Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.cer (raw, json)
Hash identifier: rqPR754SmJuCVhqFD1OUTPJAIvbiAT1W4IUn7I2ZSUs=
Subject key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F455722F873E5E2B0C35E359C67B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42176
IP: 92.42.80.0/21
IP: 2a10:8e40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:45:57:22:f8:73:e5:e2:b0:c3:5e:35:9c:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:fe:65:7d:b0:fc:91:1b:8c:cc:90:00:24:
16:a4:a5:36:a2:2a:d9:c4:1c:8b:06:73:00:97:11:
64:6e:a6:b1:e4:65:21:90:3e:d9:2a:3d:a8:2f:13:
4b:66:99:11:da:b3:d8:da:99:44:05:e6:63:a7:83:
a0:53:05:5e:8e:07:60:ce:e2:64:ea:c7:db:0b:f9:
86:d0:8b:2d:b5:02:fe:85:4a:f8:f3:20:03:97:80:
78:11:24:60:30:a2:9c:fa:cd:a6:06:46:8e:a9:9f:
7e:15:15:e0:6f:fb:49:18:ab:c7:0a:03:f8:bd:b0:
ee:b8:6f:8f:71:7c:21:b6:7f:da:ad:1f:f9:ec:6a:
99:f5:f8:94:88:d7:a0:20:4e:29:46:d0:ba:e4:4e:
dd:1f:2e:56:1c:f6:1a:69:d7:ca:b3:af:49:99:d6:
9e:6d:88:81:8a:f5:90:6d:90:b5:5b:56:0e:3b:58:
64:a2:10:b4:ef:17:7d:bc:7d:d9:f7:85:b4:99:00:
a7:e0:09:a2:ed:9d:75:bc:c5:f7:0f:8a:6f:89:a2:
48:85:b8:3a:fb:87:64:53:a6:ce:3e:9d:1f:ec:02:
32:79:c2:11:8c:16:ba:34:fc:8c:90:01:27:3e:e8:
dc:7c:2a:3f:39:7c:df:47:b1:1c:23:f2:43:22:27:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.80.0/21
IPv6:
2a10:8e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42176
Signature Algorithm: sha256WithRSAEncryption
81:a7:8b:f7:8d:f8:bb:33:b9:29:75:f4:72:03:11:82:71:73:
fb:05:70:98:d1:a2:04:24:22:e9:d2:b3:49:6c:45:bc:b8:7a:
15:23:20:d8:85:b2:96:7c:73:47:70:a3:b1:32:46:7e:cd:a6:
3c:4e:05:3b:cf:a5:d1:c5:e5:91:2c:d2:dc:c5:bc:e8:8c:eb:
c0:40:d7:d9:13:a2:45:5a:c0:ab:53:9d:5a:e4:ac:13:1c:6e:
ea:f5:5c:de:6e:ad:66:f2:19:a8:ca:9f:2b:cb:2f:a9:5c:f4:
63:28:7f:a7:a5:03:3f:dd:bb:37:6d:db:73:71:51:36:41:a1:
f8:df:59:d9:39:56:32:a1:b3:db:92:c6:d8:1c:fe:45:57:fd:
cb:df:40:31:94:e8:e5:ba:99:40:5d:13:fb:d9:6f:e3:a1:07:
b7:a7:7a:dc:9e:80:08:28:14:5e:37:82:3e:aa:95:57:56:5b:
8f:dd:b1:1c:7d:51:8c:c7:01:32:e2:22:59:88:80:d4:76:68:
f7:1e:0f:ba:b2:6b:26:d4:3c:8f:0a:de:ed:b5:c4:c8:33:9a:
05:be:6e:b9:d3:cc:6f:9c:0e:5c:61:25:cd:51:1b:de:47:30:
3d:51:c4:d6:6a:32:b0:bd:80:b1:a7:ef:43:1f:2f:15:9e:3a:
d7:7b:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:31 2025 by rpki-client