Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.cer (raw, json)
Hash identifier: aORQQHPs2IsLOMSQJnKKesvkMRsikHYo3EaUlInku8w=
Subject key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D635E3C0416EA0CA48D14A13591D9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204567
IP: 185.175.220.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:e3:c0:41:6e:a0:ca:48:d1:4a:13:59:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:57:a0:0b:67:f2:c2:e1:aa:c3:b3:b6:dd:
80:c7:da:86:2a:f7:c8:3b:88:da:1e:a0:03:d0:94:
67:e7:ee:29:7f:d9:e5:70:1a:e8:0e:6e:07:36:d8:
29:35:5b:c7:28:ac:74:9d:c5:c2:31:d3:1b:8b:6f:
51:b3:f7:a1:12:e2:2b:40:fa:37:9f:5d:17:b0:03:
d9:f8:02:10:16:c4:ce:bb:7c:cd:7c:bd:19:6d:b0:
38:2b:f4:c3:0b:69:d4:50:2d:b3:15:79:2c:8b:0b:
01:a4:75:b4:55:8e:e8:b2:38:74:33:ba:21:e8:32:
06:63:7c:e2:08:76:96:10:56:da:f1:db:77:b3:2e:
eb:99:dc:03:b7:94:e5:5a:d0:88:86:44:24:90:2c:
60:82:44:0f:bc:bc:d9:5c:fd:81:00:79:21:10:c7:
cf:ad:fa:04:f3:3a:a7:f2:11:11:59:7b:48:81:23:
a5:36:1a:4c:68:47:b0:67:dd:2f:49:2e:25:4d:39:
43:a5:6a:58:fd:f6:2f:e4:41:56:b3:07:9a:bd:8c:
89:b6:c4:fe:14:57:9b:36:5a:dd:3c:45:47:b6:6b:
2e:f7:96:ed:cd:19:61:3d:dc:d3:0c:bf:38:79:f3:
05:34:c1:ae:93:b5:d6:43:66:1a:91:41:5d:23:57:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.220.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204567
Signature Algorithm: sha256WithRSAEncryption
5b:10:a2:bf:31:88:62:ad:16:54:07:1d:b1:0e:cc:b9:47:66:
f0:5d:31:cc:c4:03:0f:aa:9f:db:49:f9:5f:36:17:b9:8b:7b:
2b:e9:f3:7e:b6:58:66:7e:12:0d:6c:57:0c:42:42:a5:ae:da:
8f:98:90:3c:f2:fe:2b:95:4d:b5:38:61:51:b7:5c:2f:f3:64:
03:0d:fd:ec:b8:26:b5:00:70:63:92:32:ed:22:bc:a3:c6:72:
81:1a:9d:b1:04:ff:e6:93:1b:84:35:91:12:4d:0b:e0:a9:6f:
8e:56:7e:b5:ad:09:a6:e9:c0:a8:e1:94:a3:30:91:22:e9:dd:
93:1d:4b:dd:c8:67:a4:7a:56:c5:96:23:8f:1f:80:62:e1:8f:
c5:ef:d7:55:59:97:eb:46:3b:1f:f5:fc:19:86:83:84:b0:ac:
15:27:e5:3c:44:4f:b9:10:92:e8:62:17:5b:0b:a1:a2:b8:e0:
7f:87:76:11:13:0a:72:5c:ec:05:01:1c:1e:3f:42:b6:3b:55:
74:af:5a:1d:48:4f:26:c0:8e:1e:c7:b4:7c:54:32:c1:91:7b:
b9:ec:12:67:69:64:18:a8:27:8d:df:97:7f:08:cd:98:a1:25:
38:59:90:8b:75:55:95:49:c6:27:61:98:88:0c:e1:2e:ea:b8:
3d:aa:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:03 2025 by rpki-client