Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.cer (raw, json)
Hash identifier: YPEVoNb53VsDoub5A6mFvsrUco9ju+cl2YUT+LE7QEY=
Subject key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444CB29AB1F5EAF2B489C9C1F22DC64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59588
IP: 45.153.116.0/22
IP: 151.236.160.0/19
IP: 198.160.164.0 -- 198.160.169.255
IP: 198.176.116.0/23
IP: 2a10:2200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cb:29:ab:1f:5e:af:2b:48:9c:9c:1f:22:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:72:4d:d8:57:98:66:e8:4f:4e:62:0a:10:
44:a2:30:e2:eb:48:21:ea:92:d5:ae:8a:61:e2:17:
c0:d9:80:4f:0b:de:92:ec:64:31:04:09:52:2a:ca:
b3:28:44:7a:03:2f:18:c7:b3:39:3f:fa:a6:66:ab:
3b:1e:e0:06:cc:49:5f:3c:52:b0:7d:a7:08:6c:c9:
b2:6e:78:d9:bf:dc:39:de:6f:9c:96:5a:18:56:63:
42:3a:b8:04:a0:31:e4:4c:dc:96:b2:e2:04:3e:6e:
f2:c1:19:dd:13:5f:b2:3e:0f:dc:fe:47:6d:da:a0:
93:c5:e4:60:34:5a:0b:c9:04:cc:ba:fc:1f:72:1b:
65:90:4a:85:b7:e3:5d:63:68:b6:d1:2b:61:28:09:
78:ba:e7:f6:46:6e:c9:6a:53:57:a9:e2:7e:7b:9c:
e0:d2:0b:87:5f:1d:a8:66:56:97:18:8a:01:d8:20:
5d:80:92:a6:c7:f6:58:60:b2:a2:d7:d4:18:78:5f:
be:46:da:3e:5a:04:4f:0d:1a:66:01:fb:cf:74:e2:
01:90:19:36:c7:33:df:93:36:ee:f8:ad:ed:49:1d:
a9:09:1a:52:f8:a0:b9:a1:43:73:96:68:ee:51:da:
de:2f:71:8e:52:9b:86:f2:0e:fc:4a:2c:b5:3b:bc:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0/19
198.160.164.0-198.160.169.255
198.176.116.0/23
IPv6:
2a10:2200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59588
Signature Algorithm: sha256WithRSAEncryption
3e:72:e1:68:25:4c:06:0d:8f:e3:9f:3a:5f:08:76:d1:76:ea:
4d:fd:9b:b2:81:cc:8c:4e:d8:2f:16:c2:f1:85:22:19:22:49:
ab:00:25:8a:a0:8a:b6:40:b5:ab:be:87:ad:00:21:eb:77:d6:
ba:48:de:b1:eb:b1:4e:12:e1:39:57:8d:c6:09:34:51:c4:31:
8f:c5:e9:45:06:3c:c4:b8:63:d7:0b:75:c0:7e:d4:0b:13:57:
aa:78:dc:9e:f9:2f:89:a5:fd:95:94:e9:f8:da:53:c0:4a:cb:
76:50:e5:0e:51:5f:36:38:12:36:22:3d:44:d6:6d:9e:6d:d5:
6d:10:b3:c9:4b:03:aa:6c:6c:46:e4:a8:86:a1:ca:c9:ad:2c:
94:5a:7a:20:c4:f1:e5:8e:c4:c4:c5:4c:2e:30:61:f9:1e:f4:
e8:05:44:51:86:90:97:28:80:3a:91:a4:19:b2:5c:6b:1c:76:
8a:4a:b4:06:4c:be:19:1e:35:12:38:51:18:3c:a4:1f:75:40:
2a:a8:a6:ae:96:7e:2c:45:99:f1:13:24:b0:fc:a9:d8:37:1c:
33:66:84:0f:9e:a8:c6:10:57:47:61:68:78:ec:b7:af:84:03:
d6:2c:f3:fe:af:b5:f2:fb:56:8d:6f:eb:e7:fd:45:ca:c9:24:
d3:ae:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:21 2025 by rpki-client