Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.cer (raw, json)
Hash identifier: 0qfDunVWrexlVNnjQZ94u1RAlIBPHYpUZvKft2sCzys=
Subject key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E87CD6E81E4C10E77B9F1F2E6EAB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44966
IP: 185.84.226.0/24
IP: 2a13:76c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:87:cd:6e:81:e4:c1:0e:77:b9:f1:f2:e6:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:73:cc:32:b0:4f:08:05:97:d4:e0:f0:dd:
b3:7a:f7:8b:9e:84:0e:9a:98:55:27:f2:5a:55:54:
bf:fc:f8:ba:2b:d2:b6:e6:23:d7:8c:79:26:56:00:
d8:89:fa:73:87:17:fd:66:b9:d0:98:9d:66:ae:cf:
85:e2:b3:7e:15:aa:5d:0e:e3:2f:cf:36:b7:dc:0f:
8f:fa:9b:f3:9d:f2:56:f8:69:5d:d3:37:cf:d0:fb:
64:f2:e2:c7:1d:ad:86:53:ea:6f:61:37:1a:5e:d4:
c6:e7:78:44:d4:29:d9:1a:cb:88:3b:42:a1:3a:60:
e1:56:fd:fd:29:5d:1e:82:32:df:7e:b5:ce:30:98:
f2:22:d8:37:91:1a:53:10:87:d8:70:d5:48:5a:45:
8d:d3:bd:34:f5:5e:b5:bb:84:4c:96:db:cb:f8:f3:
cc:55:9b:92:ce:7d:c5:c2:dc:de:db:37:9d:7d:85:
7b:b6:f1:79:cb:6b:98:87:67:13:d9:54:7a:9d:07:
bb:d4:a9:f3:52:42:d3:88:5e:c8:6b:4e:a0:70:0d:
12:2b:8c:4d:57:06:78:24:d4:ab:5b:62:9c:f4:a6:
99:4e:d2:11:36:05:1b:a0:95:ca:60:2c:14:c2:7e:
0a:19:d2:e7:e7:59:9b:04:9f:77:95:c6:6d:9b:44:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
IPv6:
2a13:76c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44966
Signature Algorithm: sha256WithRSAEncryption
08:46:8c:97:b2:00:53:81:c5:22:ba:b7:e9:f5:9a:cc:2f:2a:
c4:ec:b0:60:00:b2:f6:04:c5:11:03:d9:04:75:ea:61:f7:cd:
6f:dd:90:29:7a:cf:54:33:2d:18:37:bf:47:78:f3:7d:5a:42:
e9:d6:af:ba:7c:d8:2d:34:0e:6e:ee:20:da:83:bb:db:30:12:
e6:60:8d:cd:51:25:9e:48:85:7d:89:f7:b0:9d:67:8b:ba:e8:
db:a1:28:1c:90:0a:23:45:a1:f7:75:97:e2:ca:8c:e9:d4:a7:
15:04:c3:48:75:27:d6:4f:0c:ab:2c:80:18:c6:57:b9:21:11:
cc:27:2b:15:06:69:38:7b:31:d7:1c:02:fa:2e:3e:b0:fb:2b:
eb:c7:96:8a:1c:36:90:23:0a:32:dd:c5:a5:00:1f:cb:84:b4:
d2:21:95:55:82:ce:9f:35:95:98:82:0f:22:6f:a1:ea:4a:52:
b4:c6:2f:6c:4f:cf:a5:99:87:7f:ef:41:d4:c6:37:25:0d:f8:
b0:a7:a4:e6:ce:70:fa:13:c2:ba:70:90:7d:cc:b9:53:61:54:
66:c3:a9:ae:9e:1e:7f:df:7d:4b:3d:9e:81:10:e3:6c:43:66:
04:0d:d5:3f:a6:4e:b7:95:8c:47:9c:67:76:f6:95:56:a2:c8:
07:5d:04:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:30 2025 by rpki-client