Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer (raw, json)
Hash identifier: 2SuPNVEfqKHGi37Bl4b3pug7fZ1akkK9RBi6Hr2MSGA=
Subject key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427485A2C0E40E3806931E9A65743B024
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1895
IP: 131.188.0.0/16
IP: 192.44.81.0 -- 192.44.90.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:2c:0e:40:e3:80:69:31:e9:a6:57:43:b0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:93:52:47:73:49:3c:6c:d6:dd:42:fe:53:
95:ab:c2:e8:86:a0:c7:ee:a4:1e:cb:35:d6:4c:86:
d7:c3:33:a9:e3:8a:f4:0a:b1:84:b4:10:b5:08:77:
fd:b1:1d:1c:65:fc:6e:42:8c:e6:81:18:8e:5f:3c:
1e:83:29:6e:c5:69:78:8a:bc:74:a0:d6:0d:7e:ad:
bd:37:57:7c:b5:9a:4d:a4:74:65:e5:9e:ca:25:5e:
15:8b:73:24:4c:1b:33:bb:8f:c3:4a:6d:dc:38:18:
40:30:0b:79:ec:70:f3:2b:30:03:ae:19:5f:d3:88:
f0:a7:3f:d8:80:61:bb:db:c5:04:12:00:ec:79:6e:
ba:74:e3:bd:d7:a3:ae:65:f0:db:69:6a:6e:fb:24:
3e:62:5f:62:a6:e3:da:ed:f7:f0:34:39:69:6d:d7:
6a:24:b7:ec:f9:33:c4:22:e5:fe:85:5d:02:f9:c2:
ff:77:24:e8:9b:43:01:5f:40:1c:2d:b6:83:17:d4:
81:8d:c9:92:9b:c9:12:fb:63:47:74:dd:34:55:e6:
24:60:27:ff:ef:1d:4e:a1:84:91:68:32:86:ce:70:
9d:89:0f:62:ab:31:33:64:a9:f0:66:dd:aa:9e:05:
ba:09:f7:66:55:d3:80:4a:9d:98:c0:d4:b7:92:83:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1895
Signature Algorithm: sha256WithRSAEncryption
9f:76:1c:33:dd:cb:b2:f9:fe:2c:a4:2a:ae:5b:c4:4f:79:38:
a6:37:d3:11:f0:18:af:36:dc:3b:e9:09:95:ba:b9:2f:fd:3b:
25:57:8f:ab:cb:42:4e:df:0f:47:b6:de:0b:9c:cc:15:2e:eb:
a4:30:38:ac:76:6d:12:22:56:b5:fb:8b:b6:b0:62:94:a7:13:
94:28:9e:8c:24:cc:af:9e:32:47:ad:6c:d2:61:4e:62:ed:82:
eb:21:d4:38:cf:c4:4a:41:2c:dc:07:0c:8b:62:70:76:a3:38:
d5:d1:f3:86:b9:c8:4b:58:7f:72:2d:76:e2:97:14:8a:8f:ca:
af:da:54:e3:61:61:28:f3:17:0e:7d:bd:c9:33:87:ff:dd:de:
4c:b4:90:63:06:de:6a:a0:95:c8:a7:41:37:41:4c:8d:0c:f3:
fb:d0:22:fa:c2:93:f4:71:3f:35:4a:e0:c1:51:fc:c2:fb:8c:
6d:4d:fe:c5:9f:bc:2d:61:d8:3d:02:0d:40:9d:f4:33:1d:7d:
98:15:75:99:72:0c:be:60:ca:16:ff:11:b7:7a:cc:64:e5:0e:
6f:54:1a:9a:84:46:3c:82:c5:a1:8a:32:4f:bc:c4:f1:90:20:
76:48:cf:e9:6b:c3:a7:ee:34:e1:40:9b:a5:d2:1f:29:52:ce:
9e:0f:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:53 2025 by rpki-client