Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
File: w70m_iKV5GK-JnhTPvpTHiO38QI.cer (raw, json)
Hash identifier: 1ZhbFwFBS6/4CahdG7sOuwZ9kFLZAdUgq0ff28izfP0=
Subject key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C7671540FEE1DBC6ACAAA8A09772C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48466
AS: 57773
IP: 85.208.80.0/22
IP: 91.208.188.0/24
IP: 171.22.68.0/22
IP: 185.141.112.0/22
IP: 185.205.48.0/22
IP: 194.33.80.0/24
IP: 2001:67c:43c::/48
IP: 2a07:2340::/29
IP: 2a09:3b40::/29
IP: 2a0b:140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:71:54:0f:ee:1d:bc:6a:ca:aa:8a:09:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:a8:26:d4:4c:a1:f1:af:22:59:50:be:ce:
02:a6:f7:06:a6:c8:e8:96:48:37:f9:37:cb:24:36:
0d:b5:f5:cf:49:15:21:6a:3a:61:22:67:0c:2d:53:
99:57:1c:f3:56:4f:fa:bc:a4:20:d1:1e:1a:79:bb:
67:09:b6:56:e4:ec:6d:da:34:86:ed:02:03:ce:6f:
00:15:4a:30:bd:a6:3d:d7:bd:00:09:00:39:c0:f4:
35:1c:01:b9:81:4f:09:2c:cf:63:f9:19:8e:19:ce:
db:3f:32:c0:bf:56:b5:6d:e3:39:ff:59:49:d7:e5:
c0:5e:20:f3:87:3d:fa:e7:d1:37:6a:0c:50:96:da:
c0:80:98:a1:84:86:54:7d:08:05:21:d2:34:fa:e6:
58:45:f1:20:66:2d:c9:87:0f:60:56:02:41:ec:a3:
4e:ae:a1:10:c3:ca:9e:3f:d1:6d:b9:65:03:e3:51:
cc:a9:d3:63:9f:f7:b5:9c:d0:bf:62:69:72:bb:71:
37:35:b6:8b:64:29:0a:b6:dc:c0:ad:e0:15:7e:50:
12:02:80:23:6a:f8:d6:7d:fb:c2:e1:bf:6e:1e:04:
88:56:79:e8:b9:65:95:67:e7:c6:6f:9b:2c:a0:c3:
fc:91:f1:be:08:6b:bb:62:be:bb:af:97:e6:67:36:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.80.0/22
91.208.188.0/24
171.22.68.0/22
185.141.112.0/22
185.205.48.0/22
194.33.80.0/24
IPv6:
2001:67c:43c::/48
2a07:2340::/29
2a09:3b40::/29
2a0b:140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48466
57773
Signature Algorithm: sha256WithRSAEncryption
84:0e:78:d5:ba:63:7e:db:dc:33:b7:b1:05:72:85:9a:3c:57:
23:4d:36:89:11:08:27:a7:c2:0b:38:5d:2e:3c:fd:e0:45:3a:
6b:dd:f3:50:32:a4:5d:11:99:72:eb:57:72:d5:9b:7e:18:7f:
c8:ef:8b:21:41:1d:3d:8b:05:b6:33:c1:6e:42:56:91:68:82:
42:f0:f0:de:b1:dd:7a:26:77:02:cf:6e:1f:05:a6:c7:de:32:
d7:55:0e:bf:3a:dd:66:04:af:57:3f:da:8b:c4:42:42:20:05:
78:2c:3f:c4:50:70:7e:e3:49:1d:52:1f:1c:8c:b3:ae:d5:1b:
68:7b:ea:1b:b7:bd:27:fc:63:3c:75:67:bc:0f:8e:0e:97:0b:
53:ba:02:a9:e6:50:c9:2c:90:09:e3:dc:46:ef:94:b3:ce:f6:
b0:18:36:87:2c:46:cf:8f:a4:5a:12:54:19:17:05:24:82:16:
9a:e2:7f:70:61:96:ed:84:d6:ae:fe:58:b0:fd:fe:66:27:12:
fe:4a:46:93:54:47:f5:51:f8:a9:ce:20:4b:57:07:1b:bc:dc:
20:75:0b:5b:92:68:d0:5d:05:d0:43:f9:e9:64:2b:87:8f:4e:
97:51:33:54:04:87:14:68:69:0d:f5:d0:97:98:5c:34:1b:d2:
58:a9:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:10 2025 by rpki-client