Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.cer (raw, json)
Hash identifier: SHdmB0PYtWHTECRWs5yNWeVlfzvIIqhJYAPtePs9T08=
Subject key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FCF02CCD7B55E6D6148B1A59C9A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8511
IP: 195.38.160.0/19
IP: 2a11:a380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cf:02:cc:d7:b5:5e:6d:61:48:b1:a5:9c:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:93:bd:bc:7e:2c:cc:22:11:31:d7:1b:0a:
d0:6f:50:19:50:84:ea:17:e8:1b:8f:ba:d1:53:bf:
aa:6c:13:fe:40:82:e6:b8:a7:10:a5:c9:1d:c1:c0:
7a:91:e2:cf:b4:e6:b5:f1:7b:d1:6b:44:10:c2:62:
fe:a5:8f:27:da:e0:0b:c6:28:c6:f8:e9:90:97:18:
3d:a7:07:93:9f:0c:f3:20:05:80:35:36:99:34:a3:
5a:3e:ff:46:69:5f:7b:23:73:fe:4c:06:bd:d8:fe:
53:d2:ba:55:fe:4d:ff:0b:92:a9:cb:fd:7f:8f:7a:
6a:e9:d5:ba:fc:47:67:3f:fb:a1:af:e6:05:e4:dd:
33:b2:64:9f:f5:c4:dc:8a:be:c0:6e:a8:c4:89:39:
a8:97:b8:a8:e9:68:0c:7d:64:67:e3:72:0a:21:17:
0c:73:74:6d:dc:47:b0:79:6c:27:e4:b7:5c:96:06:
15:d0:3b:27:66:38:71:34:15:02:64:a4:7d:f4:06:
0b:19:61:7f:87:49:f6:68:65:bb:28:d1:08:3b:b5:
18:12:af:0e:3a:b7:c6:17:54:a9:6b:03:cd:01:5d:
f2:b9:ef:88:97:35:ae:38:b4:ed:f6:a0:64:ab:84:
63:da:65:42:26:2f:6f:ce:74:a1:7d:57:ec:8d:af:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.160.0/19
IPv6:
2a11:a380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8511
Signature Algorithm: sha256WithRSAEncryption
46:34:1b:b3:22:42:52:f4:ff:b7:ff:9f:40:95:ac:db:fe:0d:
e2:4e:2c:d6:41:90:e4:08:d7:ae:2b:ed:16:5a:ba:ed:03:c5:
c0:cd:9a:fa:a5:4f:4c:d8:f6:15:94:f3:b8:b0:28:b8:1d:40:
b0:57:81:89:01:0e:21:fd:bb:7b:b9:6c:1f:e3:4c:cf:cd:20:
f9:aa:bf:73:ad:bc:2a:90:65:c2:11:ad:3f:76:2d:10:ae:ec:
a3:b4:a9:54:0f:93:0e:98:4f:02:14:44:a4:f3:29:a7:ad:4d:
05:21:f8:4d:ec:6c:dd:71:2e:52:44:e1:f9:5e:2f:42:4e:83:
7c:77:23:05:0f:a7:fc:c4:58:2c:02:1c:a8:f0:af:2e:7f:5d:
ed:71:b2:f6:ee:80:10:24:6f:3b:07:77:25:c4:31:de:22:db:
dc:fd:98:90:90:dc:58:75:d6:b9:64:b3:4b:ef:55:9d:21:74:
53:1f:43:71:95:57:72:00:0f:e2:ef:26:87:ec:91:24:a6:e3:
a0:ba:8f:7b:29:0f:3f:dc:9b:08:85:2d:87:c1:ba:b9:a4:35:
e9:a2:85:85:b4:34:a6:e0:a1:77:39:8d:40:04:64:5a:18:79:
03:90:93:7c:c2:65:be:41:e1:2b:85:81:7f:45:8a:b9:34:fd:
e6:24:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:49 2025 by rpki-client