Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.cer (raw, json)
Hash identifier: vqE8Iaode/ZGCEmaGPTDQ+AtikVYR6ntIkPBC8abAy0=
Subject key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD89432A86D08E9F235A101B438CED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202876
IP: 185.152.28.0/22
IP: 2a07:7d40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:89:43:2a:86:d0:8e:9f:23:5a:10:1b:43:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b930da21518184145f6d7621b5a13bd54035ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:93:89:91:63:6b:f1:d2:6d:71:d9:c4:1f:
ee:eb:e8:00:ab:81:09:2f:73:8e:0e:6b:d5:c3:7f:
4b:55:6d:fb:63:7e:93:53:7d:0b:a3:35:92:35:d8:
53:81:e3:7b:03:f2:c0:2e:68:21:d0:6d:89:36:5f:
1b:1e:cf:c1:05:da:c4:4d:c1:33:56:94:64:92:c6:
9d:73:09:1d:b1:be:b8:c1:59:3d:bc:9e:9c:86:86:
92:ab:93:29:a3:60:25:22:02:df:f8:2e:36:5c:d2:
5c:a8:4a:83:83:7c:dc:48:6a:a0:b9:92:67:d8:0b:
d5:be:cc:88:7a:1b:1b:30:65:2d:04:65:1f:d5:fb:
6b:98:fe:44:8e:54:12:df:e0:d0:b3:61:2d:f4:fb:
c0:a7:8a:a2:41:62:5d:92:b8:22:70:64:bf:21:f3:
09:04:58:84:de:df:be:86:e3:22:3b:fb:20:be:f0:
16:fc:55:e0:d4:10:6c:0e:ee:f8:29:9f:54:f0:84:
34:db:2e:0f:61:38:90:c1:79:99:6a:bb:eb:4e:1e:
9c:c2:79:72:bd:cc:ae:8d:a6:8d:2e:4a:4c:50:26:
1d:1c:73:d5:d5:7d:9d:1b:73:94:8d:40:b1:ab:06:
f9:2d:50:01:f5:c5:7f:52:db:79:da:8d:02:b2:8a:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202876
Signature Algorithm: sha256WithRSAEncryption
47:2a:b2:84:c3:e8:6a:d1:1e:97:65:00:89:fe:83:32:01:74:
86:37:da:76:f6:71:6f:06:02:62:c3:4b:aa:c4:1f:cc:79:29:
63:41:c0:40:43:6a:78:f3:c3:0e:cf:a4:6e:e9:5c:43:71:1b:
9b:8e:9a:1c:7d:78:90:a0:41:ef:c3:00:9d:87:ca:b0:d3:e4:
c2:e5:ab:cc:86:51:7a:c8:20:7e:2d:22:bf:f5:0b:28:f0:44:
1f:ac:ce:3b:65:01:58:e6:11:d0:79:c8:c9:69:e1:4e:78:0a:
4e:10:64:0e:0e:d7:be:60:a7:2c:b3:00:07:7d:fa:2c:bc:f8:
fe:c5:0b:55:65:e7:1c:6e:1f:41:b8:35:7c:ed:7f:8a:cd:1a:
49:24:8e:d6:fc:37:b2:e3:ab:0c:54:86:33:35:00:e0:3b:75:
ce:09:15:07:70:8f:ed:9c:5e:62:08:58:85:89:9c:22:51:de:
58:74:31:23:8d:b8:cc:37:b9:a5:3b:27:70:51:f1:16:fe:cd:
af:93:7e:39:5e:9c:93:f0:00:1a:27:84:94:0d:b6:6c:f4:b8:
66:eb:2d:27:90:2b:60:d7:3c:3a:a3:f4:b9:0f:4b:aa:a1:51:
7d:ec:21:ec:aa:7f:3f:f6:35:ee:be:2b:40:0b:2d:3c:e4:f8:
70:22:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:21 2025 by rpki-client