Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer (raw, json)
Hash identifier: wRRpo15wt0tzLnk9gp9RINof02YvBrIiheurpmkdWgc=
Subject key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747B7DB6FD3D3573EBAA20E76B1986D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202288
IP: 91.244.245.0/24
IP: 2001:678:728::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b7:db:6f:d3:d3:57:3e:ba:a2:0e:76:b1:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8afbc64d593fc073c693143566310295de0a8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:b7:23:f1:37:26:cc:12:73:25:31:2c:5a:
75:d2:38:22:3f:9f:b8:c6:f8:cd:5a:e7:cd:ed:46:
3d:b1:43:bd:20:f1:4d:f2:5d:53:a3:91:95:f4:80:
f0:1c:86:3c:bd:a0:c6:fb:77:79:6c:a6:4d:da:38:
22:93:78:96:9e:3c:7e:36:de:10:5b:1c:9d:a6:81:
7b:db:07:91:dd:a7:2a:66:e0:45:18:a6:dc:9c:64:
ed:6c:2b:23:53:b8:ce:b3:ef:ac:a8:e3:72:9a:18:
01:2a:20:ac:72:46:fc:08:ab:d8:6f:27:ab:61:a6:
06:15:e9:0a:15:ce:49:9f:23:73:22:a3:02:8c:f4:
e7:70:5d:1f:b7:70:cc:dc:c6:e0:1d:50:1d:99:4b:
d2:d6:fe:27:d4:f2:b1:99:e8:8a:3a:55:d7:f7:4e:
78:6f:18:bb:db:89:ca:3e:fb:7b:0b:ae:f8:74:6a:
67:7f:4d:31:4a:38:86:16:9c:13:55:9e:51:b4:32:
1e:83:a3:c9:bf:1b:08:93:c7:0c:38:ec:d9:2a:f0:
04:ec:90:6b:6e:07:3d:ae:0c:f2:36:28:83:c7:18:
f9:9d:60:b1:f4:fe:a3:30:83:77:25:2f:93:f4:b7:
b5:a6:57:0d:51:a9:d8:68:4f:c1:b1:0a:77:7d:c3:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.245.0/24
IPv6:
2001:678:728::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202288
Signature Algorithm: sha256WithRSAEncryption
9a:58:e8:9b:ec:0a:56:86:8a:ad:b4:a2:96:0e:fd:3c:b8:8a:
05:13:98:5a:01:58:31:09:68:2f:4e:a9:6f:6f:4f:09:da:05:
90:44:94:de:49:a3:08:34:e8:97:38:bb:1a:96:f2:98:61:9e:
b6:9a:ed:96:fb:ca:1e:27:02:f0:de:52:b3:0b:fd:45:32:97:
78:97:3c:87:be:8b:20:b5:d2:67:b0:42:ae:53:c0:02:6d:5f:
98:39:b4:a1:f5:59:43:d8:8b:67:e6:5c:ab:1d:e0:39:67:bd:
58:28:82:9b:de:2f:f9:0c:cb:b0:41:91:78:f7:ff:95:e3:e0:
d6:9b:1f:1a:6f:83:66:fe:e0:cc:b0:59:87:40:f5:64:5c:b8:
43:ca:ec:e6:ed:22:1b:7b:ac:74:f5:ed:5f:e6:4c:6d:5e:8a:
f9:7b:6a:c6:d1:21:93:62:4c:f1:3b:eb:e7:a9:8b:f6:bd:4a:
d9:c6:ce:0c:b3:5d:41:09:9a:6f:60:7a:a9:0a:b0:e3:84:18:
50:1a:10:16:80:9b:99:3c:cf:47:bf:ce:10:d2:63:e1:0e:84:
54:44:d3:82:b0:d0:d7:82:b4:ba:94:64:bd:09:29:9d:5a:43:
46:b4:30:e1:93:97:4a:42:71:e5:7c:ec:9b:22:ff:7a:b5:c7:
c7:dc:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:37 2025 by rpki-client