Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.cer (raw, json)
Hash identifier: DEeMhe0qQXkWGiQyeQc+a7TMI46PyWifEZwnshJaz3I=
Subject key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2EAB7DABAF85CCA67337A75C2616
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16298
IP: 185.190.232.0/22
IP: 217.119.0.0/20
IP: 2a02:29b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:ab:7d:ab:af:85:cc:a6:73:37:a7:5c:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:fb:43:be:61:1c:47:53:b6:bb:94:09:0c:
39:04:8d:f6:ac:a5:60:19:d4:52:f0:b3:34:89:f7:
ee:b8:14:47:ca:56:26:6c:3b:d2:f6:84:68:5d:2b:
29:ff:14:f2:c1:83:e2:ec:7f:7b:f1:24:3d:c9:e2:
80:4f:a8:75:5f:10:67:40:73:d8:e3:1c:97:94:7b:
3d:87:e3:de:bf:19:79:76:c1:ba:b4:d9:c0:f1:55:
98:8f:0e:16:44:55:7b:2d:48:b4:3d:01:11:99:12:
df:f2:81:04:b2:d4:57:db:fd:d8:e4:6b:eb:a7:a6:
dc:97:6f:ff:f7:9b:69:8b:3b:7c:55:36:c7:f7:1e:
86:77:54:f5:38:cb:eb:da:2b:2c:c2:e6:a7:63:5f:
84:2d:16:86:b2:36:e0:0e:d2:0a:90:35:ed:1f:07:
eb:bd:92:90:6e:b3:aa:da:e4:d0:a9:4c:38:f7:f7:
a6:0a:4d:a2:5c:c6:87:fe:5d:4b:a8:9e:91:e4:30:
a0:6b:9a:00:2a:53:26:1c:b1:f0:a0:03:f7:2e:b3:
fb:8f:71:43:da:c0:ee:fe:ba:6e:d2:2f:8c:d0:1a:
4a:31:a8:a6:2a:12:29:76:83:1d:50:e6:eb:07:96:
72:70:b5:5b:43:8b:87:51:ba:23:e4:3d:71:75:9c:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.232.0/22
217.119.0.0/20
IPv6:
2a02:29b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16298
Signature Algorithm: sha256WithRSAEncryption
03:b7:3f:a3:fb:65:ff:9b:31:f9:10:e5:b4:23:28:45:1b:5d:
6f:af:ef:c1:89:82:a5:c1:1a:cb:24:66:6f:77:b0:fa:26:8d:
de:da:62:a5:fc:38:62:9d:83:d4:72:01:6a:0d:76:68:cd:80:
9e:e1:79:e9:7c:54:b1:35:5a:bd:b8:ed:4d:fb:02:73:ff:a1:
f0:bd:dc:11:7d:f9:a7:ec:78:45:49:c4:66:ef:ea:62:db:e1:
11:d4:99:e4:38:41:82:80:ab:3d:c9:e4:63:4c:fe:6e:bf:36:
d9:2b:75:7a:f2:37:07:d2:72:df:3a:41:78:43:b0:74:ae:8f:
7d:1f:5a:9f:e3:18:7f:c8:cd:8a:f8:f1:5a:82:ee:93:7d:73:
25:7a:36:93:a9:47:92:5b:68:62:9b:e8:f8:96:7d:69:46:f2:
ee:f3:18:bb:36:5b:cb:a1:7e:c5:fb:e3:9e:98:5a:25:19:ad:
5d:d7:49:7b:95:d0:9e:4a:33:b3:73:b4:2b:07:38:c8:8c:03:
e1:31:c0:32:12:d7:a4:d4:f3:21:6c:f9:05:5a:40:a2:8a:89:
c0:13:e3:a6:1e:6a:0b:06:db:31:d7:b5:74:dd:92:61:6a:64:
37:84:f1:f9:1c:63:94:95:a4:e3:37:96:ca:dd:e4:24:de:db:
85:88:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:59 2025 by rpki-client