Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer (raw, json)
Hash identifier: 3sAQZdJEsiI4ZCJf+pBUmcOThUegcdJe5QC2GVPnZBw=
Subject key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216C6715890063C36156B1B49CC381
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208988
IP: 31.214.150.0/23
IP: 37.10.68.0/23
IP: 37.10.110.0/23
IP: 62.221.228.0/22
IP: 85.190.184.0/21
IP: 85.222.208.0/20
IP: 91.208.17.0/24
IP: 94.126.36.0/22
IP: 109.169.120.0/21
IP: 128.0.120.0/23
IP: 185.44.4.0/22
IP: 185.50.108.0/22
IP: 185.68.240.0/22
IP: 185.123.4.0/22
IP: 185.125.232.0/22
IP: 185.195.120.0/22
IP: 2a01:71a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6c:67:15:89:00:63:c3:61:56:b1:b4:9c:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:01:57:0e:7b:38:a0:b2:91:8a:12:6f:99:
87:d5:76:07:67:c9:a7:9e:83:0a:2b:64:49:00:3a:
d6:8d:f6:32:af:77:22:02:9a:d2:25:5c:d5:09:4b:
84:e9:1a:28:32:ab:24:29:75:ab:be:2c:1c:35:73:
c3:9e:8f:af:6e:09:25:26:ed:79:da:da:62:47:8f:
05:c1:32:db:88:f3:1c:00:61:7e:60:70:69:15:4f:
d3:b4:f9:25:68:7b:99:34:12:1e:3f:9d:07:c5:3d:
48:22:b0:b3:5b:85:0f:5c:62:4b:f8:b9:10:ea:cc:
f6:2a:16:1b:a0:53:b5:09:5d:ad:a7:be:b7:08:5a:
81:18:c1:6f:6f:64:ba:4b:3c:c0:e1:53:13:d6:b3:
53:16:3c:f9:d8:3d:e0:fa:1d:12:f5:39:cd:03:84:
7e:60:c0:a5:7f:3c:81:55:2c:10:a6:f1:04:e1:b5:
fb:17:3d:2d:4a:7d:bb:35:ab:f8:e8:9c:de:cf:40:
74:ee:02:83:9d:90:08:22:f8:ea:95:20:59:e5:1e:
72:39:fd:4e:8b:e8:30:56:1d:b6:3a:48:a5:07:38:
04:bc:58:15:29:20:62:61:51:4d:2a:b9:d1:6a:28:
d0:4c:c7:07:86:91:f7:27:db:4d:80:f8:5f:86:1b:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.150.0/23
37.10.68.0/23
37.10.110.0/23
62.221.228.0/22
85.190.184.0/21
85.222.208.0/20
91.208.17.0/24
94.126.36.0/22
109.169.120.0/21
128.0.120.0/23
185.44.4.0/22
185.50.108.0/22
185.68.240.0/22
185.123.4.0/22
185.125.232.0/22
185.195.120.0/22
IPv6:
2a01:71a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208988
Signature Algorithm: sha256WithRSAEncryption
79:5c:b8:f3:58:09:c3:47:0e:66:d9:e9:0c:f3:54:fd:e2:f3:
df:86:69:61:41:cc:08:59:0b:fe:b8:12:32:56:e8:c8:1a:4b:
ff:26:44:aa:e8:ce:24:6c:1c:8e:52:08:34:79:7f:3d:31:6f:
b6:aa:95:73:ec:5c:0b:31:96:34:ed:19:48:5d:96:18:c2:e9:
79:f3:ac:33:e3:61:e3:38:e2:01:fb:42:66:de:3b:d5:af:5f:
45:31:40:50:81:b7:b0:53:b4:3f:8d:99:8e:ae:be:e7:e0:65:
eb:ac:b6:ef:cf:d1:bd:6b:0d:17:9e:99:b3:ab:db:7c:a3:79:
2a:29:33:94:bd:44:cb:32:b6:98:e0:ae:c6:3b:ea:4d:74:6b:
d8:29:a3:a7:63:8d:b6:11:31:d0:24:8f:1f:dd:00:c1:45:a5:
e0:c8:1f:0b:d9:1f:e8:cc:79:2a:71:12:11:a6:f2:94:a9:96:
61:a1:a1:d4:52:86:b2:00:9a:b7:bc:bf:5f:70:ae:6a:09:0f:
ae:de:ac:1f:9c:70:fd:92:d0:84:83:f5:79:8a:64:3f:e3:b8:
fe:13:99:98:5a:85:30:94:57:0f:9f:c5:5b:ce:4d:e6:fe:53:
8f:73:61:96:3c:c9:dc:93:14:34:69:8d:96:9c:5c:68:03:5e:
82:c1:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:34 2025 by rpki-client