Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer (raw, json)
Hash identifier: llN7vvvUEjsUWziZwIvjh1qTXD+3GMAbeymHqHL9IO4=
Subject key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B56F3B6A84D9C03B981C2EDEB5C40E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34385
IP: 31.47.200.0/21
IP: 217.28.192.0/20
IP: 2a02:24f8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6f:3b:6a:84:d9:c0:3b:98:1c:2e:de:b5:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:5c:d9:e1:37:7b:ce:e0:b8:fc:51:9e:fd:
dc:de:a7:00:1d:47:69:ff:49:11:92:d8:c0:d0:0d:
e9:ec:a4:c1:de:84:b5:2d:3f:1c:57:47:34:89:95:
6e:c1:32:75:d0:e0:c0:d6:08:6e:8b:a2:b6:28:48:
c6:47:f3:f4:a4:8f:ac:ae:c3:b9:09:4c:c5:d0:b2:
8f:0e:90:0b:9f:00:e2:3b:8b:a1:2e:e3:1d:32:a0:
b5:6d:7f:d4:bb:88:cd:da:e3:40:61:52:13:db:24:
04:3c:98:3f:02:54:1b:c9:2c:82:84:21:d8:16:05:
33:cf:44:5e:24:d8:06:55:e6:fb:1c:5e:6c:56:90:
c9:25:17:37:56:38:4f:15:e3:89:ef:73:e0:f4:54:
71:19:aa:94:85:ec:68:1d:ab:f6:dd:41:90:a9:dc:
fe:89:2a:ae:a2:fa:d2:bb:19:c1:8f:4f:1a:20:8c:
e6:d1:85:cd:af:7e:8b:c1:72:6d:2a:3d:d5:fd:15:
68:a6:db:c9:90:3b:68:16:68:ec:ad:d3:80:e0:a5:
7b:fc:60:45:a8:1f:3c:35:64:85:05:df:18:40:4e:
c9:d4:06:b7:06:08:d2:c4:30:b2:f1:2e:45:d1:c5:
36:57:2e:1f:74:e3:37:e4:a0:2a:85:14:c3:f9:df:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.200.0/21
217.28.192.0/20
IPv6:
2a02:24f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34385
Signature Algorithm: sha256WithRSAEncryption
7a:50:c5:20:a7:a3:0a:f3:d3:fc:69:3d:47:f4:e6:5f:f1:f3:
3b:4d:49:44:25:d2:1b:4c:e9:23:80:f1:51:03:8d:a5:74:bc:
1f:5e:71:df:81:f4:4a:27:6e:90:38:20:69:ea:ab:cb:07:44:
39:40:52:f9:be:55:5b:18:b9:f1:2f:02:eb:b1:6c:c9:85:2b:
3e:6c:86:75:39:e2:7c:18:c6:9f:e7:03:46:7a:df:8d:1d:19:
cb:ba:cd:fb:1e:98:84:b3:99:30:ac:e2:ad:48:68:a1:01:18:
8e:85:76:2d:08:9d:f1:93:2c:66:4f:4f:1c:73:6b:24:ce:3c:
f7:bc:1a:54:a8:5f:68:d9:be:e2:f0:c2:b0:ef:69:d1:41:82:
c4:84:01:1f:2a:b2:cd:91:37:0d:1c:9b:2c:a0:21:c8:06:6a:
f7:a8:94:6c:3e:a8:8c:eb:99:3a:63:a9:1d:c7:76:5f:02:32:
1a:ae:4f:3c:63:f8:b1:58:d1:04:9f:d9:77:f3:15:e2:eb:b7:
a5:07:fb:0c:a3:70:10:bc:97:5b:00:23:7b:b2:d0:75:b2:a5:
95:2e:25:0a:96:b1:23:b3:5e:0f:55:fd:d1:a3:85:06:5a:ea:
ef:25:56:9a:da:eb:b8:d9:0a:54:10:96:69:7f:3c:27:a5:29:
29:10:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:08 2025 by rpki-client