Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer (raw, json)
Hash identifier: aZqaTYDyTAylE8KR5jHbMfMbXWSpzDwrXD/fonSY4c0=
Subject key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019474BDAD6668A009E60767EACF5DDB1056
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 14:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216293
IP: 185.208.202.0/24
IP: 212.46.60.0/24
IP: 2a13:d9c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:bd:ad:66:68:a0:09:e6:07:67:ea:cf:5d:db:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 14:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:e9:d8:3b:0d:69:f5:22:2e:08:ea:a9:fb:
6a:03:52:ea:57:51:ea:3a:e0:ca:95:bd:29:ab:a7:
dc:a5:18:6d:d3:a4:19:e8:22:50:e7:c1:b1:dc:47:
96:ef:bb:18:25:29:25:18:d4:d1:a2:4f:fd:67:b5:
e1:2f:b0:ca:8a:bb:22:98:02:ea:af:41:d6:96:77:
e1:02:f0:b5:6c:a8:b0:07:77:d5:3c:7a:e3:f9:7b:
3d:08:10:89:e1:e4:9a:35:19:71:70:0b:09:27:76:
dc:ff:26:d7:9f:d9:ac:70:dd:82:df:91:82:b7:f7:
dd:ba:dc:2b:f9:e1:8f:7d:7c:3e:d5:99:b0:15:ec:
13:39:9e:18:d4:f6:36:ed:7a:fc:b1:98:f6:c5:fe:
01:4a:ce:b9:f3:3e:aa:5b:a9:73:ef:b2:4d:c0:d4:
2c:59:83:03:f3:56:79:28:c8:bd:51:29:74:b6:d1:
f0:57:f3:66:56:7f:11:cd:05:2c:53:18:56:43:8b:
ef:fd:ba:85:0a:98:9b:5b:03:39:d8:28:1b:e7:7f:
b6:1d:97:75:f8:f5:57:c7:ad:c6:db:9f:25:f0:07:
c8:b9:1f:f9:cd:e0:61:18:06:74:67:1d:0c:db:4d:
75:a2:bf:67:ff:1f:76:71:16:88:b3:91:59:64:63:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.202.0/24
212.46.60.0/24
IPv6:
2a13:d9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216293
Signature Algorithm: sha256WithRSAEncryption
11:32:21:39:1b:bb:dc:54:ef:15:19:44:c3:51:fb:64:b8:4d:
b5:68:55:46:ac:7c:92:9e:64:75:c9:8b:ff:5c:c1:29:e9:00:
ba:e4:09:f1:06:25:84:4a:d0:94:d8:e7:3a:e8:85:2b:9b:32:
b3:4d:ae:41:06:4b:51:b5:bd:1f:fb:52:b1:06:df:f6:ac:88:
4d:4a:47:7a:ae:78:b9:1e:64:de:e8:b6:3f:2f:af:a6:bf:f0:
7a:7f:e9:b6:4a:83:45:1f:58:69:48:cf:d6:51:e8:ea:2e:b5:
b0:30:bb:16:de:68:e6:81:2a:11:17:4f:ca:74:e4:d4:89:bc:
95:54:b4:b9:8c:cd:e1:51:41:88:7c:6b:a3:5b:48:35:8d:27:
86:35:b9:a7:62:46:c8:15:d1:36:58:47:71:8f:d5:86:c1:8e:
56:98:99:c5:94:c1:f8:f3:50:8d:6b:1a:8e:98:6f:72:b3:44:
c2:11:c6:64:f0:9e:e3:70:47:d8:95:47:7d:e8:90:df:2a:88:
ed:6a:0a:09:d9:0c:7f:0f:68:d5:fd:10:21:10:b6:a0:2b:81:
3f:9b:f4:32:34:80:bc:06:0b:8d:52:2b:1a:b0:70:d0:f6:a8:
21:ef:a9:b6:71:de:3f:c9:f6:2b:62:2e:af:68:b6:0c:58:de:
2d:c7:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:32 2025 by rpki-client