Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer (raw, json)
Hash identifier: WRlurSpoLI5Zi6h4wBlt1r+6e/fmSSTzWtMY9qaIPN4=
Subject key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9AE6CA7C784FE3F9140746CA4BC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24579
IP: 193.110.89.0/24
IP: 193.111.188.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:e6:ca:7c:78:4f:e3:f9:14:07:46:ca:4b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:9d:81:e0:ff:a9:61:02:ee:92:fa:6f:15:
0d:c8:a3:44:b7:96:6c:7f:75:67:7b:11:58:2e:4a:
e9:a7:79:fa:33:59:b3:81:e4:57:b2:6f:3f:18:57:
79:84:7e:ba:5a:b8:6f:0e:db:56:24:0a:a2:b0:3f:
7f:17:ab:2f:44:c9:b8:53:11:5e:d7:05:5b:05:ad:
40:a4:ab:72:b0:93:d1:c4:1e:b4:6c:79:e9:1f:6d:
71:14:d0:f9:4a:9f:18:87:a9:23:de:5b:d5:c1:00:
ab:46:27:cc:c5:2a:69:94:9e:9e:d1:81:3e:62:f9:
09:82:c6:83:43:59:61:4c:8a:7a:44:bb:80:cf:61:
07:97:7a:12:1b:16:38:c1:20:b1:39:31:cb:ff:ea:
b5:cf:ca:f3:08:83:59:5d:32:21:b2:9d:0a:9c:64:
db:cc:ed:34:11:e2:7a:00:99:3c:00:d6:5c:ed:0e:
f0:ee:d2:1d:a9:a4:72:0d:19:b0:49:06:96:8c:8f:
19:6e:06:02:0a:ac:ff:7e:8f:45:9d:3e:50:8d:66:
26:bd:75:6b:5d:8d:b3:f3:a4:9b:c9:ea:eb:59:aa:
0e:04:67:09:7c:a2:e1:c5:39:43:32:5a:d9:f7:aa:
b5:36:c3:f2:02:e4:f9:43:71:3c:f6:2f:bb:f2:9e:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.89.0/24
193.111.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24579
Signature Algorithm: sha256WithRSAEncryption
51:f5:e5:56:cb:d2:e6:44:ed:76:41:5e:72:a6:3a:29:ec:76:
c9:bc:27:b9:b1:35:46:91:93:28:9e:b3:41:3c:5f:a1:81:50:
07:4f:a3:2c:26:00:74:7e:77:ec:11:47:13:a5:bd:92:22:5d:
65:4a:f0:1b:bb:e3:0d:32:dc:97:9f:4a:99:35:e5:32:da:e2:
ea:90:53:1b:f7:0f:36:9a:7e:4f:77:5d:17:19:7a:38:f8:83:
94:76:42:67:bf:6a:64:e3:92:9d:1e:9b:98:bf:55:84:fa:e6:
32:4b:f8:f6:ee:c6:81:f3:99:d2:e4:74:5d:df:9d:25:17:90:
23:20:ac:e8:a4:a3:b2:4c:62:40:72:0b:f5:0e:d4:9f:f5:ff:
61:ce:53:d5:1b:a0:45:bb:0e:58:cd:97:86:26:12:b3:bf:02:
48:ad:76:05:de:2c:c0:19:79:f1:95:4c:f3:db:df:cd:ed:6b:
3d:38:03:65:78:3a:db:ee:03:9e:45:e6:10:26:6c:99:36:99:
8d:0e:44:c5:73:21:b0:16:54:1d:7a:c3:1d:27:4a:99:c1:6e:
82:fb:c5:cc:02:99:ca:e7:b1:fb:76:b6:6c:d2:ed:d7:2d:4b:
b4:8b:2b:73:dc:f3:e6:77:be:82:e7:b6:4f:f4:d2:2c:a5:d2:
7c:51:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:21 2025 by rpki-client