Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.cer (raw, json)
Hash identifier: satD8BZEtyYULAXVrcuFNPyfRXWvyCe3gg2B4qCPyo0=
Subject key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194AD4820F140ADBCEE8C498CD1FE74B2D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Jan 2025 14:19:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197882
AS: 212376
IP: 31.25.136.0/21
IP: 130.255.92.0/22
IP: 159.255.160.0/21
IP: 185.14.248.0/22
IP: 185.101.236.0/22
IP: 185.184.196.0/22
IP: 185.212.33.0/24
IP: 2a03:bcc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:48:20:f1:40:ad:bc:ee:8c:49:8c:d1:fe:74:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 28 14:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:af:5f:13:f3:c3:1c:39:56:9c:b2:8d:56:
71:ed:e6:63:5f:d5:73:58:49:bc:b2:1b:eb:76:d4:
64:27:44:2f:71:a5:35:42:cd:35:54:76:fd:13:0a:
30:05:aa:1b:3f:2e:8d:5d:08:54:e4:6e:c2:9b:ff:
b1:5f:66:cf:10:25:20:04:ec:34:d2:6c:b1:08:ca:
37:53:17:fd:b8:17:d9:5b:36:02:c2:7f:e7:e3:34:
a9:c7:2c:41:5d:c6:b7:55:65:1e:07:68:82:92:ba:
6a:6e:59:69:d6:f5:5a:67:63:2d:4e:72:79:d0:5c:
ab:bd:52:14:36:ab:b9:62:4c:c1:5f:7e:ca:ad:44:
9d:66:81:15:3f:e6:5a:34:f2:e2:35:9a:cb:b7:44:
2a:cd:dc:1f:e5:83:df:b3:f2:d7:01:a7:c2:29:71:
61:09:ed:ba:a3:1a:b3:3d:4b:6d:c2:06:43:de:2a:
f7:a2:2e:25:c2:50:23:39:55:cf:ed:cb:7a:07:cd:
0d:88:d1:92:d3:fc:ae:06:3a:81:5c:48:69:61:cc:
2b:ae:69:49:17:a9:22:b8:33:3e:8f:8d:ae:e7:04:
9e:4b:f1:83:a4:1d:ef:b3:50:25:91:6d:1a:d9:19:
20:8d:cc:a5:fa:e9:55:88:7a:ce:8d:2e:d2:bf:dc:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.136.0/21
130.255.92.0/22
159.255.160.0/21
185.14.248.0/22
185.101.236.0/22
185.184.196.0/22
185.212.33.0/24
IPv6:
2a03:bcc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197882
212376
Signature Algorithm: sha256WithRSAEncryption
0b:93:41:a4:85:77:e6:9b:16:26:d3:cb:3c:92:6a:58:1b:be:
af:26:39:d4:93:96:78:64:d7:55:db:79:27:11:c6:c7:10:09:
6f:a8:7e:0f:18:f9:4e:69:b7:b5:d4:cb:7c:d8:02:32:5e:45:
f3:c6:38:b4:3d:12:52:e1:a6:64:31:f1:e1:a6:7e:9a:12:21:
08:d7:01:51:c3:74:62:8c:d2:d3:7f:cf:fb:f5:0f:1a:86:8a:
80:53:aa:da:54:61:6c:f0:e8:81:a9:90:66:2a:3b:7d:05:2d:
a4:8d:86:48:3a:fe:4b:60:92:5f:3a:88:08:8a:7a:39:7b:ee:
3e:00:62:6e:c5:5e:6e:21:be:f6:b9:22:0c:e8:29:4d:23:00:
02:fa:fd:c9:e4:42:f7:f8:47:22:0f:72:93:5d:96:d6:ce:0d:
61:d7:b1:00:4b:45:6d:0a:47:65:52:ac:78:74:3d:c2:06:c8:
55:a2:b0:20:f6:f3:83:f5:c1:41:e3:63:c3:bc:ba:ee:1b:b4:
63:51:be:b3:93:32:d5:4f:46:54:b5:4c:46:24:78:47:eb:ea:
a1:91:8a:e6:1b:fb:3a:cc:e3:bf:10:cf:c0:24:3a:4c:f3:0a:
3e:01:e4:70:58:25:3b:cf:86:53:92:3a:7c:d9:48:2d:ab:eb:
0b:6a:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:53 2025 by rpki-client