Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer (raw, json)
Hash identifier: USX7j15P4+eRxGZCQLShjwRAbdHFLmU6FRayaAalikk=
Subject key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DF572271AE5843669A36B8D8B1269
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41872
IP: 37.110.200.0/21
IP: 37.209.176.0/20
IP: 81.92.96.0/20
IP: 91.190.0.0/19
IP: 94.100.144.0/20
IP: 94.198.248.0/21
IP: 185.161.20.0/22
IP: 212.35.0.0/19
IP: 2a02:6500::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f5:72:27:1a:e5:84:36:69:a3:6b:8d:8b:12:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:58:42:4a:e2:50:6b:00:91:fa:08:79:f7:
b2:c7:f7:af:5e:ed:49:a2:19:a0:0f:8c:eb:df:d2:
e7:b8:4c:b3:d1:19:cc:e0:e9:41:a3:96:7f:08:a9:
cd:1a:dd:6e:f7:19:21:47:25:3a:9a:00:1b:c2:ec:
ab:1d:db:48:5f:ce:d5:9b:8d:17:56:3e:80:a3:0f:
63:7f:2a:2a:77:d1:fc:52:67:26:59:d3:0e:19:8e:
42:36:04:c7:6e:9e:d5:a0:e5:32:e5:bd:7a:a2:bd:
cb:95:57:00:91:28:61:82:78:92:bd:ba:70:3d:92:
41:42:86:8c:8f:32:e1:52:ce:e3:27:a2:ab:15:ad:
a1:14:fb:db:e5:72:3b:63:cf:e8:1f:a7:fa:4f:dc:
9c:ce:77:b5:01:a1:0f:5e:ab:1d:fa:ac:35:84:4d:
1c:5c:d4:af:a4:c2:49:2a:0f:11:07:e7:73:20:ba:
db:bb:84:0b:12:12:81:54:11:b9:2d:07:11:9e:6a:
09:a6:90:2e:ff:22:76:ca:d9:66:3e:16:ae:77:1f:
63:50:f4:93:8f:22:92:12:ab:65:2a:df:02:f1:8f:
77:b8:4f:3e:15:46:0c:32:2c:c6:b8:c9:27:21:5f:
1f:4a:3f:a2:77:66:0f:5b:39:f3:30:d6:d6:3b:e7:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
94.198.248.0/21
185.161.20.0/22
212.35.0.0/19
IPv6:
2a02:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41872
Signature Algorithm: sha256WithRSAEncryption
2b:f4:08:74:bc:7e:10:91:d5:75:d7:b0:fc:f1:cf:2c:62:21:
b0:07:30:ec:b5:18:1e:73:f5:cc:06:ad:a1:a4:13:37:a4:f7:
21:6c:c8:25:4d:fb:c0:c2:cf:52:a3:df:58:e6:a2:7e:6d:af:
05:f9:ee:00:d2:64:6c:88:3f:9d:f6:cc:83:cd:3f:e3:cf:6b:
0b:1b:1e:fb:3b:16:42:44:1a:43:b6:bf:d8:ba:39:36:e7:b3:
ac:0b:ed:39:b2:2e:6b:23:99:52:a1:3a:9b:47:89:3b:b5:0d:
d1:4d:ed:8f:29:6e:7f:8b:91:85:3a:e5:7b:5a:b3:c4:4d:e4:
cf:5a:6d:65:24:30:62:d8:45:26:ee:57:91:45:41:c0:0e:d1:
c8:c2:46:9e:7c:99:4e:9b:b5:23:1b:5b:b2:69:e0:a2:b2:3d:
ae:a0:c6:fa:de:54:ca:c1:18:52:e8:64:23:26:90:f7:8c:bf:
5e:ac:73:43:e8:5e:e8:1d:67:1a:f7:9c:29:27:58:ab:d6:0e:
b7:d5:a3:5b:8c:f8:39:d8:0d:b2:03:b1:ec:41:fb:b6:2c:7b:
b3:82:fb:2d:67:da:09:77:1e:e0:0b:f2:81:9b:0c:98:db:37:
e7:03:3d:cc:b4:da:64:30:97:f7:3e:49:2e:36:00:a7:5b:e7:
23:54:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:47 2025 by rpki-client