Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.cer (raw, json)
Hash identifier: 5R/19+tlnRx9PyrlGmGNKHknGz/wegSQU52G2ou4nBU=
Subject key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BBFAA301D5BDDB991AADC4ED843D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207590
IP: 94.154.1.0/24
IP: 2a0f:f3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bf:aa:30:1d:5b:dd:b9:91:aa:dc:4e:d8:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:e5:6b:00:88:0e:31:cb:94:c9:a5:89:e9:
13:a2:69:f8:d6:aa:7b:c2:b8:40:18:c7:b1:3a:e7:
f2:1e:1f:49:ce:af:41:e9:95:d7:71:31:33:c4:de:
cc:7f:69:20:20:e2:b4:12:5d:53:97:39:43:5e:03:
37:0c:cc:70:f2:66:dc:4f:a3:60:f7:26:16:1d:94:
7d:9e:77:5b:f4:ab:53:c6:66:55:c4:a2:b7:f4:41:
53:60:aa:d1:9d:3f:5b:39:ee:76:09:d3:79:73:ca:
98:a9:cf:98:ca:ea:18:33:c1:68:7c:68:16:e4:5b:
c0:b2:d7:cb:ff:dd:15:a9:2d:0d:86:9b:a1:2b:e9:
a2:12:dd:b9:fc:4c:7b:dd:b5:ff:2c:ab:cf:2d:b9:
9b:9e:53:15:9a:48:a9:a6:31:03:79:d1:9c:31:7c:
11:7f:cc:8e:77:91:25:85:49:ce:d3:1c:be:fc:53:
d6:47:e5:37:6b:4d:2e:0f:47:1e:90:eb:11:1c:2b:
34:80:0b:a2:1d:b0:e3:df:27:71:81:e6:77:ff:fb:
a3:5f:12:6c:c6:05:71:f7:7a:15:07:42:0e:95:1a:
b3:b9:52:d8:ba:69:be:0a:17:80:cd:8f:40:36:a0:
0f:37:77:aa:34:6d:07:3f:d2:ba:fd:05:70:47:85:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.1.0/24
IPv6:
2a0f:f3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207590
Signature Algorithm: sha256WithRSAEncryption
76:39:c3:41:fa:2f:49:50:3e:4c:de:53:17:13:6a:d2:05:7c:
8f:64:f4:4c:0f:d4:20:98:3c:cf:a1:4e:1a:3b:2b:81:2f:8e:
0b:d7:0e:73:01:ad:30:28:8c:6f:92:f0:22:24:25:61:f6:11:
55:99:74:57:74:7d:ec:4d:92:15:18:46:1a:83:f2:eb:c0:d4:
91:dc:cc:29:9c:fa:d2:19:f2:45:ec:74:b3:e9:e0:63:9a:be:
fc:de:69:7c:59:89:fc:86:3f:60:94:a9:17:23:94:3a:3c:aa:
5a:22:da:5e:a1:31:d7:5b:72:69:b8:14:7d:86:bd:18:19:68:
22:c9:ba:41:99:ea:04:5a:19:f5:f8:59:42:94:46:a5:32:bf:
5f:8c:2a:b3:55:1e:c1:6a:f1:bf:e3:72:82:2b:ee:24:d1:b0:
ba:a1:92:72:c6:97:10:a8:0e:4a:44:b1:c7:d6:23:14:06:cf:
bc:88:98:b1:7d:63:0d:b7:5b:d0:7c:4a:92:d7:fa:85:60:71:
9b:75:1b:d4:00:8f:b3:f4:c7:bf:bc:6e:02:14:8d:22:fd:4e:
6c:28:91:67:7a:4a:8b:66:4e:18:14:5d:3f:78:af:25:d8:7b:
9d:97:ce:be:c6:80:aa:91:d2:06:97:88:5e:95:4b:7c:49:51:
13:ff:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:13 2025 by rpki-client