Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.cer (raw, json)
Hash identifier: vJndiRL/7VrDj946Uek5xhZRiyyphx3qhov5v9OwuFw=
Subject key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD863BDA57B7F3C83189EE143D4A12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21119
AS: 198869
IP: 5.226.160.0/21
IP: 46.16.48.0/21
IP: 80.86.128.0/20
IP: 82.117.32.0/19
IP: 89.105.32.0/20
IP: 89.233.96.0/21
IP: 93.187.80.0/21
IP: 185.36.28.0/22
IP: 193.169.42.0/23
IP: 193.201.74.0/23
IP: 213.179.48.0/20
IP: 217.65.224.0/20
IP: 2001:a90::/32
IP: 2a01:b8c0::/32
IP: 2a03:6240::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:86:3b:da:57:b7:f3:c8:31:89:ee:14:3d:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:4b:0e:16:00:d1:9d:16:c1:b4:82:66:e3:
94:6b:c2:e2:e3:11:bd:5c:10:d4:a2:74:81:bf:f4:
3d:d1:8f:4e:52:30:45:c3:92:29:75:15:79:0a:a9:
19:7b:0c:f9:34:cb:84:a0:85:91:5c:79:bd:36:a5:
ca:46:b7:a8:75:bf:ed:ec:73:62:7f:3b:19:d1:d4:
55:0f:9e:e2:37:cf:7f:a8:11:98:2f:80:e1:f7:30:
55:5a:e2:4e:b3:8f:e1:f5:50:31:24:0e:c3:8e:22:
27:92:43:9e:45:52:e5:4c:78:b0:f4:59:9e:1a:7e:
0c:e2:6b:6d:07:80:7d:f1:1c:06:22:35:15:de:5d:
0d:e4:f0:3f:05:62:1c:15:1b:46:b6:9d:20:9c:3d:
17:a5:8e:3f:88:a1:51:e4:03:19:69:7e:d0:e1:00:
9a:29:03:9c:d8:b1:6d:60:01:13:03:32:e2:12:ea:
2a:fe:4a:eb:0c:35:68:a0:71:56:d7:72:67:88:e6:
1d:c6:af:24:95:78:4b:f2:0f:5a:ba:3d:2e:4f:ad:
e0:b9:e2:3a:fc:28:2d:51:ac:36:44:67:69:4d:2e:
16:81:3b:9b:d2:17:24:85:65:c8:28:95:86:bd:fe:
75:24:39:01:07:ee:8b:b3:c5:4f:96:24:6b:1f:45:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.160.0/21
46.16.48.0/21
80.86.128.0/20
82.117.32.0/19
89.105.32.0/20
89.233.96.0/21
93.187.80.0/21
185.36.28.0/22
193.169.42.0/23
193.201.74.0/23
213.179.48.0/20
217.65.224.0/20
IPv6:
2001:a90::/32
2a01:b8c0::/32
2a03:6240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21119
198869
Signature Algorithm: sha256WithRSAEncryption
75:54:0a:48:8c:a0:63:21:d4:2a:9e:b8:3a:0b:14:07:f8:30:
44:60:75:84:3d:23:9f:bf:cf:58:0e:27:01:e7:a7:d5:75:f1:
5d:fa:67:e7:b3:85:79:01:4e:d2:ea:11:55:fe:6e:be:bc:2a:
27:0e:5a:b4:8f:6f:9b:06:22:3b:e8:0a:a0:25:72:f8:54:05:
94:63:d7:6f:55:47:17:b8:94:56:e8:e3:57:a2:7d:9b:1a:64:
58:19:2a:71:65:a0:06:ef:09:7f:fc:a8:0b:cf:7c:c7:4e:57:
26:5d:ee:4f:48:aa:31:3a:de:94:a9:65:52:d7:10:cb:05:f7:
52:2a:55:3b:64:e1:79:42:62:57:0e:3e:a0:88:05:b3:0e:4a:
1f:03:6b:83:49:94:12:ec:34:81:dd:33:d7:e9:c0:fc:39:9c:
c6:7e:87:02:e4:45:f9:4e:7a:62:57:28:d9:e5:7e:0e:dd:b6:
8a:ab:ae:27:a4:90:fc:3c:d9:9e:dd:fa:28:14:9f:80:80:9d:
6d:26:1c:a0:d3:49:c6:94:9f:fc:58:5d:6e:7b:81:2e:30:5b:
25:d0:7e:c9:81:6a:be:81:5a:77:10:de:ed:bb:a7:f6:e2:45:
7f:b5:0b:91:83:a0:f5:b5:4c:cd:6f:a2:88:18:5b:0e:b2:25:
fd:0f:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:54 2025 by rpki-client