
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
File: eoBXqNht0zDzh4AfED8-u2_byqo.cer (raw, json)
Hash identifier: zf88A/+YkUvbvN0kOEhQjPo3yW/3cEAJThAgCX1iHiw=
Subject key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA36412F2C607FF7B82135023CCEE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56984
IP: 193.36.168.0/22
IP: 2a0c:8940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:41:2f:2c:60:7f:f7:b8:21:35:02:3c:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:7f:cd:8d:34:3f:8b:65:1e:4c:34:6b:c1:
a0:0a:25:bf:1e:3d:a2:1e:99:a0:77:55:f8:c2:24:
27:a8:03:80:a3:8a:b7:28:e5:02:97:64:9f:61:46:
c3:e1:eb:35:56:1b:b8:8f:94:b7:c1:de:a3:8c:52:
ff:2b:d5:43:b1:72:98:52:18:e9:81:f2:ce:75:9a:
a2:c1:39:d8:bb:12:80:ff:60:d5:29:a9:0e:89:43:
44:bb:3f:a4:cf:9a:d6:1c:95:ab:04:05:17:97:bd:
6c:0b:f2:9a:cb:cd:10:31:2e:52:58:c6:64:1a:12:
8a:47:32:fe:6a:d2:8c:f3:68:fb:e8:15:77:7f:91:
51:78:c5:62:86:40:26:6b:4b:36:de:fc:81:0e:20:
39:83:5a:2c:f1:b9:0e:93:e8:68:23:51:b1:1e:0e:
b0:e3:f9:21:59:fb:cb:69:a0:db:0f:36:d3:73:06:
67:69:ff:65:c3:74:be:3e:80:bc:eb:9f:17:f5:b2:
0c:31:56:73:85:17:5a:8a:90:82:88:40:a4:ab:d0:
99:9c:9c:bb:f5:70:00:2f:76:49:d7:3c:f9:ef:78:
df:6a:9c:4c:0b:a6:c8:d8:29:5a:20:34:3b:05:aa:
ca:22:3b:cb:31:e5:92:9a:58:d4:f6:1d:57:8f:25:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.168.0/22
IPv6:
2a0c:8940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56984
Signature Algorithm: sha256WithRSAEncryption
6d:95:41:56:c3:2b:a2:96:8a:ed:75:64:d9:ce:1a:d5:79:71:
9a:6e:82:d5:56:85:00:a8:ad:1b:7c:b9:66:f7:07:9c:5b:09:
fb:89:c7:89:ca:67:b1:89:0a:fb:11:aa:8e:57:5e:6b:f3:74:
fe:be:cb:19:8f:68:a7:8a:bf:c2:dc:c5:9c:9d:ed:72:fc:6c:
e7:5d:64:e6:37:80:de:00:09:51:d7:4f:65:68:00:de:94:69:
db:ef:af:88:8e:d6:35:f1:6b:f0:d4:97:9f:0b:3c:e1:ea:6c:
85:a8:ed:1b:aa:de:36:2a:17:d1:95:76:51:4b:af:66:c7:1d:
76:70:61:ef:12:da:8e:a3:f2:62:4f:dd:5e:07:ab:4c:70:9e:
4c:1e:35:73:25:16:84:66:ed:7f:20:3c:24:f8:f4:74:ca:46:
c3:9e:ee:c6:6d:8c:b0:62:28:fb:bd:3e:a1:69:fc:06:61:07:
80:59:5e:cf:3a:ae:3b:28:17:ba:df:d8:d5:e8:c8:d1:8f:bb:
dd:ad:f2:80:5c:ee:68:4a:15:b0:96:4a:a3:80:32:bd:55:62:
06:fa:ae:4e:46:08:26:ea:bd:b7:2d:0c:4b:32:cb:2a:ca:92:
6f:ae:59:9a:be:4f:fc:ea:07:62:af:d8:e6:69:51:09:78:49:
37:6c:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:11 2025 by rpki-client