Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.cer (raw, json)
Hash identifier: Xip0rYevBFKz/XcbF+Ao627rqPJf1K7B5LehB5Yrq34=
Subject key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5F074DD0135D578FA4D725AB8D772
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.232.98.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f0:74:dd:01:35:d5:78:fa:4d:72:5a:b8:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:77:2d:95:9f:65:cf:85:87:4c:96:0c:31:
0e:dd:49:8a:8e:13:ae:e3:2f:51:dc:c4:9e:b2:0a:
30:41:c2:e8:df:78:47:ca:55:83:af:a1:2c:bd:a6:
31:3e:8b:4f:f2:bd:ab:03:34:62:97:74:9a:9b:4f:
65:97:2b:70:91:06:02:b2:53:ec:52:e0:bb:4b:fb:
21:65:10:e7:4e:eb:1c:1d:2b:b0:7e:2e:9f:c4:e8:
c2:da:bf:45:d1:56:b8:2a:2a:10:bb:04:1a:a6:76:
88:55:de:b1:22:02:d3:bb:43:59:5c:15:d3:fe:c0:
fd:1b:67:71:dc:dd:ae:e1:32:ce:69:0c:a4:71:2d:
b5:e8:f2:84:f5:56:80:53:65:ac:8f:0e:be:25:e2:
1e:9b:d1:6b:0e:5c:a1:06:07:a4:62:44:52:9c:03:
d0:29:84:4b:3a:62:ae:b7:c1:c7:9b:82:a4:76:b4:
cd:3a:1f:46:e5:f8:7d:37:ed:ef:bf:fd:de:ed:51:
42:88:17:19:08:a7:81:9c:e3:b0:2b:fc:f4:fc:3b:
f0:a5:a5:04:db:e0:64:51:d7:50:9d:0f:89:6d:5e:
ba:1a:17:b6:88:d5:24:51:1e:58:4a:9e:4f:6f:1d:
0f:c1:16:ff:cf:16:68:b8:58:86:7b:9d:72:54:2d:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b8:48:87:e4:a7:33:82:cf:f9:8d:17:0b:ca:1b:b1:e9:0e:
4a:33:7f:5e:9e:62:7c:d0:d2:96:9a:52:c4:f4:f6:24:ef:67:
e4:9b:b2:36:05:44:a8:48:8e:19:bd:27:ae:c3:f5:85:71:87:
09:11:92:a7:de:07:c6:c3:f6:0f:9c:7d:44:ca:c3:22:32:55:
2f:8d:47:61:8b:c3:7b:02:cf:ee:01:1b:f6:ff:e7:2c:a0:d2:
11:a9:31:16:e0:14:92:22:bb:d2:d7:e7:6c:17:4c:5d:76:06:
d6:69:c0:10:2a:2e:56:45:74:ff:7d:d2:3b:6f:41:c0:4d:98:
78:da:51:54:c8:d2:c7:27:6d:87:e9:08:25:b9:43:e8:2f:98:
f1:db:f7:24:b6:3c:fd:be:54:33:0c:15:f3:8b:1a:58:df:1f:
d4:eb:c7:e3:26:0f:69:a0:c2:76:1a:8a:a2:46:9a:95:fe:da:
de:1d:f8:16:02:36:0e:c7:e9:33:de:14:12:63:46:5c:db:9f:
ff:d2:a5:6a:a0:f7:b2:31:c0:ab:fc:41:59:a7:fd:22:30:73:
fa:e0:d5:b2:68:f0:68:b5:d8:6d:f7:e0:a4:9c:dd:48:ba:bb:
0a:f8:3a:be:58:d1:e6:d9:e3:aa:23:a9:48:c7:c6:66:7a:b9:
c7:86:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net