Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.cer (raw, json)
Hash identifier: Y07ojEGwCD4StXNKAwDLfVart0QHcA069g/VUiWrFn8=
Subject key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2B7D1D10F7ED6974AE337E2949F00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42970
IP: 91.213.25.0/24
IP: 185.140.196.0/22
IP: 193.200.182.0/24
IP: 2a07:1fc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b7:d1:d1:0f:7e:d6:97:4a:e3:37:e2:94:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:d1:03:92:0b:53:19:f0:08:6e:a0:e6:87:
9e:28:ce:4e:1a:22:b7:70:43:54:4f:c3:65:e1:97:
49:18:2d:28:ad:47:00:7a:12:ec:b2:13:10:f9:13:
6e:d5:f3:bd:ba:fc:1f:af:81:b5:fd:6b:de:6c:c7:
1a:cf:5f:37:85:e4:ab:80:35:5d:c3:b0:fb:13:14:
c5:fe:68:ff:a9:9d:59:32:7c:14:8c:a3:98:2d:99:
c4:b2:fc:58:08:73:58:18:c1:0f:75:10:7a:4f:bc:
de:5d:fc:d0:4d:24:50:64:1a:ba:8b:45:65:e4:9a:
a9:ed:46:9d:7c:05:09:b5:0f:d0:8b:9b:ea:20:d7:
e3:55:fb:64:03:32:36:b5:99:1a:c0:21:cc:b8:b6:
59:bd:6d:0a:21:1d:90:aa:45:3a:b2:28:d9:15:4c:
cb:23:f2:37:02:7c:5c:8e:1b:76:cf:ea:95:f1:d3:
93:b2:b1:5e:d6:32:7e:8e:33:9c:b4:cd:fd:1a:d4:
cd:4f:77:f1:f5:2d:2f:51:e9:40:29:83:bd:ab:00:
70:b4:fd:0a:85:a8:68:41:6c:d3:61:c2:1b:80:fe:
55:21:76:c0:9f:5b:b7:63:88:65:d4:54:b7:50:63:
0c:57:42:3e:8e:c5:c2:81:20:95:51:ac:61:43:b8:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42970
Signature Algorithm: sha256WithRSAEncryption
0a:e2:11:cf:ed:c0:0f:c8:f4:54:8e:9b:73:ef:27:0a:16:7b:
22:c3:c5:40:85:db:e6:76:67:cf:c8:9a:ba:ba:58:00:c5:bf:
68:c6:e6:53:94:47:40:ad:6b:5b:e2:cb:05:0a:01:b0:50:ca:
15:83:4d:e9:d7:5c:3a:9e:1d:06:7b:b2:56:ef:ee:81:15:c6:
a1:e6:78:9c:47:8c:34:83:9b:1e:78:16:31:6a:7d:03:15:75:
bc:1d:91:40:3a:ff:6b:ff:c0:b1:39:90:fc:df:3c:98:5c:35:
3f:39:22:45:67:1a:08:8d:ce:4f:98:f6:5c:05:68:d0:55:4a:
d8:5d:b9:6c:64:8c:5f:54:8e:04:de:86:c1:b1:a8:bd:93:fe:
d6:11:a2:f5:aa:f4:9a:3d:c8:c8:ba:14:27:c8:bd:c0:6d:da:
65:ff:2e:62:b5:22:6e:d9:63:ac:b6:ff:c9:0f:3b:8e:50:b7:
8b:8e:81:96:ce:d7:ad:c0:6d:b4:d3:db:11:ee:74:d9:81:a8:
ef:e8:0f:fb:e8:07:46:10:7b:22:0e:4f:a3:a4:bf:2b:ea:f6:
c0:14:d4:be:fd:61:a7:b5:ee:db:ed:c4:86:3d:1a:25:c7:36:
79:24:fd:02:f2:6f:f5:92:c3:97:02:a3:24:5d:3f:ab:b9:14:
50:6d:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:30 2025 by rpki-client