Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
File: smK_Id5ROFhZQWxMYIAB4gJaXSU.cer (raw, json)
Hash identifier: EYqCKiiMfCgVZvuIgDHypcA+tralumujLDXQ0cO6H+Q=
Subject key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B375B97177AD05D46004C12E40ED6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49396
IP: 91.232.181.0/24
IP: 130.193.78.0/24
IP: 185.19.148.0/22
IP: 185.61.112.0/22
IP: 195.177.252.0/23
IP: 2a04:ebc0::/29
IP: 2a04:ec40::/29
IP: 2a11:9d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:75:b9:71:77:ad:05:d4:60:04:c1:2e:40:ed:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b262bf21de51385859416c4c608001e2025a5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:51:50:1a:a5:51:6a:a1:2b:f5:2b:88:89:
38:26:32:9d:e9:a6:80:9a:95:2f:0a:0c:c8:81:a0:
67:3e:e3:2d:e9:23:a4:b9:bf:f2:54:39:25:de:60:
82:6d:e2:f7:3e:04:ff:4d:fc:2a:e4:fa:06:05:f2:
00:f1:0f:fc:4f:4d:1f:29:0f:c7:78:26:73:30:a8:
45:be:7d:87:87:18:14:a9:86:99:48:c4:78:ac:12:
cb:a6:6a:73:12:1e:03:26:14:0b:22:05:d8:19:a3:
d2:9b:a1:eb:da:08:87:71:ac:97:69:61:90:b4:fb:
a3:4d:39:df:01:c0:3e:91:49:95:5f:18:4e:4f:3c:
b7:3b:ad:5f:05:64:89:fc:a5:af:07:94:c8:9d:df:
a0:75:68:f9:c8:56:79:4a:0d:55:e1:50:b5:31:16:
f2:da:e0:1c:6f:9c:b5:f9:bd:eb:49:a7:e8:47:2e:
77:d3:2d:30:6b:75:6f:5a:45:8d:dc:38:b9:5a:b8:
a9:38:c0:09:ef:ae:71:65:f4:b7:dc:35:4c:d1:d9:
e6:58:87:d6:68:10:59:46:92:fc:02:c8:e3:ca:8c:
38:4e:18:c6:4d:66:17:ae:0a:1a:66:2d:5f:46:08:
b8:7e:44:aa:70:96:c6:7b:30:78:16:8a:2c:69:91:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.181.0/24
130.193.78.0/24
185.19.148.0/22
185.61.112.0/22
195.177.252.0/23
IPv6:
2a04:ebc0::/29
2a04:ec40::/29
2a11:9d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49396
Signature Algorithm: sha256WithRSAEncryption
5f:da:b5:9e:5a:9a:a9:44:65:60:be:1f:72:16:04:c5:7b:ed:
63:c7:d7:58:c4:97:92:b8:6a:08:7c:f9:65:26:7e:a0:d0:8b:
f0:18:da:8b:b2:96:0b:af:62:76:8a:73:11:29:aa:58:1f:ee:
93:4b:64:79:df:ae:91:15:ef:9d:1f:2d:6a:d2:36:95:09:d6:
9a:64:9e:cd:6e:df:08:ed:fa:63:73:d4:5e:5c:e4:b7:68:eb:
6a:28:da:9b:54:d5:36:7c:af:17:9b:c9:29:bb:96:db:d8:40:
03:a8:39:7e:a2:54:eb:cf:90:f0:7c:2c:ed:c4:03:77:5f:27:
25:32:e0:01:78:69:2d:ae:80:52:14:07:f4:69:c7:df:7c:ce:
68:a3:fa:ef:f0:5f:c8:15:37:2f:c3:02:a0:53:d1:8a:ee:b8:
51:61:32:7d:30:d5:f0:46:d3:15:9a:ac:25:fc:87:f6:59:e9:
fb:f7:4c:86:13:af:65:90:b5:71:ae:d8:1e:c8:12:34:d5:0a:
b4:fc:ff:c6:67:45:30:2a:a7:3f:69:e8:af:ba:e0:06:52:63:
9f:51:7d:45:69:0e:fe:19:b2:a9:dd:a6:1f:b4:6d:f1:c8:42:
b3:ec:8e:bd:65:fc:74:ab:e0:1a:46:b5:93:9d:40:f1:e1:c7:
73:29:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:28:08 2025 by rpki-client