Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
File: u-Eo3LaBD_3FArowR81BkTLaInQ.cer (raw, json)
Hash identifier: AgXUnw+geJVMA9DGQQ5NB5EeZ0hZ2083RJ9jikP4+GY=
Subject key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D64F7AD9B4FA67B4D8EFB2ADA7C4C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25460
IP: 5.61.120.0/21
IP: 45.154.208.0/22
IP: 185.118.28.0/22
IP: 2a01:5ac0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:7a:d9:b4:fa:67:b4:d8:ef:b2:ad:a7:c4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:03:fb:6a:6e:70:da:f8:6b:ab:8c:57:49:
af:6e:b3:2b:7e:b0:df:37:49:69:6e:e7:ee:68:5e:
d2:a5:e1:69:ca:f0:de:2e:9f:7a:b7:b8:65:fb:9a:
f3:ad:7b:fd:ad:17:dd:c1:8d:1c:ec:35:c6:16:80:
23:c8:d5:67:9d:b2:6b:f6:39:7d:2c:57:5e:5f:e0:
33:9b:56:d6:da:1c:fb:51:e4:96:4f:36:be:2c:20:
0c:13:54:13:33:06:40:9a:27:39:c0:27:94:7a:6c:
b0:2b:56:e4:4c:ca:e9:1a:09:2b:46:85:10:be:51:
89:59:64:6c:85:68:d2:df:2d:4c:17:02:e0:6a:cb:
da:6b:b7:a6:55:5d:e8:6d:12:12:1c:b8:e0:d1:1e:
36:b8:84:a6:bd:ce:a3:33:5e:fb:84:b9:a7:ad:09:
f1:8e:b6:f0:b2:c8:e3:6d:b4:9a:08:81:64:52:ce:
11:9d:f7:b1:5b:ce:da:3d:4d:2c:de:ea:3c:3d:c0:
2b:6a:6e:d4:4f:2d:5f:0c:b8:33:68:c0:ec:fb:9c:
8b:c0:77:9e:ae:b2:72:1c:3b:8f:4a:25:f4:73:b7:
68:1f:17:b5:9d:ca:29:be:5b:b8:5b:33:29:1a:df:
5b:e9:2b:46:65:57:67:e2:f9:4e:dd:6d:f6:18:30:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.118.28.0/22
IPv6:
2a01:5ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25460
Signature Algorithm: sha256WithRSAEncryption
29:9d:40:53:1b:28:9e:30:0a:68:38:e1:ac:93:82:aa:a7:21:
11:ef:3e:c4:6c:8d:90:58:32:05:5d:b4:58:0e:08:bc:b2:cf:
49:4e:42:3b:d2:2a:40:42:7f:e5:c9:9c:9c:ec:e9:a0:c1:ee:
0b:a0:74:cd:01:43:b5:58:3e:36:de:d2:a6:72:7e:f8:b1:62:
dd:82:11:e5:1b:f1:17:f8:58:11:80:11:18:b3:7b:a1:7a:a2:
bb:41:68:7e:73:f6:1a:bb:a4:b2:c1:84:23:10:59:b5:5b:88:
d2:f9:7b:98:88:83:11:b3:3d:80:ca:ce:df:cb:2d:9c:21:01:
d3:34:e2:e6:d7:1f:9b:98:44:3e:c6:b5:92:c5:fb:74:78:4c:
59:90:90:31:17:e5:bb:60:ec:ea:cd:a6:8a:cf:00:22:98:35:
e8:ba:f7:e9:ba:18:59:ea:e5:f5:95:5d:9e:19:8d:b6:56:83:
57:68:f1:8e:15:58:54:e6:d0:a3:97:97:d3:21:2c:11:c0:bc:
59:71:99:b1:7f:68:2f:f4:96:37:af:16:32:f4:9d:fd:06:15:
80:ff:aa:9a:8b:1b:33:3a:0f:fb:02:73:3d:ab:84:ed:43:b4:
20:bc:54:b6:33:55:f7:a9:4e:c9:cd:c4:e6:03:87:5d:35:98:
4c:3f:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:22 2025 by rpki-client