Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
File: t6XbvIM8xastSukpfi6rl18cGX0.cer (raw, json)
Hash identifier: oyj5bHK0Jhjc9hALDvCDt6re8J2ahoQf3qar5hBtQrg=
Subject key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942220226680AE0692708A681B1854B8B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16101
IP: 193.41.194.0/24
IP: 2001:67c:2b38::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:22:66:80:ae:06:92:70:8a:68:1b:18:54:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:03:b6:fc:69:9e:0e:68:ac:42:68:c7:9d:
3d:b8:a5:b6:ac:fb:88:88:97:a5:e0:47:3f:ae:3f:
18:ff:c8:86:6c:f1:97:81:09:34:2d:fd:cc:90:46:
dd:f3:a8:98:1b:fa:99:51:83:63:aa:2f:d0:a8:1b:
eb:af:5e:0c:ee:76:bb:32:e9:3e:f7:02:ca:3c:75:
30:b9:78:02:27:0a:21:2b:40:20:76:d1:ad:2f:73:
ab:3b:d9:7c:1c:db:59:23:98:25:b2:61:97:46:3c:
0d:7b:19:1a:0e:e4:ff:2a:c4:96:15:29:ee:f9:39:
be:ae:fe:3f:da:b6:a1:1d:ee:3e:a9:bb:82:ca:8e:
6d:77:03:88:45:8e:78:0c:3f:28:82:51:1e:ee:d4:
d1:72:2e:6a:49:2e:6d:36:31:46:42:e7:e0:85:1c:
80:dd:c3:7d:ef:ed:00:ac:f6:41:75:f5:83:9a:b6:
7f:97:f0:ac:25:ce:bc:c9:46:3a:3f:3c:c8:cd:9d:
46:be:e0:bd:08:97:68:3a:d2:9e:fb:ab:c7:3e:be:
65:3f:b7:a2:c0:5d:43:87:08:5e:95:91:cf:d7:68:
94:15:f2:f4:d2:1c:29:27:aa:63:25:8f:f1:46:73:
fa:48:68:7e:80:e6:41:08:5e:c6:57:d1:60:d7:4b:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.194.0/24
IPv6:
2001:67c:2b38::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16101
Signature Algorithm: sha256WithRSAEncryption
5e:bf:27:4f:88:c7:8f:2e:39:18:e1:c6:2b:1f:c5:f1:aa:cd:
5b:36:ed:1d:8f:62:2a:20:b1:81:bd:a0:9f:be:bc:ee:60:e8:
0b:0c:5c:8f:d0:ee:8b:3c:f3:47:59:f5:ef:01:f2:cb:14:e7:
ad:62:de:ba:eb:20:e3:97:24:91:60:a1:63:bb:ae:d3:c5:ad:
7f:b7:6c:b9:01:52:91:20:cd:dd:aa:32:55:40:af:d0:e8:cd:
3e:6c:ca:8a:43:41:16:8a:29:a9:9a:70:a1:4a:4e:a7:40:2c:
33:e3:fb:f3:cb:d1:76:65:07:db:5f:24:5c:fd:d6:64:1a:62:
2e:07:c3:66:e7:d4:fd:1c:07:63:11:ce:0f:93:57:5f:02:1a:
73:e6:3d:63:4d:df:25:59:71:bb:21:34:64:34:1b:bb:c3:49:
04:58:88:8c:ea:4c:f9:c9:98:77:37:cf:ca:fa:48:1f:3c:c4:
3e:4a:0c:3b:51:de:04:ca:a5:a9:27:36:a3:c1:69:b7:0b:06:
aa:9a:af:7d:e7:c3:8c:e3:e0:f2:9c:c1:09:3b:01:c3:5c:87:
ec:97:cc:cf:49:3c:04:11:c2:e3:7f:eb:4e:b3:e5:a4:eb:72:
bf:c0:ed:46:a1:34:10:72:17:dd:37:7f:9a:ab:47:e0:3b:6b:
b7:99:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:46 2025 by rpki-client