Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.cer (raw, json)
Hash identifier: 8rE9pN4nsIwA5YX7EVUBrJYbK1/hoWMYDDLlf+WMILs=
Subject key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424451B09D255CE43A1DBCF481BE19045
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200370
IP: 45.8.160.0/22
IP: 193.56.59.0/24
IP: 193.56.61.0/24
IP: 193.56.107.0/24
IP: 193.56.118.0/24
IP: 194.60.208.0/22
IP: 2a05:cac0::/29
IP: 2a0f:51c0::/29
IP: 2a12:93c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1b:09:d2:55:ce:43:a1:db:cf:48:1b:e1:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:b8:13:d8:b8:0b:a7:38:a0:c9:fb:34:f7:
50:4b:da:2c:c3:fd:c1:53:59:9b:7d:5c:b7:c1:ef:
7f:ee:ba:5b:56:50:0c:a2:cb:16:8d:44:8a:42:da:
fe:f2:c5:58:f7:e0:d6:d4:c1:c3:53:7e:6a:3d:8a:
6e:71:6a:65:32:45:88:e6:e4:e2:55:ac:a5:b3:c9:
2d:4c:da:2a:47:29:ea:f8:37:34:08:ca:1f:8a:79:
a3:d3:a7:da:b7:5a:72:72:0d:31:33:88:0e:02:14:
38:6c:85:be:16:bd:29:f4:2c:88:59:9b:72:b5:be:
b7:96:8b:67:cc:a9:ac:68:2e:55:52:0b:c6:8d:52:
7b:4f:3c:2f:de:26:97:f9:c7:ee:83:ea:43:c5:80:
40:a9:a3:3f:e7:33:89:07:10:06:07:c8:6c:f9:96:
e1:7f:5a:01:eb:5a:e1:5d:23:59:81:8b:fa:d1:35:
04:53:0d:3f:e7:71:9c:22:55:b5:3a:01:86:f2:9f:
d1:aa:ef:be:4a:77:11:b6:8d:bb:cc:03:26:d3:47:
61:91:bf:b7:ed:37:dc:1d:b1:5a:61:b8:0c:8e:68:
c1:75:83:9d:f7:cf:3b:63:d6:da:3b:4a:45:90:50:
e5:6e:63:e3:26:71:12:d7:42:e1:a7:c7:94:0f:20:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.160.0/22
193.56.59.0/24
193.56.61.0/24
193.56.107.0/24
193.56.118.0/24
194.60.208.0/22
IPv6:
2a05:cac0::/29
2a0f:51c0::/29
2a12:93c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200370
Signature Algorithm: sha256WithRSAEncryption
0c:a4:c6:65:b1:eb:88:f3:a3:39:a6:81:61:44:e5:5c:59:5a:
21:15:56:5c:54:40:68:47:f0:c7:30:e2:3a:de:63:3b:2d:79:
72:3b:7e:c8:9b:65:03:c6:c4:fc:30:6d:09:5b:95:56:43:ec:
92:13:45:5a:f6:6a:e0:fe:59:b7:79:69:cd:3f:df:e9:0b:13:
48:23:84:75:d9:e1:9a:ee:09:8f:83:45:04:b0:16:01:9a:cc:
56:48:30:25:68:75:79:87:c7:7a:87:0f:52:6c:33:92:af:a2:
7e:64:c9:16:89:f2:e0:fd:e1:e7:a1:ec:dd:7c:f8:13:a1:58:
78:f1:2e:49:e0:2e:90:6a:ee:4a:c3:9a:d9:d2:43:4d:94:59:
69:88:bc:a5:67:62:b0:01:c3:bc:d4:0c:34:28:2b:77:24:cc:
0d:be:7d:ae:99:2f:7c:7a:8b:82:dd:05:a8:bc:83:f0:68:9b:
ba:b5:ca:31:2c:4e:8e:64:1e:0b:63:26:50:46:84:fa:4c:d1:
5b:8c:f4:54:54:4c:d9:ba:df:f0:f2:32:ce:1c:42:f5:18:62:
6e:e9:e5:77:68:5b:7c:57:14:53:07:21:99:54:4e:a5:fd:97:
27:9e:eb:fe:19:52:2f:83:7e:6e:34:32:9b:e2:87:6d:9e:23:
6d:cd:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:39 2025 by rpki-client