40 2025 by rpki-client