Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.cer (raw, json)
Hash identifier: TmF47y/juWoPpXy8NSNKgzuPov3Kzs03sZV+Kr8dG8c=
Subject key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2A21063788C4F415FDBAD0DC053B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42156
AS: 42282
AS: 50470
IP: 23.249.162.0/24
IP: 45.83.172.0/22
IP: 45.143.60.0/22
IP: 69.48.159.0/24
IP: 185.161.188.0/24
IP: 185.251.180.0/24
IP: 2a0e:8480::/29
IP: 2a0e:e2c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a2:10:63:78:8c:4f:41:5f:db:ad:0d:c0:53:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:40:7b:7a:4f:b5:16:10:bc:ca:ce:c0:00:
ac:c7:67:9a:87:6c:3d:0d:87:34:9b:3e:60:a9:e8:
7a:9e:41:89:ab:14:2f:94:c9:44:4e:bd:c3:79:6b:
47:79:8c:18:1e:9e:b7:63:c6:d8:58:ef:26:3c:2a:
1f:6e:b8:ab:a8:b6:fe:fe:1e:fe:59:87:de:d9:86:
db:35:a4:ca:09:b5:2e:30:d5:21:7d:7a:ee:a3:90:
76:40:71:c3:8d:41:66:9c:6a:37:79:6e:e9:9b:b1:
a3:de:23:a5:d7:2e:44:3b:63:fc:84:8b:fe:30:b2:
e5:6c:3a:28:f6:82:49:58:f0:29:7b:ce:41:5a:ba:
d6:fd:d7:d8:71:2e:5b:ee:fe:16:59:57:01:78:41:
5e:40:72:80:a3:6d:91:c3:b7:56:26:ac:c8:16:81:
6f:9b:c0:ba:c7:a0:75:b3:39:c4:a7:d9:a8:4d:78:
8b:73:dd:ba:1c:30:ef:c9:58:c3:72:e3:1e:26:d1:
53:70:96:22:8d:e5:a3:f7:d9:a4:5b:c3:35:cb:53:
5c:0b:5a:3d:6b:a5:29:5f:cc:af:ca:da:2b:14:47:
b7:30:b6:db:71:83:9d:3c:e1:eb:fe:f3:b2:d3:90:
71:99:46:45:1b:db:b8:c3:c6:1f:ad:af:5b:50:da:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.162.0/24
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
185.251.180.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42156
42282
50470
Signature Algorithm: sha256WithRSAEncryption
a2:1a:ea:fb:6f:95:73:9f:66:a8:70:89:c4:f2:d5:ae:e9:80:
64:7e:b1:60:8b:7b:68:d6:90:ff:a6:fa:73:1f:fc:93:fe:cf:
81:1d:20:93:fa:43:3d:2e:a3:90:d2:80:f8:09:e7:4a:2e:ce:
2a:2e:05:1d:ac:14:fe:3b:ff:be:3d:6d:e3:85:eb:46:71:9a:
3b:25:48:2b:e2:bc:f9:1f:f2:67:de:70:b0:f7:a9:11:8d:d9:
01:52:f5:52:cd:26:10:04:da:97:4c:6a:aa:91:d7:a5:da:ad:
d8:5a:a8:1c:d1:b4:97:d7:99:68:cb:91:f8:10:79:38:d3:a9:
f0:d5:52:8c:28:db:22:bd:12:38:40:12:60:f7:07:6b:87:22:
31:71:0f:73:a5:f7:c1:59:38:b8:1d:c8:2f:b7:29:b9:23:b3:
20:b4:c3:38:0e:b4:55:3a:7d:a2:f0:b2:9d:92:cf:ac:d3:15:
3a:af:d6:e3:b1:8f:a2:43:f7:d3:7c:65:61:76:86:9b:1d:05:
eb:2c:38:30:b0:5b:ca:60:d1:3d:be:20:ad:3e:19:80:ad:49:
f0:4d:36:13:08:7c:c6:fa:c8:d8:a0:76:09:dc:3a:4c:cf:2a:
1c:9a:5e:b3:3b:19:16:e6:77:b9:19:1f:f4:d0:6d:a8:b4:a7:
4c:f7:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:42 2025 by rpki-client