Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
File: k47pUc2rw86AXsjfC_NAO9-pxlc.cer (raw, json)
Hash identifier: 3dhZxpzgYJdDnAT5omkoZxboZA0VUntEj7nBrepoyR0=
Subject key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A00E19E93D2F469E00DEF6A68050
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206620
AS: 208206
IP: 45.154.20.0/22
IP: 185.181.12.0/22
IP: 2a0a:bb80::/29
IP: 2a0f:9f00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:0e:19:e9:3d:2f:46:9e:00:de:f6:a6:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:86:8f:2e:4a:ef:31:6a:a3:d1:dc:dd:95:
a2:95:e9:ed:32:90:5e:cd:f8:a5:05:3a:c8:2d:0c:
ac:1b:5c:61:ed:af:35:b0:14:57:cc:4f:93:bb:4a:
f7:34:ca:99:40:70:1b:bd:6a:15:00:8c:8a:32:b7:
98:c9:7d:8e:7a:e8:0c:1c:23:4d:33:c7:df:63:cf:
aa:71:85:09:1c:b5:02:63:14:ce:03:26:6e:97:92:
10:7a:b3:7c:ae:23:49:2e:13:fc:c1:7e:1b:b0:4f:
34:40:95:7c:53:08:c0:63:7d:30:18:5c:d7:9a:83:
72:92:2c:10:b2:77:be:83:a2:5e:d4:e1:ec:92:69:
71:ab:22:7b:4b:25:fe:36:b9:d3:74:d0:28:31:59:
0f:74:b3:26:42:f8:f7:01:49:a5:ab:2a:fe:9a:c2:
67:50:ce:e8:32:57:ab:03:d3:03:b7:f1:79:3f:80:
8e:5a:2a:1a:74:ad:9f:72:88:fc:30:d5:e4:dd:c4:
62:6c:ea:9f:11:d6:bd:7c:53:00:6c:ea:61:f7:be:
f3:f7:98:ac:9e:24:42:59:53:44:38:d1:67:7d:2f:
76:b6:c4:53:8e:8b:43:b6:1b:f3:b9:ec:c0:74:00:
0c:3b:b2:af:98:dd:dc:cc:f4:01:8f:51:36:24:a1:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.20.0/22
185.181.12.0/22
IPv6:
2a0a:bb80::/29
2a0f:9f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206620
208206
Signature Algorithm: sha256WithRSAEncryption
a8:05:41:f0:3f:9a:78:62:fd:ce:fd:90:9c:8d:0d:6f:c8:a6:
6a:15:8f:46:d9:2b:58:09:fa:a9:79:89:26:55:b6:7a:b9:9f:
6a:b7:bf:87:6d:83:67:9e:ec:08:2f:9e:57:c1:fe:fa:1a:0c:
8d:f2:be:f5:47:a6:8d:67:16:00:5f:0e:20:50:09:38:ba:0e:
72:96:22:38:96:71:ce:d5:86:9e:dc:8a:67:25:39:a5:d9:97:
db:59:13:04:52:2a:0e:19:87:42:57:2c:c0:7d:f1:03:46:b2:
e2:3d:01:49:35:b2:34:51:44:60:01:50:bc:f8:02:56:da:d6:
a5:16:7e:96:f9:4c:e2:4e:0b:89:aa:4a:a5:ac:a3:21:36:6a:
27:83:db:db:1a:2a:9a:9c:60:c2:93:38:f9:38:e8:2d:a3:1b:
a0:d5:42:b0:c5:85:c7:63:4e:53:d8:14:b3:6c:37:93:88:57:
8f:da:d6:da:48:78:10:df:fd:29:b2:c7:93:25:7f:72:ce:26:
29:98:68:cf:26:1a:d3:3a:2d:90:bd:63:d2:5b:57:ed:8c:e4:
e4:0d:8d:4d:d0:e2:b3:08:03:a5:c4:61:b7:af:4b:22:d4:93:
6c:5a:aa:01:99:4f:3a:ce:08:26:9f:70:92:1a:77:44:d4:d0:
30:aa:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:58 2025 by rpki-client