Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.cer (raw, json)
Hash identifier: Z7Mj4x0s0yWEQ1r+ex2Nigqc1/GPXK5YrFhdR3hPUYk=
Subject key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97FB816F56BB5B57912F51FDF7669
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58207
IP: 31.129.124.0/24
IP: 195.16.93.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7f:b8:16:f5:6b:b5:b5:79:12:f5:1f:df:76:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684ac8a021270682765d23ef0338f35c786ddb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:59:53:d4:1c:64:ba:b6:5d:09:c0:75:65:
aa:41:66:66:4f:63:94:7b:8d:28:1b:3a:03:84:22:
0c:ce:4c:3e:c2:87:06:e7:5e:3d:89:3e:2a:13:1c:
f7:99:5f:77:01:43:78:2b:eb:5a:87:0a:6d:db:63:
b1:ac:c3:91:3e:1a:22:e1:16:a8:8d:00:d4:a8:a3:
bf:bf:69:2f:a9:80:c6:2f:4b:2d:b5:9b:7b:11:54:
46:6d:47:53:ce:c5:b2:fa:fd:d1:e5:cb:fa:70:32:
78:cb:4f:55:7c:92:dc:da:b0:cc:77:cd:af:bb:54:
dd:cd:24:30:db:72:0f:07:2a:c1:bc:cf:5a:f4:08:
4e:ce:5b:31:64:3f:fb:ee:53:d2:5d:ed:aa:1d:8c:
02:28:9e:39:d2:b2:5b:5c:2f:d7:65:c1:bb:f5:d0:
90:82:1b:8f:db:13:46:73:10:ed:80:3e:71:76:6c:
aa:ef:ae:5d:be:e8:b3:be:c7:a8:ae:24:3e:46:0c:
b3:67:10:7c:2d:dd:e2:95:29:90:ab:1b:c5:df:4a:
ff:21:f7:f2:84:d4:44:b6:9c:cf:2c:97:8b:08:cc:
62:93:39:3a:46:ae:86:47:77:da:78:9f:84:c1:0d:
2e:47:b5:3c:35:9b:0d:ee:79:f3:66:c1:7d:e3:43:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.124.0/24
195.16.93.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58207
Signature Algorithm: sha256WithRSAEncryption
98:d8:6b:00:ab:47:83:bd:ed:e4:9e:e0:ef:21:85:78:33:be:
f5:8b:da:d8:12:58:85:a3:41:e3:5c:85:d8:80:be:3a:6f:c8:
87:18:0a:22:d8:00:4b:4c:5d:a3:c5:36:d8:1b:9a:69:b4:6f:
bf:0d:c4:fd:1e:a2:6c:62:e6:73:37:ea:e7:58:9c:47:51:31:
f2:90:ed:cb:5e:c9:9a:64:32:dd:09:50:5c:b2:d8:d2:8f:6f:
a4:54:70:e1:f9:2b:ed:4f:e2:08:57:82:fd:71:36:f5:30:b9:
4f:2c:d9:51:89:30:2a:79:86:6b:df:fa:b9:9e:74:4a:30:e4:
32:22:d3:3d:f4:24:44:f7:48:9a:a8:94:0c:ce:42:5d:dc:e7:
f8:7f:3b:ca:94:ec:45:29:5e:b7:11:34:4e:29:fc:f5:56:1a:
82:27:4a:96:60:8e:8c:2e:be:2f:0c:2e:2e:2a:31:22:c8:63:
6a:f3:ef:32:3b:08:41:b5:c9:69:f1:b6:4a:b1:7a:51:b9:6b:
27:9a:97:57:64:0b:30:e5:4b:93:da:8a:41:98:25:44:d1:11:
06:19:8e:dc:cd:cb:84:f6:a6:2f:66:66:84:1d:48:88:47:ed:
e9:9d:6c:2a:40:33:3f:08:97:92:9c:0e:ae:23:9d:66:a2:3c:
10:63:84:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:24 2025 by rpki-client