Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
File: i2E3lJJwULIlJatwCRg1QI7uTHk.cer (raw, json)
Hash identifier: mlklgb9/iNiY3SmfmcRfX6iKht/0QXaVcG3/jeIkB9Y=
Subject key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D612D6B2873D13FDCF0477E46219D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202574
IP: 193.57.16.0/22
IP: 2a0c:9140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:12:d6:b2:87:3d:13:fd:cf:04:77:e4:62:19:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b613794927050b22525ab70091835408eee4c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ab:43:d8:a0:9f:22:de:88:29:d4:cc:5c:03:
04:d7:eb:fb:ff:49:43:cb:04:39:cb:81:83:80:67:
cf:85:f7:9a:21:74:e9:71:e2:b0:b7:77:d0:4c:53:
0a:b6:30:cb:72:24:2a:36:98:57:d4:7e:2c:14:a0:
05:ff:fd:b0:97:06:4b:21:22:85:1d:ac:e8:e0:60:
dd:e2:38:d8:44:ef:13:04:53:cb:87:4f:79:3e:3c:
49:3a:f5:91:22:4d:2d:d4:9a:cd:db:00:1e:3e:98:
f8:f8:71:17:5f:b1:5f:a4:bc:b7:37:a8:f5:4b:87:
00:d6:c6:f1:8b:cd:51:5a:87:18:86:44:5e:76:08:
0d:51:9c:f2:33:9e:00:0c:45:c0:03:83:48:06:76:
06:9d:90:11:53:d1:7b:bf:48:33:b7:dd:8b:39:cf:
7a:75:bb:df:3a:a8:16:1f:58:04:09:93:2f:d0:ab:
a7:f8:0e:5e:94:f9:bd:6f:6f:6b:54:4d:93:71:9c:
51:26:26:8f:18:3e:e4:c0:f1:8a:8b:93:04:25:c3:
94:e4:4b:69:6b:3f:3a:29:c4:0f:c5:f4:62:fd:8f:
6c:2a:74:e9:8b:51:b6:ad:9b:73:9b:3e:5a:98:8f:
2f:df:cd:27:b5:e9:f2:0d:e5:66:6a:f8:b5:81:f7:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.16.0/22
IPv6:
2a0c:9140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202574
Signature Algorithm: sha256WithRSAEncryption
9e:a3:3a:68:8e:8d:9b:30:3a:97:08:69:9b:76:7d:82:9f:70:
7c:91:2e:25:1a:62:06:eb:ba:a3:b9:56:03:7a:2e:08:e6:74:
04:ee:c9:00:9f:51:c2:dc:8b:4a:cb:78:3d:ee:90:e8:58:38:
78:1d:da:81:5b:e0:7f:be:b1:77:82:ff:a4:86:5c:16:b2:9e:
6c:e6:00:de:c1:42:ba:c3:6a:59:1b:df:49:8b:43:a3:30:93:
7f:82:fe:9a:4c:fe:be:6f:76:59:09:f5:89:9b:7b:20:c4:80:
36:9c:2f:cb:da:13:f2:fc:4d:9c:a5:26:f8:25:24:48:d9:24:
72:07:18:87:03:d8:81:e9:80:2e:c9:e6:16:68:2b:27:c3:29:
06:a4:1a:b5:69:9b:18:84:f5:dc:ca:4b:4b:86:87:cf:b0:10:
8b:92:27:23:90:ab:3e:12:42:cf:ac:e0:cb:e1:84:71:e4:4a:
3e:f6:9e:8f:78:a1:f9:39:c5:e8:df:b4:0c:0f:f0:af:b6:44:
e2:80:f8:a7:5f:99:51:65:a5:f2:95:1a:36:15:7f:5b:e9:54:
67:29:6c:fe:74:b8:f2:10:1b:08:c3:9c:6d:bb:3c:cc:f6:b0:
ca:de:6a:d4:0b:14:c2:8f:88:88:3c:4a:1a:a3:c7:95:97:33:
9a:9a:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:52 2025 by rpki-client