Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer (raw, json)
Hash identifier: 04Vmhh67r5wsFVdcEwmfCzqO6CLId+kTRvRGsdlRh+o=
Subject key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D95FAED687C7AF33EBAB3A98712FD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210333
IP: 185.202.96.0/22
IP: 213.109.144.0/24
IP: 2a11:6a40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:ae:d6:87:c7:af:33:eb:ab:3a:98:71:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:50:3b:dd:8b:9c:ba:a8:6e:34:48:78:38:
60:ae:ab:49:d7:53:40:8d:e0:82:3e:2d:cc:34:f6:
e8:ac:52:ad:ef:15:11:84:90:c2:c1:53:1d:f3:5f:
d6:bb:6f:22:ac:67:ba:d4:22:58:e5:ff:02:67:35:
37:1c:32:0a:0b:c2:6a:c3:b2:96:60:d9:2b:d4:8e:
14:6b:0d:b3:0c:d5:05:6e:84:01:0b:9f:53:5b:36:
c1:5f:1c:fd:29:d4:e8:64:81:c8:9c:2a:8b:6a:56:
86:62:36:fa:45:22:f3:5c:62:bd:c5:83:3f:f0:e8:
2e:b7:94:4e:3d:52:97:77:6c:c5:34:48:5d:af:f7:
11:38:aa:e3:de:cd:0d:8b:e0:82:11:1f:ea:de:34:
eb:3c:49:ff:58:e0:b3:2d:4f:00:43:23:ff:61:7f:
a6:28:72:32:a9:5c:0a:26:3b:c6:a4:78:06:3c:19:
3a:aa:b5:72:6d:9c:f0:07:47:84:e5:32:a5:df:c7:
3b:42:95:5b:a3:53:46:e4:8d:99:ba:f0:ef:65:68:
c5:23:de:1b:65:e6:ff:ed:e7:ce:79:2a:2f:0a:00:
11:f3:09:d9:c8:7c:39:3c:78:0b:71:cf:fa:4b:cc:
3d:e8:1c:00:02:3b:db:2e:d0:93:b6:29:57:02:83:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.96.0/22
213.109.144.0/24
IPv6:
2a11:6a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210333
Signature Algorithm: sha256WithRSAEncryption
15:88:e9:2b:82:ca:73:b2:14:ca:5b:1e:f1:b5:57:03:ff:5f:
55:9b:8e:b9:d7:22:15:71:a1:aa:e1:a6:3a:e5:74:ac:f7:43:
85:8f:37:2b:52:32:96:75:8a:b0:f5:49:05:7a:78:f5:36:d0:
63:90:fe:10:4e:84:40:c5:52:fe:d0:c2:33:1a:1b:f7:a4:ec:
c0:fe:bd:de:ae:0d:49:4d:79:51:6c:9a:68:40:1d:34:ef:86:
18:e7:fe:28:03:63:de:55:17:0d:a2:64:94:3e:24:7e:ac:73:
79:f8:48:05:df:86:54:92:aa:6f:2d:87:00:22:7a:95:df:50:
eb:ae:66:35:b9:dd:46:96:d0:55:bf:78:ad:c6:d1:48:f3:5d:
55:68:d9:3b:fe:45:b9:5c:73:bb:03:7e:ea:ad:8c:61:42:c7:
5b:e3:d8:16:fb:c0:a5:d8:aa:54:06:85:67:94:6c:ad:76:9a:
53:4f:51:08:56:f9:14:8a:7b:c8:86:00:92:41:23:bb:ce:7a:
11:12:94:e3:1f:d9:4b:7f:47:47:2e:42:43:a7:35:dc:c0:4b:
7e:0c:cc:5b:8b:04:b7:8c:07:05:9b:c0:27:0e:87:e6:79:9f:
59:19:d2:43:c5:75:7e:07:a3:55:0f:e9:64:55:3d:b4:79:23:
3b:68:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:40 2025 by rpki-client