Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
File: itN6mTOwUsLxLvG48U108F_dthE.cer (raw, json)
Hash identifier: 1NqXXf66ZvvWvmBqCv/AWz0BSJH7EPMp9wqBFHuL6HM=
Subject key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A3215DB8E1F71EF649E384F130D48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34939
IP: 45.90.28.0/22
IP: 146.19.14.0/24
IP: 185.253.5.0/24
IP: 193.110.81.0/24
IP: 2a07:a8c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:15:db:8e:1f:71:ef:64:9e:38:4f:13:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:2d:a7:97:ef:88:db:dc:c6:92:d9:23:fb:
cc:d4:cd:7a:94:f4:53:69:d0:41:cd:30:bf:c0:ab:
6d:c0:c1:86:d5:57:19:2b:80:8d:15:b7:ca:8d:46:
5a:c4:5f:f2:22:4c:6a:39:cc:fe:ed:2f:e4:3f:ce:
35:c2:cb:10:48:40:b6:71:7c:64:be:dc:fe:e1:42:
66:39:b6:90:2d:30:f8:1a:9d:2c:4c:ea:19:e0:58:
12:f3:e4:cd:55:79:db:11:c5:fa:92:53:37:27:4e:
78:10:a1:d7:bd:c0:08:5c:10:4f:77:68:96:08:1e:
78:7f:86:12:67:92:1d:b6:89:16:f1:60:55:58:ab:
1c:4d:86:4d:1e:92:33:d5:c3:18:0e:f7:ec:f1:f5:
cf:91:85:d5:c8:8b:6f:b4:83:25:64:ea:97:ac:a8:
2a:b4:e2:d4:07:d6:ef:b1:f5:44:ec:54:a1:0c:6a:
c1:52:62:ac:ec:f7:7f:7a:46:03:5b:8f:b5:b0:4d:
a4:9a:b7:5a:8f:ff:c9:fd:54:64:c2:92:89:e4:69:
6e:8b:5c:a3:28:cb:9e:b0:89:64:0d:57:56:17:8f:
3e:ab:3c:36:fd:68:77:a9:00:0d:5b:83:87:b2:0d:
64:64:44:90:bc:16:ea:aa:aa:a6:74:49:c2:14:a0:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.28.0/22
146.19.14.0/24
185.253.5.0/24
193.110.81.0/24
IPv6:
2a07:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34939
Signature Algorithm: sha256WithRSAEncryption
ae:62:a1:8a:42:96:e2:d8:03:94:7e:53:0d:29:be:75:a0:51:
91:57:04:90:b5:23:67:e0:68:89:c5:10:ad:ff:5c:6d:53:35:
d0:c9:99:ae:2e:64:19:76:05:c5:c8:46:9e:bb:d0:6a:62:38:
3d:be:f3:47:f0:19:a2:36:fd:71:0b:6d:5c:fd:83:38:7c:e6:
53:0e:74:09:11:c0:28:26:ee:9e:e4:97:9a:8b:6b:2b:76:71:
00:06:2e:d2:69:f8:4b:59:79:c1:43:97:6b:a6:87:07:65:b8:
d0:df:52:66:0a:d3:91:3e:ff:0c:7f:bc:16:8e:bd:eb:4c:14:
35:6a:54:56:02:b6:63:7c:8f:11:a6:20:ba:7b:28:96:e0:3d:
a6:c5:59:a4:b3:a6:44:8f:fb:c8:bd:84:fa:71:82:af:a2:69:
a9:e8:f9:b6:c7:a9:07:9f:e2:cc:47:e5:c3:0c:37:f3:e0:99:
f5:9d:00:6f:28:c8:e8:1b:6d:0d:60:a0:56:e4:ee:8c:36:07:
75:6d:6b:76:15:2b:bb:77:d5:43:24:be:d3:17:cf:75:b9:8f:
33:2f:4f:c6:fd:a2:c8:c9:ce:e4:81:a3:28:e9:3a:65:bb:89:
ba:cc:13:cc:57:55:ab:3b:15:7a:23:22:4a:42:17:69:6d:85:
b0:6d:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:01 2025 by rpki-client