Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.cer (raw, json)
Hash identifier: OpmY6jn0xk9eYRj2dD/3i9VvPDvCX7xGgH+jHavv3io=
Subject key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDDF94488238195A048757817EAF1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13045
IP: 81.14.128.0/17
IP: 89.182.0.0/15
IP: 185.93.136.0/22
IP: 193.254.18.0/24
IP: 212.59.32.0/19
IP: 2a02:560::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:df:94:48:82:38:19:5a:04:87:57:81:7e:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:79:50:15:f1:d5:2f:89:d5:ef:3b:d3:8a:
1e:79:24:20:ce:e2:8e:a1:a9:1a:ee:99:60:9a:59:
07:f8:e7:15:37:77:8c:40:dc:05:72:03:b1:17:89:
bd:39:78:6f:4a:9a:a2:49:54:86:c5:88:19:69:d9:
64:07:b3:e7:f7:9e:07:c1:c4:78:0c:9f:ad:50:38:
94:31:f8:e2:59:6b:4d:5a:6c:b7:64:02:c0:c4:db:
9e:e7:6f:cf:72:fe:37:2a:26:5a:f9:78:a6:de:57:
15:f9:9e:6a:e7:67:d5:ad:ba:5e:15:f0:2d:47:f3:
bd:4c:ce:ce:c8:06:28:70:0d:9c:5b:f9:be:1c:68:
f3:c2:d9:cc:ea:67:e8:d5:88:b7:1e:9e:50:eb:d4:
5d:14:94:45:7e:b6:6e:31:63:69:ef:0b:1c:56:af:
da:46:98:53:cc:bf:5c:53:ea:58:20:f2:dd:51:57:
a4:1e:f0:42:14:50:f9:b9:1f:da:31:ad:44:44:da:
d6:48:d5:86:fb:eb:e0:93:e0:ca:80:a8:12:b3:4c:
de:b4:ec:b4:39:f5:41:5a:38:2d:69:00:0a:3b:c3:
df:92:b9:e1:9f:40:ec:dc:25:43:1e:b8:06:01:b2:
e7:d5:1a:83:85:43:48:3d:9f:9a:3e:b2:ab:fb:27:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.128.0/17
89.182.0.0/15
185.93.136.0/22
193.254.18.0/24
212.59.32.0/19
IPv6:
2a02:560::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13045
Signature Algorithm: sha256WithRSAEncryption
93:ee:e9:78:cb:cb:62:64:64:2c:5b:eb:33:22:af:e9:a4:7f:
73:1b:2c:26:bb:3f:ad:20:dd:6e:2c:b3:29:47:cf:fa:70:7b:
f7:d2:3c:24:c8:24:71:22:46:3a:d0:e5:e3:87:c5:e2:5e:01:
c4:54:03:d1:37:16:f4:b6:8f:11:53:13:24:81:1e:a0:66:a9:
17:65:4b:af:56:38:7b:0f:0b:09:ff:66:c3:43:44:bf:b7:5f:
df:fd:d1:d3:84:cf:a5:e1:f5:a1:50:3c:cc:c7:1d:ec:8f:29:
cf:0f:f4:ab:33:93:e1:c0:23:51:c2:4e:17:6a:d5:e0:46:8a:
50:81:4d:0d:08:86:30:82:b3:bb:40:9a:ad:ad:7e:75:3e:ee:
b4:0a:5c:61:13:10:54:ba:38:3b:9c:6b:58:66:ab:ef:bf:c4:
fd:15:1c:f3:c2:b2:15:40:a8:1e:20:11:7d:25:32:ee:8b:01:
83:53:91:c9:6b:dd:a8:2d:04:ca:79:bb:ed:60:0e:af:cf:69:
6a:58:bc:2c:1a:12:f2:25:ba:c6:f7:34:b0:77:2c:e9:9e:60:
15:19:36:02:cf:37:bf:10:65:78:2c:32:bf:51:f5:c4:c4:ff:
95:a9:2f:63:df:e9:14:22:27:06:6b:bb:4e:29:90:d5:4f:85:
dc:00:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:19 2025 by rpki-client