Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
File: x0heKfEYwBvobBnmaPrPpIXecYw.cer (raw, json)
Hash identifier: epUAsMCKAO1b7oM0IfQoemn8kBnXSs0jFGDaDCsvcy4=
Subject key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B65CC0F471E311CB0D17DA142A887
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44472
IP: 86.111.52.0/23
IP: 185.43.147.0/24
IP: 2a12:c440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:65:cc:0f:47:1e:31:1c:b0:d1:7d:a1:42:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7485e29f118c01be86c19e668facfa485de718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:67:81:c0:1f:14:b5:fe:50:17:e4:bf:7d:
26:22:25:e9:4b:65:6b:42:2a:57:13:e6:1c:3d:d2:
35:6d:64:1b:56:05:bd:d9:a8:51:0d:1a:d3:18:e8:
c4:b0:e2:45:80:e7:32:c3:52:c0:62:b8:6e:1f:20:
5a:7e:10:ff:f4:1a:6c:33:33:3c:04:09:a1:e0:55:
21:75:71:a5:72:52:74:6c:41:bd:30:08:f2:1e:1c:
b0:5c:72:6e:e6:c1:0a:01:24:fb:55:14:6e:67:04:
f3:ff:10:a3:35:d7:68:cb:3a:e7:5f:d2:4e:f1:9d:
b4:1d:1a:fb:f2:c4:d8:43:43:51:d6:95:7e:ce:a8:
5a:c3:bf:c0:9f:65:83:f3:c7:20:30:e4:1a:7d:52:
56:a0:5d:e7:aa:20:73:13:cf:f9:bc:c2:99:bd:a0:
0c:1b:33:a1:d0:99:30:82:c6:fa:59:98:a9:ee:0a:
c6:54:ac:4f:0c:68:51:65:cb:7f:a3:9c:f1:7c:33:
fa:4a:0d:84:5f:de:05:43:84:1b:44:97:72:41:61:
2a:ac:ec:80:4c:3c:29:f1:0b:ed:82:35:f6:57:44:
f2:cd:54:61:6d:a2:04:c7:e6:19:5d:62:d8:e8:0b:
85:35:b4:a3:61:1b:50:63:29:77:73:f6:c5:c1:2e:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
185.43.147.0/24
IPv6:
2a12:c440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44472
Signature Algorithm: sha256WithRSAEncryption
9f:78:3e:1b:08:c9:ae:8a:ea:93:ac:df:cb:63:b7:f0:13:4a:
d5:08:39:df:1a:76:61:a9:b0:02:26:21:de:43:e5:c3:16:5a:
b9:02:bc:57:4c:fd:5b:57:c7:2e:62:f7:11:6c:97:89:d2:44:
0a:73:7e:0f:d0:8a:9c:ed:11:b8:ee:15:b0:6d:1f:a7:08:c6:
f9:b6:81:24:16:5a:ed:e8:7b:93:27:86:a6:a5:94:14:9f:a1:
45:70:a7:c1:76:36:01:d6:b3:5b:4e:e8:08:10:04:d5:5b:6c:
09:fc:5b:a8:59:fb:f7:3b:36:27:fd:54:db:3f:94:92:87:13:
dc:39:b0:01:b1:52:76:62:e6:41:5e:07:2e:31:21:7b:98:4e:
f8:f4:01:9d:ee:13:a8:66:9a:af:fa:94:29:3c:00:3a:c5:d1:
5f:87:b3:48:40:e0:b3:35:92:be:70:67:f8:c2:af:64:e7:12:
a5:ef:07:3a:a2:06:b3:14:f8:1a:b3:03:e9:20:0a:61:c8:87:
3f:be:7f:cd:78:20:b0:f4:12:73:f1:c9:c3:8c:00:8f:b1:2b:
ca:0a:c8:7f:4e:6a:b3:44:ef:ad:25:80:b7:a4:2f:49:93:fe:
4f:0a:47:2b:03:bb:ea:e3:53:e8:64:27:04:36:cf:02:43:a2:
9b:f6:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:17 2025 by rpki-client