Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
File: aG1vVpUAwlBwthJPG4b2CVJnepM.cer (raw, json)
Hash identifier: M5bUmjqanAUlHUNZXbBxTR8V4ZdDXrbWHwEmYKLusYM=
Subject key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA4F8A737522B8C0904A472D6D842
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207881
IP: 91.237.208.0/24
IP: 91.237.215.0/24
IP: 91.238.1.0/24
IP: 91.238.18.0/24
IP: 2a0f:6940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:f8:a7:37:52:2b:8c:09:04:a4:72:d6:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686d6f569500c25070b6124f1b86f60952677a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:dc:b7:a0:ff:e6:fe:ef:0c:77:de:d8:97:
24:0e:59:3b:97:23:d6:99:3a:8d:de:be:f8:27:4a:
ba:5f:03:c1:9e:ac:cb:82:2e:ef:c8:c6:a2:c2:5b:
fa:03:06:9a:3d:f7:16:e1:99:9d:de:69:d1:1c:c7:
e5:a9:37:bf:e2:cb:16:6f:c2:00:89:b1:8c:92:9e:
18:cf:76:3b:c3:ab:70:7d:00:c0:05:9b:d1:c7:6d:
18:bb:ef:7f:ee:02:f0:ad:f1:06:4e:51:1b:05:1a:
7d:91:cd:0a:9a:a3:1a:68:b4:d3:f0:e9:97:5b:a0:
77:62:56:b2:04:96:ce:3d:77:42:52:e1:17:a8:fe:
bc:41:c4:4c:40:4f:08:47:64:fd:38:d7:aa:b0:78:
17:e9:c1:e3:ab:f5:d3:0e:d8:40:b5:89:3f:aa:47:
8e:c1:7b:aa:19:04:c3:40:b5:bd:d4:38:0a:2b:f0:
b7:b1:bb:4a:cd:06:d7:a2:aa:c9:2d:b6:63:20:bb:
dd:9d:ed:d6:85:34:bc:0b:67:6f:d2:9e:ab:fd:d5:
7a:9f:76:9b:3f:3e:54:60:f4:1f:c9:43:67:b3:7e:
d2:49:cd:03:cc:69:ae:af:ef:9b:06:47:24:85:f1:
91:d8:e2:1f:53:d3:6e:39:07:3e:fd:b5:23:f0:c0:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.208.0/24
91.237.215.0/24
91.238.1.0/24
91.238.18.0/24
IPv6:
2a0f:6940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207881
Signature Algorithm: sha256WithRSAEncryption
42:dd:fa:4d:79:d3:b1:0d:29:a2:5e:56:3b:f7:1d:0e:54:6d:
91:be:4d:9a:11:39:ef:85:cb:2f:af:68:b4:63:fb:3e:65:75:
d7:43:30:ba:db:9b:61:e5:66:3a:54:cb:22:ea:ef:b2:50:9e:
55:76:12:db:34:6a:e5:9d:79:12:c7:a4:99:2c:f0:ca:f8:f3:
24:ab:49:d7:2b:61:d9:10:59:ad:17:08:e0:69:87:2d:9a:e1:
4c:a9:67:12:9a:31:70:40:7a:22:23:71:bc:37:60:a7:44:ac:
da:b5:fe:6e:e0:4f:7d:97:d4:17:e6:d3:e0:95:9f:5e:45:2b:
13:f2:65:ea:05:37:74:82:2c:e0:1b:46:c2:a0:49:23:67:4f:
62:8e:f2:8c:15:09:f2:e9:b1:e6:cd:3c:01:c2:10:35:a0:c1:
df:a0:94:20:37:30:13:01:87:76:32:9a:e2:d1:fe:e3:91:49:
ae:a9:b4:a9:b6:21:be:f6:85:8a:a1:8a:b6:28:c0:61:36:0f:
f2:a2:e8:fe:00:38:44:b0:47:5e:44:72:97:85:ce:4b:24:a7:
e9:30:76:9c:f1:04:be:55:5e:d9:be:68:c7:67:39:4f:53:4d:
2a:95:43:f4:bc:5d:d2:cc:8f:ed:84:08:67:b5:d0:9d:0f:ed:
3c:7f:c9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:10 2025 by rpki-client