Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
File: guY1_s7xcQnhrHiy-3IkENhHepw.cer (raw, json)
Hash identifier: FDao4AlrF53zYuy1PoiYar93tOn0qnuQ2/Nz7mkDH70=
Subject key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222034F47BA9840877DED21030FE0D9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201873
IP: 185.61.52.0/22
IP: 185.142.252.0/22
IP: 185.143.104.0/22
IP: 2a02:7820::/32
IP: 2a07:3200::/29
IP: 2a07:3440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:f4:7b:a9:84:08:77:de:d2:10:30:fe:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:2b:f7:4b:1a:a5:64:c8:40:fb:cb:a5:ee:
e2:cc:be:62:bb:11:b5:94:b2:ce:13:4a:d8:ed:f9:
7b:7c:a5:e5:0a:23:c5:02:26:b6:8d:fd:8c:7b:9e:
57:d2:64:f7:fd:c5:1e:21:00:ac:b3:fd:15:a2:0e:
b8:43:4d:b5:d2:8b:4a:ac:e4:3d:d7:e6:c4:54:14:
54:f9:65:3b:d2:82:ee:af:c7:4a:ca:c5:9b:7b:5c:
bb:05:7b:9f:76:a7:6d:af:98:ef:3f:ad:a8:67:d2:
24:db:23:6f:05:c0:a1:b4:e0:29:0b:49:76:0c:49:
e5:d5:dd:0b:63:0f:da:29:c6:2c:19:e2:f8:f6:69:
65:d6:37:be:8c:19:b9:89:91:03:0d:c2:8e:03:da:
e9:aa:82:f5:4e:7c:1a:9d:9f:ff:bf:4f:21:1b:44:
fa:0a:80:78:67:dc:8c:ab:70:7c:ee:65:a0:bf:01:
a3:54:41:9f:93:44:35:12:7b:f2:5f:10:d0:a8:ef:
47:34:bf:69:06:c1:03:c2:92:03:a7:01:42:6b:07:
12:9a:e9:12:5e:2d:e9:66:b6:b4:f9:f3:20:7c:e1:
90:29:e8:cd:81:2b:29:e6:b3:93:09:75:29:cd:a7:
01:c6:c0:77:62:30:ba:76:86:76:22:b3:c2:1c:66:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.52.0/22
185.142.252.0/22
185.143.104.0/22
IPv6:
2a02:7820::/32
2a07:3200::/29
2a07:3440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201873
Signature Algorithm: sha256WithRSAEncryption
aa:a6:ef:ba:fc:26:39:b7:60:8f:04:66:a3:aa:b4:36:4b:8d:
86:1e:8a:16:cf:cd:41:25:78:53:f9:e9:86:bc:ce:40:90:10:
ad:f1:85:7c:ea:64:c8:19:c3:92:ce:c8:ef:9b:42:dc:2d:58:
10:6b:91:38:dd:e3:b8:a6:08:d3:34:59:ef:8c:05:3e:f7:03:
d0:cf:51:59:db:23:1e:35:b6:09:fc:d7:db:93:ca:96:1c:fc:
6c:19:29:58:9b:4c:77:b4:b6:da:e5:dc:96:56:f9:0d:1e:fd:
67:8a:e8:b1:8a:8a:17:2f:27:05:be:22:17:bc:c2:a5:d5:40:
a2:22:28:55:bf:a6:1d:ec:3a:3a:10:fb:e0:b6:79:47:89:27:
2b:2e:d5:b9:57:12:6c:e8:1c:37:a9:5a:3a:5f:ff:dc:aa:04:
03:79:a6:50:65:65:e6:41:11:23:04:24:1f:e4:a4:5e:16:d9:
83:1d:0f:70:05:8b:4e:e9:6b:8d:0c:88:e5:1a:e3:09:cd:60:
56:f5:24:25:12:eb:26:6b:22:cc:8c:3f:4e:9f:03:85:10:7b:
5a:a9:9c:04:d0:41:4f:fc:9a:84:7f:ca:05:e6:11:28:d3:62:
a3:18:4c:94:12:e9:64:53:00:9c:8e:ea:3d:74:6a:b9:1b:b2:
be:81:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:28 2025 by rpki-client