Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
File: he1PzEWWTU6nL8RJLE15VxMyEMM.cer (raw, json)
Hash identifier: XbYpjcMByENh9S2tzum+MkNKy895lq7LZ5wJGYIzM+Q=
Subject key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9AD320976E46D7E56CD532BC6DEB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208847
IP: 45.82.232.0/22
IP: 2a0e:7680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ad:32:09:76:e4:6d:7e:56:cd:53:2b:c6:de:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:e2:d3:b8:7f:e2:7b:4f:9c:50:bb:81:a0:
55:a2:38:14:d5:57:af:ae:fa:b9:9e:a2:49:4e:89:
5f:9d:92:e0:a2:cc:60:3f:f7:20:0b:43:3b:5b:14:
7f:39:34:4d:3f:0b:9d:10:85:d0:d0:ad:96:0a:e6:
09:ae:c7:e3:d8:b0:f5:71:95:8e:66:49:f3:31:9d:
5c:ad:6e:c4:b5:78:be:2b:43:91:bb:5c:a8:4f:2d:
b4:d0:0b:80:27:b5:9e:16:bf:60:c4:1e:fa:94:4f:
17:78:57:7f:27:76:5b:1c:64:0a:d4:fe:ce:1f:d6:
d1:b2:84:d0:35:bd:27:30:9a:93:fd:0b:6b:22:86:
b0:fb:52:50:2d:07:6d:89:6a:9e:59:65:90:8f:16:
0c:02:d9:75:e8:69:95:0a:db:38:69:9f:95:ee:69:
65:de:a3:2c:67:86:32:60:e6:32:fd:f9:54:4f:e1:
5a:18:f0:99:72:f5:b5:2d:5c:b7:91:f5:c9:33:7f:
cf:c7:ce:97:f7:e7:9a:09:30:c9:82:54:58:66:87:
d8:17:dc:83:a2:9b:93:6a:af:2f:f7:d0:0d:02:70:
cc:fb:45:05:27:9b:96:0a:5a:ab:f1:5b:b1:9e:43:
1a:40:cb:ff:cb:05:b0:71:57:2b:40:18:9b:a1:39:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
IPv6:
2a0e:7680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208847
Signature Algorithm: sha256WithRSAEncryption
12:c3:15:3e:fc:4a:1d:09:a9:6c:16:c5:63:0a:4e:cc:2e:20:
df:76:41:bf:2d:f2:1b:a0:4e:67:28:31:67:d6:7c:7c:9e:73:
73:1e:ca:b4:7a:bb:e7:d3:82:60:88:c7:eb:41:65:cb:3e:5f:
2b:7d:c6:4f:1d:cb:70:e5:c9:ab:9c:f5:2d:1d:87:6b:61:18:
58:cb:b0:64:4c:42:78:5e:7b:fd:94:f2:80:81:b5:10:fc:58:
4d:18:ee:cc:e0:43:69:b8:8e:88:36:7a:56:95:15:9d:f6:2d:
78:5b:2f:67:52:72:ef:88:20:7e:45:80:ff:ea:c9:46:86:ff:
de:48:43:e9:ad:09:aa:9f:a3:32:30:cb:d9:ed:d7:9b:0b:0d:
a7:c3:05:74:47:77:26:5c:31:37:91:4b:fb:90:98:12:b7:4a:
9a:53:d3:9a:c4:a3:04:1b:23:09:fe:09:30:59:c6:9c:48:a5:
83:a9:49:c4:6b:a9:42:cd:a6:d0:83:86:27:82:8a:55:ae:21:
5f:9b:7e:e1:fc:36:74:c5:22:a6:24:e4:75:da:05:c2:dc:51:
2d:da:df:1b:5f:00:cb:5a:a1:dc:22:cc:b7:05:4b:41:64:03:
11:80:f2:9d:78:a2:a0:17:39:73:49:a4:b2:8a:05:39:7d:3f:
3b:93:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:21 2025 by rpki-client