Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.cer (raw, json)
Hash identifier: U1IytYYsRdizI8zC/J2CdRqNvduxBrDH1tDIYteQOhM=
Subject key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B410F6E9C03BB2BAF2F5F5725CE6B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215082
IP: 194.104.235.0/24
IP: 2a14:3ec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:10:f6:e9:c0:3b:b2:ba:f2:f5:f5:72:5c:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:c9:2a:25:47:36:4f:5b:58:cc:57:b8:3e:
52:0f:7b:5b:05:67:57:dc:de:d9:2e:ab:22:48:ca:
4c:3c:3a:79:36:88:d9:3c:82:d4:05:46:47:6d:fa:
e5:15:db:9e:52:de:c3:40:53:28:f9:60:66:45:f1:
46:24:70:b2:02:e6:8b:73:d4:c5:ed:38:6c:cf:c9:
a8:78:a0:69:fe:ec:f2:44:91:99:53:3c:8f:ab:fe:
83:10:18:23:ed:16:0a:84:21:70:a9:38:4e:00:5e:
d2:72:b5:8d:db:87:5d:43:49:e6:f8:3d:05:b4:c8:
ce:9b:94:29:7b:b1:58:3c:f4:30:3e:b9:63:87:22:
7d:e4:d8:55:d4:81:49:38:13:e6:be:a5:eb:b4:69:
ff:96:74:c0:04:44:4d:77:be:0f:27:48:61:b2:e9:
30:de:d5:2d:ab:27:70:f0:3d:05:35:82:21:4f:57:
dd:97:67:2c:10:1b:c8:eb:8f:15:20:4a:63:a0:5d:
6c:68:f3:09:d2:9c:c1:78:8a:9f:71:e8:3a:28:65:
c2:f7:c6:ab:da:39:a0:69:6c:9f:6a:98:9b:df:16:
33:48:7f:95:ae:70:bc:22:de:0e:d7:61:37:d4:b9:
7b:cb:bb:ec:47:41:c3:45:8f:52:1e:60:e1:de:16:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.235.0/24
IPv6:
2a14:3ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215082
Signature Algorithm: sha256WithRSAEncryption
8f:3b:f2:78:8a:6c:37:e8:3b:53:a6:a5:71:42:53:4f:d9:2e:
6b:2b:24:7d:0c:7d:3f:9b:a8:d9:89:96:71:a2:cd:e4:06:32:
c7:b1:f4:01:a8:ce:a6:86:c1:a5:b9:3a:50:1d:70:5d:da:d7:
11:5f:12:24:f1:b7:0c:de:76:39:11:2a:b4:40:86:fd:0c:ff:
e1:26:cb:86:29:84:c1:08:c1:73:85:2a:b3:12:3d:a0:2d:83:
f2:b6:75:21:4b:23:91:82:55:6a:98:fe:5d:1d:98:83:4a:dc:
f6:20:b1:bf:56:ea:58:1b:22:c1:73:cc:98:ac:57:ce:ef:e9:
0c:f8:97:2c:3e:4c:d7:3b:b6:a9:19:7a:01:d4:4e:95:03:12:
20:85:82:a4:3e:c6:a5:93:f6:41:d3:f5:e6:20:24:2b:41:8f:
56:9d:06:fd:0e:67:8c:12:1b:b3:b4:5e:5d:b9:57:f2:59:4e:
a6:dd:2e:63:a2:0b:7a:30:97:d7:86:82:c3:39:5d:95:84:bf:
8a:b9:72:4f:07:4a:44:7e:44:52:b8:58:e5:ec:e5:bc:22:f4:
9c:c4:8e:52:56:61:5d:ad:b1:69:ae:9f:c9:c8:bf:fc:98:69:
a6:76:5a:03:0e:f9:09:68:43:6e:6d:48:22:65:b8:5f:61:ea:
f3:da:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:25 2025 by rpki-client