Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer (raw, json)
Hash identifier: 4HO5JYC3mwm8iIQm+1vWoZ7v9VE78AA8F3Fbg9Za6d4=
Subject key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C630920B47DBDB365ACAB090DECA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208961
IP: 45.12.84.0/22
IP: 2a0e:f700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:09:20:b4:7d:bd:b3:65:ac:ab:09:0d:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:fe:3e:04:c0:9f:87:c3:d0:8e:c0:a0:2a:
e5:a5:92:cd:f3:a4:ca:a6:6e:13:5a:b7:a7:95:41:
90:d3:f0:c2:ea:2f:3a:90:68:43:6a:df:d8:b7:da:
1f:bc:f6:ab:9b:a3:cb:c0:75:6f:9a:ab:80:ae:d0:
cf:44:87:b5:c1:70:d9:4e:85:db:df:18:98:b3:fb:
12:dc:f3:2b:b6:da:97:7d:39:65:2c:d0:b4:4d:7d:
0e:04:81:88:9e:93:24:03:cf:7c:cf:db:e2:38:9a:
0c:ce:e3:d8:52:8b:89:a4:55:38:0f:1c:e6:29:23:
98:38:3e:79:49:04:35:3f:66:b4:73:50:4c:04:41:
cd:31:2a:f0:1d:64:af:32:b8:36:f2:b8:39:32:af:
57:f0:0c:14:a0:bb:b0:cd:b7:be:3b:c7:6d:8d:e4:
3b:fb:a5:70:01:e5:2c:dc:b3:f0:ea:10:f8:9c:fd:
7d:18:3e:4c:c0:7e:66:a5:1f:7c:c7:c0:e4:cc:04:
1e:dd:52:be:d6:9e:ea:6c:18:ef:62:dc:62:7e:cd:
0b:60:bd:31:21:b4:9d:b4:67:26:56:c2:27:77:20:
72:60:a9:6f:3f:d5:39:a1:e9:91:b6:c4:e5:96:e9:
d1:e9:0a:5a:17:62:e7:21:1e:de:c1:53:5c:7e:a5:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.84.0/22
IPv6:
2a0e:f700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208961
Signature Algorithm: sha256WithRSAEncryption
74:2c:46:8d:a5:1c:5a:4f:15:98:5e:b8:85:31:91:aa:47:5c:
0c:57:4d:3a:c7:7c:95:f9:21:93:c1:ec:a0:a0:cd:9e:31:af:
34:cb:6a:6a:12:f1:62:97:82:ad:d9:d4:63:4f:99:2b:88:98:
9e:8c:d4:f1:47:53:71:3d:ee:12:e9:69:ea:b2:dd:5f:e3:ce:
98:b0:e6:36:5b:91:60:8e:df:b2:72:c5:54:31:f3:a3:50:7f:
6f:46:81:e6:cc:61:5f:fe:0f:58:1d:ba:bb:19:f5:ba:49:15:
2b:99:9f:6c:d5:a9:59:3d:40:45:c6:95:62:e9:05:c1:c4:3a:
f9:01:5b:58:79:ce:2a:2a:a4:2a:8a:e5:7b:dd:44:c6:cf:c9:
db:5b:a9:ea:d5:dc:5e:d3:7a:9a:0f:25:41:49:5e:ff:28:28:
99:cb:c8:e0:ef:0b:bf:bf:51:02:b1:07:a8:bd:d2:05:e6:93:
ea:21:9f:94:f7:60:2a:02:37:c3:8d:02:36:33:f4:53:dc:8f:
91:64:0b:37:93:91:cf:ea:2c:92:80:0d:78:c4:bd:27:7e:db:
2a:5a:15:c2:21:45:65:f3:0b:09:f8:73:65:15:fb:3b:cf:5c:
b2:c1:c8:62:06:2d:51:40:cd:9e:40:87:a5:ef:8f:73:b4:15:
d0:5f:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:37 2025 by rpki-client