Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer (raw, json)
Hash identifier: SSeQgAsjZ4qlmYHXNQIpMOex/zsA35MkZUyAfTAk6o0=
Subject key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423697C8C1DC789DC9AE6E354CE8D0981
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50297
IP: 46.148.16.0/20
IP: 193.106.28.0/22
IP: 2001:67c:28f8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7c:8c:1d:c7:89:dc:9a:e6:e3:54:ce:8d:09:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:27:02:b8:79:80:31:9a:5f:5e:a9:db:b3:
2c:e5:e4:e5:cc:9c:47:bc:f2:bb:e3:77:15:fa:ea:
bb:6c:ee:d6:9b:a8:9c:02:80:13:d7:07:fc:fe:64:
3b:78:16:cf:85:0e:9f:1d:b8:cb:48:c6:db:e0:8a:
f4:1d:4d:5c:dc:11:b6:9f:bb:f9:a6:d3:ef:3a:91:
26:0c:5e:5a:40:17:0f:fe:44:48:14:7e:fb:95:a7:
b8:1a:d0:3b:aa:0c:3f:0f:b1:93:d1:ce:70:ef:c7:
67:b4:64:52:ac:89:bc:cb:2b:c0:30:04:a8:f6:6f:
2c:9f:0c:b7:61:d0:b4:a6:f0:fa:56:8d:b4:81:a9:
89:52:78:17:cc:c8:cb:ab:b5:65:dc:db:cb:b1:45:
36:90:7c:64:11:be:04:cc:3c:57:3a:01:f3:65:67:
e0:4c:f4:0f:b9:2a:5a:b3:41:e3:d9:53:89:3a:e4:
af:13:16:26:2a:b8:15:69:ea:77:fe:5d:2f:ca:7f:
24:2b:f8:1d:8b:6f:75:bb:35:63:67:43:ab:f4:fd:
ce:ac:d4:fb:df:a0:df:62:d3:26:3b:00:84:a1:f9:
3b:a6:82:33:80:2f:28:98:c2:7b:45:62:b8:b4:3d:
90:ab:bb:8a:10:d9:03:71:e4:cd:09:d8:d6:c0:c8:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.16.0/20
193.106.28.0/22
IPv6:
2001:67c:28f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50297
Signature Algorithm: sha256WithRSAEncryption
6a:75:04:06:d3:79:61:7d:a3:6d:32:10:8d:56:be:d1:40:c9:
a5:8f:ee:c2:ba:ab:65:15:d2:4c:a3:c4:55:1a:80:d2:15:c5:
ed:2e:fe:9d:b7:84:46:9d:fe:c6:b3:00:c8:47:fa:61:70:06:
9d:2b:ae:86:e2:06:b6:3b:ef:d9:15:f5:94:84:06:bb:95:19:
be:13:00:67:bd:8e:0b:d4:01:82:27:3e:a1:12:d5:50:52:40:
9b:19:3c:6b:d4:f8:c0:ca:cd:f4:5c:37:c8:ed:cd:b6:45:96:
03:93:88:43:f7:ce:6d:44:ae:a2:23:72:86:ff:9b:c9:a0:e6:
9f:32:20:b4:36:80:92:e4:dc:e2:90:8d:bf:a9:63:5e:a0:7c:
07:4e:40:db:d4:5f:b6:b7:e5:56:b6:7e:2f:31:fa:ff:92:9f:
85:79:95:7c:23:e7:bb:08:56:68:98:64:58:27:fa:4f:6f:59:
57:6c:cd:b8:1b:ab:ed:cd:84:07:51:80:34:22:b0:88:67:a9:
1f:c2:9e:aa:9f:5f:eb:5e:83:cf:29:16:2a:50:6f:df:0c:36:
d2:45:74:f7:e8:43:6e:62:0b:64:88:90:e0:c8:ab:c8:11:31:
9c:bd:b5:7d:49:6f:16:dd:b9:68:07:1b:1e:88:90:05:c6:1e:
b0:43:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:20 2025 by rpki-client