
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
File: a0s-anyHg_yKVxn72fN7MsjHxco.cer (raw, json)
Hash identifier: ytY0AoJBexQm/70/+xzWC1NSZvLxyc0KaxR00qL2FNM=
Subject key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBA075CB4D0A1917FF3648984270A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202908
IP: 185.246.232.0/22
IP: 194.56.144.0/22
IP: 194.124.188.0/22
IP: 194.147.68.0/23
IP: 2a0a:aec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a0:75:cb:4d:0a:19:17:ff:36:48:98:42:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:1b:eb:dc:89:69:ed:b0:1f:a7:4d:6c:bf:
7b:48:40:40:3c:56:b5:e1:43:ea:33:f7:3f:9e:34:
38:33:f7:a2:a6:42:f5:ca:c9:4f:10:80:84:24:e0:
1a:7e:b4:97:e0:40:31:7b:0b:1e:67:19:bd:62:83:
8e:4b:9c:8a:df:42:eb:00:e7:36:97:4e:5b:43:26:
be:23:9a:b7:2a:4d:35:e8:35:6f:bf:c7:11:34:5d:
e7:30:ce:ff:5c:6d:27:fb:30:4d:ce:28:62:2b:df:
13:5a:84:79:84:6f:5b:b5:b5:6f:99:50:76:f7:a2:
a9:1c:0e:6f:b1:32:1e:96:05:2f:57:ae:b3:92:27:
06:ea:ca:f3:06:44:96:90:ed:2b:be:f5:b8:d6:98:
41:f3:34:76:60:d0:2f:3c:90:73:db:dc:48:88:97:
ca:d1:e6:86:4a:98:89:05:b3:31:49:94:3c:76:38:
7f:2d:7c:3f:90:6f:77:37:2a:0b:68:20:df:ea:81:
2d:b9:50:dc:fd:c4:bb:5a:74:da:76:e2:da:e3:5b:
d6:38:27:5e:ac:ab:98:82:a2:f3:56:6f:e1:e5:aa:
55:6c:a0:e3:0f:fd:4d:13:97:dd:94:ea:9a:07:56:
a5:64:49:95:77:41:f7:b9:df:b7:00:6c:09:16:5c:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.232.0/22
194.56.144.0/22
194.124.188.0/22
194.147.68.0/23
IPv6:
2a0a:aec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202908
Signature Algorithm: sha256WithRSAEncryption
84:50:d8:15:c4:05:25:6e:b2:16:63:a2:07:b5:44:42:29:3e:
d4:f2:03:73:1f:7b:c9:d3:e7:52:5e:64:34:32:72:0f:09:0c:
bc:44:ef:32:e8:61:31:2a:8e:13:c2:6b:88:00:63:2d:bc:83:
e0:cb:7a:5a:09:2e:d8:82:bb:f8:93:91:48:c4:a2:94:98:e0:
18:a9:ec:48:59:36:3b:e4:e7:19:c4:1c:d4:6f:a5:0a:97:89:
6f:d4:97:64:39:eb:07:b3:b6:77:72:1d:76:92:34:28:9c:a5:
4a:ac:92:eb:e3:97:35:79:2a:08:39:b7:5d:b9:55:09:be:50:
8a:eb:ca:a2:a9:9e:85:68:f1:0b:8a:82:13:81:ff:d2:72:e8:
c0:b1:ac:0b:0c:7f:61:11:d0:65:f9:77:2c:3b:8e:87:4f:db:
7d:31:a9:42:09:64:19:13:3d:e2:a4:51:ff:a1:b1:c3:3d:a3:
f9:d8:0d:20:f2:fd:71:c3:ab:39:85:cd:8e:e9:de:88:a2:6c:
6d:72:90:3d:67:f8:4f:89:a1:5d:30:aa:47:0b:bb:97:16:6e:
58:4b:d8:dd:74:9d:f0:81:1d:ba:c6:d9:a3:13:3f:97:b0:d8:
9b:72:ee:65:bf:7b:8a:58:05:70:4f:ea:c4:4d:02:9d:e3:34:
91:6b:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:10 2025 by rpki-client