Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer (raw, json)
Hash identifier: WPeJKGbruvl1w8z+ddrKQJCgGHf3lH1CREfz1geOJA4=
Subject key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BFBE2B60906E380E5CFFA8BBE5199
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42947
IP: 5.181.236.0/22
IP: 45.14.120.0/22
IP: 45.95.76.0/22
IP: 89.34.28.0/22
IP: 91.213.74.0/23
IP: 91.213.120.0/23
IP: 94.154.3.0/24
IP: 95.214.240.0/22
IP: 176.101.72.0/21
IP: 185.50.116.0/22
IP: 185.88.232.0/22
IP: 185.110.224.0/22
IP: 185.152.108.0/22
IP: 185.213.108.0/22
IP: 193.31.96.0/22
IP: 193.32.72.0/21
IP: 193.150.16.0/22
IP: 193.187.184.0/22
IP: 194.36.200.0/22
IP: 2001:67c:283c::/48
IP: 2a02:2b60::/32
IP: 2a09:f080::/29
IP: 2a0b:8740::/29
IP: 2a0e:d80::/29
IP: 2a0e:4800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:e2:b6:09:06:e3:80:e5:cf:fa:8b:be:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:4d:16:5d:57:85:6c:3c:12:b5:df:4b:d2:
eb:46:53:d7:d5:0b:7e:7a:d0:61:12:cd:8d:94:ab:
04:11:a6:df:d0:15:77:df:7a:8c:8d:2d:f2:fd:fa:
da:f1:b6:e5:75:18:3b:8f:8d:59:a5:9a:71:64:8a:
78:02:6b:f0:d6:c4:23:6d:8d:80:57:7e:5d:16:b7:
70:8e:0a:72:a8:99:ab:be:5c:9e:80:d8:58:ce:9f:
47:ae:22:d5:5b:72:cc:12:c3:59:36:04:84:74:97:
c1:c9:ed:7c:f1:c3:ff:87:a0:84:78:ff:6b:b8:92:
8e:81:66:de:02:60:07:a8:bf:1d:60:02:ab:ac:a9:
a1:d6:52:1d:1a:0b:e2:55:7c:56:d6:96:08:e6:ad:
ac:38:90:25:57:6b:65:d7:70:0f:b2:f1:5c:64:6f:
4c:9a:f0:2e:4c:85:fe:cb:6a:78:3e:4e:c1:2c:c3:
73:4a:27:fa:aa:73:64:f2:b3:0f:ba:ad:77:37:c0:
25:ad:e8:e7:d0:d5:20:9c:b3:f4:eb:7a:df:e6:69:
d0:e9:34:2e:5e:39:d0:16:54:44:22:d6:11:f7:b0:
34:f0:63:ab:70:77:6b:26:38:5d:af:87:f0:3b:b8:
84:2b:3b:57:fa:31:d8:4c:14:6a:9a:0d:06:c9:6b:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.14.120.0/22
45.95.76.0/22
89.34.28.0/22
91.213.74.0/23
91.213.120.0/23
94.154.3.0/24
95.214.240.0/22
176.101.72.0/21
185.50.116.0/22
185.88.232.0/22
185.110.224.0/22
185.152.108.0/22
185.213.108.0/22
193.31.96.0/22
193.32.72.0/21
193.150.16.0/22
193.187.184.0/22
194.36.200.0/22
IPv6:
2001:67c:283c::/48
2a02:2b60::/32
2a09:f080::/29
2a0b:8740::/29
2a0e:d80::/29
2a0e:4800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42947
Signature Algorithm: sha256WithRSAEncryption
51:97:7b:e5:bb:77:bc:78:0d:87:ee:05:83:2a:d3:67:79:dd:
37:4e:5f:38:83:e7:9b:b8:9c:f9:be:73:b1:6d:14:94:1c:00:
2b:17:b5:5a:23:69:99:e9:ca:e3:17:b1:38:61:f0:9a:70:6f:
e5:29:d6:37:41:e1:3f:71:57:f2:d4:46:56:ca:63:cd:1c:f4:
44:f3:1c:64:2d:6d:47:02:1f:60:fd:42:0b:8a:f9:c4:80:1c:
f4:a2:82:d1:eb:71:f1:ba:b3:6b:78:58:62:a2:f9:ba:80:59:
91:b8:e3:a9:0f:3f:aa:a8:5c:38:73:8c:a1:5c:c1:36:85:73:
3a:d3:84:a5:e5:20:85:4d:7c:18:6b:92:34:6a:ab:94:d2:93:
99:5c:c2:22:90:78:72:52:3b:da:0b:d7:ea:b8:91:32:d0:f3:
8e:66:e2:3f:02:e5:96:0d:b6:fe:b8:eb:7f:2f:c3:d0:3e:5e:
0e:42:8b:3a:22:86:63:49:2b:87:f0:c8:f1:cd:a7:f2:e2:58:
68:af:6a:d9:85:04:01:11:03:07:ba:9f:44:57:77:95:85:be:
d1:84:b5:98:a5:97:be:e2:f7:a0:ef:3d:04:3b:83:b9:d8:ae:
9b:fb:00:9a:aa:23:aa:11:e7:40:4e:fa:18:db:1d:9c:1f:d6:
13:21:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:25 2025 by rpki-client