Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.cer (raw, json)
Hash identifier: JWh49Dm5iFlNcsTyomy4WLOPeP+oQRHrqaJjBdECwqQ=
Subject key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520468BF4196E14BA5D7812C212C1E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13008
AS: 31446
AS: 201461
IP: 193.16.237.0/24
IP: 195.72.132.0/22
IP: 2001:67c:404::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:46:8b:f4:19:6e:14:ba:5d:78:12:c2:12:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:25:f5:72:9d:35:ee:17:a4:ef:5d:e6:8b:
78:56:a2:a0:1a:85:37:b4:ac:1a:34:1b:fc:53:e9:
28:02:00:6d:b0:6f:d2:87:68:dc:95:eb:eb:6e:fb:
13:e6:8f:ee:6d:b3:5c:9c:8e:aa:1b:78:9e:15:c1:
0d:84:87:8d:83:82:5e:67:26:3b:e9:3d:28:6d:79:
31:1a:9b:a5:48:8c:fb:c4:dc:88:e4:aa:26:0d:cc:
76:28:11:06:ac:b4:60:9b:83:80:b1:b4:64:d4:d8:
b8:dd:5e:a4:77:fc:4a:9c:90:78:a0:04:23:bf:20:
d4:69:70:d5:71:3b:d2:35:72:7f:93:fa:88:c5:0a:
9e:f2:df:d0:5a:48:d8:9a:85:f5:be:9d:f7:55:66:
e3:3b:fa:b4:f9:86:e0:ca:c1:d9:a6:1f:77:2c:b9:
41:5b:45:8d:65:06:e1:44:69:5f:a3:09:71:e2:29:
cf:e0:bf:9d:43:ae:73:1d:30:d6:b7:ae:d4:ef:7c:
20:77:99:55:92:b2:dc:d9:23:e4:a0:23:33:c0:70:
d8:2f:54:25:36:e7:6f:74:aa:1b:c8:6f:4d:d2:34:
85:df:b0:e1:83:05:d8:de:26:29:66:86:7d:b5:c7:
bf:2e:bb:cc:41:88:d4:24:4c:86:d0:25:05:0d:8d:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.237.0/24
195.72.132.0/22
IPv6:
2001:67c:404::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13008
31446
201461
Signature Algorithm: sha256WithRSAEncryption
a9:9a:8f:df:c6:0c:14:21:19:e0:d5:ac:66:3b:c6:77:21:a6:
01:72:7a:9e:a0:36:6c:a9:e4:7e:c9:9c:41:0b:eb:b0:70:db:
fd:0f:91:20:56:0c:8c:16:cf:e2:fb:a6:6c:6c:5a:1e:82:8e:
a2:31:d9:c5:93:be:66:63:f3:b4:a9:97:57:10:70:82:2d:a1:
51:cc:3b:13:16:0c:c0:88:0d:aa:7c:3d:25:03:6c:fc:5a:d9:
a3:62:e3:65:26:17:fa:35:90:d7:46:c0:5c:c7:68:89:bd:ca:
c7:79:66:38:4b:99:13:97:3d:3a:64:88:16:b2:89:ca:de:05:
b5:60:81:1e:aa:58:fd:52:d6:3c:37:b1:1a:fa:58:4b:fb:70:
6f:4d:6b:79:3f:ac:af:41:d9:bc:98:66:d5:92:bc:4d:e0:4a:
c6:53:a1:05:fd:16:96:94:2d:ca:d7:3b:3d:c9:a0:d0:e8:66:
c5:87:1a:47:61:2c:c6:97:ca:ee:a2:2a:5a:cd:55:2c:a4:17:
5e:01:1e:d7:4e:a4:df:d7:33:03:de:b5:5c:20:1d:56:a5:04:
cb:55:78:34:6f:9d:a0:65:cd:d7:38:16:6e:74:93:96:26:8d:
c1:ac:aa:06:d2:4d:77:74:68:bc:3b:8c:86:be:59:11:56:ea:
ec:ff:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:33 2025 by rpki-client