Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
File: kjGbzZsJqYSwcOLvWI_8-otzyKI.cer (raw, json)
Hash identifier: WFYTW8y1tOWNnMA4utF2rP5K3puOnYNOy7aP/fKroog=
Subject key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428255C7CE1E5A44125E4BA7F02451111
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.103.32.0/22
IP: 2a00:edc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5c:7c:e1:e5:a4:41:25:e4:ba:7f:02:45:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:c3:57:15:87:05:85:f8:16:ba:10:ac:16:
9b:d2:cf:cc:06:76:62:ce:0e:c1:84:79:ff:db:55:
12:f4:cf:ba:25:11:cb:e7:c3:cd:4e:20:05:99:b4:
0e:4e:e0:31:28:52:1c:d5:ad:49:5a:a9:be:e2:b4:
a1:a9:fb:60:e9:4b:30:00:b3:4d:ef:dc:9e:f5:32:
6e:cf:4b:3d:18:6c:2f:09:60:33:89:9e:80:53:17:
5e:62:a5:ff:d7:3a:ec:30:9c:b3:f4:f7:be:ac:f0:
3f:2e:cb:4c:4e:c4:64:e3:5b:aa:15:e9:36:e5:f3:
e4:42:f3:49:31:6c:1f:91:54:ae:1b:d9:0e:cb:a2:
23:2c:00:64:5b:e4:fa:7b:dc:1d:38:aa:86:f5:60:
f2:38:1f:f6:53:fc:80:0f:10:81:dc:b1:7b:ee:eb:
6f:df:5b:e8:e7:ff:f4:0e:f9:d2:06:64:66:c4:4d:
9e:24:19:ea:9c:06:74:b2:8d:af:42:b6:f2:64:17:
cc:1f:c3:bc:aa:84:7a:1a:da:ce:eb:02:f6:0b:ac:
da:bb:67:3b:4d:6c:15:f7:76:58:ca:ec:25:0d:d4:
bf:6d:39:6c:1c:64:5e:98:fb:cd:bb:f2:35:58:f7:
85:ec:5b:68:55:60:e3:8c:60:b2:f4:f3:fe:9b:07:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:57:63:a1:88:d2:0b:b2:eb:a1:0f:28:61:97:72:40:0b:90:
e0:8d:59:1b:5a:0f:bb:6a:cd:73:29:70:6a:f9:72:b3:5d:39:
f8:23:38:e6:e1:88:66:71:1a:ef:6e:be:e7:d3:60:b1:ff:31:
83:e3:06:e9:55:d6:d3:3a:2e:a4:f3:fc:4c:15:c2:c6:11:a9:
8a:07:84:79:5e:c6:55:27:50:e7:ee:61:b5:88:65:9f:f9:e0:
fa:18:dd:b0:b8:57:df:2c:ce:f3:8b:42:27:ef:3a:1a:12:cd:
c3:f7:32:ac:ef:d9:41:c9:cf:30:a1:23:e0:98:9a:91:91:60:
0a:91:c3:66:28:70:fe:a5:fe:d5:b2:ef:2f:3e:35:af:42:b4:
25:ae:3e:a9:3e:48:36:6a:c7:52:7c:63:a2:b1:d3:8d:16:52:
6f:eb:92:c9:76:21:d4:7b:4c:7d:54:72:7f:b5:19:93:40:ba:
b4:8f:58:e6:59:15:b5:03:ea:2c:b2:f7:95:6b:70:c3:bc:d3:
7f:27:23:14:9c:43:44:a0:97:e5:a3:b7:5c:b4:09:89:29:f7:
d3:fc:d9:14:e3:92:55:df:ca:71:38:7a:1e:72:50:a1:28:e0:
e1:50:5f:d2:59:1f:66:7e:fa:71:fb:25:41:35:ac:7f:02:ec:
b7:cb:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:18 2025 by rpki-client