Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer (raw, json)
Hash identifier: q4O6Niav8BpzhhKLo4WXFZa9HNESKRPx6CJVO3WedPY=
Subject key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218EA2E571727B5C619370F8DB6637
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35815
AS: 39406
AS: 56947
AS: 207103
AS: 209307
AS: 209746
AS: 209788
IP: 31.25.24.0/21
IP: 45.9.212.0/22
IP: 79.172.16.0/21
IP: 91.212.68.0/24
IP: 91.229.108.0/22
IP: 95.183.40.0/21
IP: 109.198.96.0/19
IP: 185.5.140.0/22
IP: 185.7.116.0/22
IP: 188.68.80.0/20
IP: 192.54.76.0/23
IP: 192.54.186.0/23
IP: 2a01:85e0::/32
IP: 2a02:7fc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8e:a2:e5:71:72:7b:5c:61:93:70:f8:db:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:38:eb:7f:b1:08:78:04:19:79:a9:88:81:
5c:88:4d:9b:44:0e:3a:06:51:a8:49:6c:fe:46:ad:
47:36:c8:72:da:8b:33:88:f0:32:3b:36:2d:11:92:
c9:75:43:a5:d3:51:c1:ba:bb:bd:05:58:12:4c:86:
22:2c:d6:e0:78:f6:07:0d:da:58:dc:a7:8c:94:25:
57:24:a0:19:88:7b:28:07:33:cf:ef:ab:0c:06:e2:
20:1d:c0:c5:6c:6e:34:88:3c:46:e2:9e:d1:3b:56:
40:86:82:f3:69:94:5d:a9:41:8f:a5:e5:9c:9b:ea:
09:d2:07:92:44:35:3d:c8:73:d8:c1:96:f3:50:03:
9f:60:d0:d3:f5:04:b8:21:63:ed:84:fa:e3:bd:74:
67:2d:83:20:de:8f:ea:75:9b:15:7a:38:e0:82:15:
2c:b4:79:41:ca:ef:b6:65:e7:72:60:c2:e1:45:a9:
04:1d:3f:b0:05:aa:b4:9d:6c:f1:ef:08:7b:89:10:
ec:b7:06:ad:d4:84:a3:bd:27:d4:d2:99:6b:b5:25:
76:14:88:b0:7b:16:eb:cd:8d:d8:a7:df:cc:14:ff:
ef:33:f2:15:71:71:bf:30:1b:9e:02:d3:4b:e7:bd:
7b:38:98:ab:1d:5d:b2:4a:ad:7b:f4:24:26:1a:ec:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.24.0/21
45.9.212.0/22
79.172.16.0/21
91.212.68.0/24
91.229.108.0/22
95.183.40.0/21
109.198.96.0/19
185.5.140.0/22
185.7.116.0/22
188.68.80.0/20
192.54.76.0/23
192.54.186.0/23
IPv6:
2a01:85e0::/32
2a02:7fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35815
39406
56947
207103
209307
209746
209788
Signature Algorithm: sha256WithRSAEncryption
2d:72:43:22:c6:c6:0e:e5:22:5f:4f:4c:6c:c7:83:69:35:95:
d8:ab:29:54:a3:a2:f7:0a:88:11:f6:50:31:c7:f3:e2:c3:72:
3b:1a:f1:46:44:68:bc:de:85:65:d4:c9:e5:ee:5b:09:61:75:
6d:3e:25:8a:90:58:00:96:c0:c2:9c:3c:7e:58:de:7f:38:6f:
82:ff:7d:d1:70:a6:49:77:65:45:b8:87:37:96:1d:8f:4e:9a:
7e:f4:dc:ce:f8:f9:11:7d:0e:f3:62:e1:e0:d7:80:86:18:f8:
64:3f:de:4e:88:ae:fd:2c:d4:c5:5d:ca:14:8b:d0:ac:c0:18:
99:86:ba:16:fd:7c:ec:d4:4b:a4:ad:23:37:b4:94:dc:04:cf:
12:65:b1:ef:28:f3:1e:6b:20:2a:75:ec:b2:86:38:16:da:f6:
e4:2b:d5:2e:96:bd:28:b0:28:90:aa:55:2a:e1:07:f2:3e:17:
24:e6:1e:75:91:81:cb:a2:b3:19:ca:90:e6:1d:97:69:35:51:
5e:3c:86:2b:64:bb:0c:2d:5d:97:2c:6c:e8:f3:33:6b:24:ce:
e0:69:d6:89:d8:e9:c5:12:3f:2e:06:70:91:41:cd:ad:7a:f7:
56:4c:29:49:1f:ef:c5:d2:77:22:d1:2c:58:b6:99:7f:31:b7:
9f:06:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:03 2025 by rpki-client