Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer (raw, json)
Hash identifier: 0mk8EaxqHsmvJVWD0HRh+E5gf9WtLG3BCAJaSoCBZiM=
Subject key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD1AA394BF245C9FE674AB354D412
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201178
IP: 185.81.236.0/22
IP: 185.153.248.0/22
IP: 185.155.148.0/22
IP: 2a05:8a00::/29
IP: 2a07:89c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:aa:39:4b:f2:45:c9:fe:67:4a:b3:54:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b467367967dc763349fd0b50e31f75b823028590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:c7:c7:f6:27:c9:da:14:3a:5b:b0:ed:b0:
0e:1e:db:29:39:92:d7:63:ea:61:65:24:7c:0d:d7:
9c:f9:7e:ea:bf:84:c9:80:c1:d5:ff:08:64:03:09:
cf:4a:74:8a:02:b2:89:78:ad:ae:6c:6b:a1:e4:ef:
d5:a7:b1:5a:bd:e0:4e:ff:a2:94:8d:ca:6c:ee:16:
da:79:a9:b1:2c:a5:56:07:be:6d:18:7f:62:82:a4:
d3:df:65:5b:79:20:f6:b6:d9:77:df:51:44:a8:80:
31:64:3f:00:b8:9e:f5:0d:6c:02:62:d1:e3:ec:68:
18:00:88:b4:a4:26:5a:00:1d:00:a9:97:51:e6:d1:
d5:1e:69:ab:8a:ca:d3:54:07:e7:1d:78:ae:c0:95:
c2:87:1a:bf:20:bd:d4:eb:a1:04:dc:73:c8:8b:53:
09:b6:6e:7b:c2:55:0b:49:6f:e4:ff:66:0b:6a:89:
b0:6d:83:ac:e6:c0:c5:92:45:8a:cf:4c:f0:c1:4a:
be:55:30:f7:3a:1b:d8:54:1d:fa:e4:0b:aa:1b:a3:
d6:00:78:de:e4:58:6e:92:1f:f1:e2:ac:17:00:80:
a9:c8:36:1a:27:57:a6:f9:94:32:bd:d3:7e:7f:be:
aa:ba:e3:0d:eb:0b:79:6e:d3:70:76:b8:09:e9:ff:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.236.0/22
185.153.248.0/22
185.155.148.0/22
IPv6:
2a05:8a00::/29
2a07:89c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201178
Signature Algorithm: sha256WithRSAEncryption
22:2e:36:4e:2c:3e:b3:62:4f:5f:60:19:74:ee:70:60:b1:99:
93:01:9a:e9:8a:44:53:31:f3:3b:b7:ae:44:df:84:3b:62:e7:
d1:b7:17:40:a8:26:37:20:af:31:6e:67:6d:d9:89:08:76:91:
58:90:3a:c9:39:96:68:48:fa:cf:ea:56:bc:36:5d:e1:64:53:
08:33:fd:11:8f:08:08:a1:95:b6:0e:ca:70:79:e3:e0:10:45:
f1:ed:1a:a1:09:d2:96:10:6f:c0:10:36:fb:04:65:89:13:cb:
1a:94:e3:e4:8e:1c:fb:9a:54:7e:45:ec:5f:d7:bc:79:3a:58:
28:8d:2c:d7:4e:4e:82:ac:41:b8:17:32:2f:5d:94:ee:63:d9:
d3:8a:0a:d0:ce:33:a7:c2:e6:05:77:9b:52:16:8f:03:93:d8:
5f:55:72:0f:97:7f:a4:36:cb:c4:7c:ae:ae:ba:2c:ed:6d:99:
16:e2:13:48:ea:f0:ff:b2:17:2f:00:a3:46:2d:28:92:fa:5e:
b7:12:d8:a3:c8:e8:fc:22:4c:54:cc:c3:81:44:07:2c:69:28:
50:73:1c:09:5f:10:8d:5a:d7:05:41:1f:81:4b:89:a7:0b:c7:
45:7b:ba:f7:5b:ff:f9:20:64:1e:e7:f5:1f:a8:50:53:2a:29:
4d:d2:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:38 2025 by rpki-client