Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer (raw, json)
Hash identifier: atWPzGX4m+IyCvIhnuxS9JioretCej0PeyJkeItTBjw=
Subject key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D75CF3C6D6AAC06A9D04475199B611
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.133.28.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5c:f3:c6:d6:aa:c0:6a:9d:04:47:51:99:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:ad:76:b5:77:cf:50:4d:d0:55:c4:21:16:
10:c7:49:f6:01:73:3d:0c:45:09:ea:d2:96:05:f8:
13:d6:a9:82:f6:ab:60:cf:96:16:98:6f:3f:a7:71:
7d:69:2d:4e:e0:cd:95:54:ce:b3:f6:2e:0e:ad:12:
3e:b1:96:f8:e5:28:7a:e8:54:ad:b1:db:e4:c7:a2:
07:2b:10:e7:50:7e:de:c1:91:bb:2a:88:9d:65:bc:
16:57:16:c8:1a:de:5b:60:f5:a8:b7:78:35:ab:1d:
a0:0b:16:f7:29:58:40:d4:3e:d7:32:12:16:39:b1:
13:07:51:b6:44:b7:d5:d9:32:28:3a:f4:3f:69:36:
ec:8f:62:32:04:92:b2:d8:54:ed:37:2f:2e:24:b9:
76:02:ea:99:8a:dd:79:f5:6a:cf:81:3f:56:a8:49:
1f:af:17:d0:c1:54:af:f3:b6:07:37:f0:c8:dc:b6:
dc:19:fd:39:81:04:60:06:ae:b5:6b:cc:85:77:87:
a1:e1:3c:c9:be:64:aa:05:30:46:82:a6:2b:ae:45:
eb:87:b3:28:96:3c:30:7e:99:43:a0:80:b8:07:e4:
1f:1c:3b:ce:9a:e8:07:d1:87:6e:5d:66:d0:fd:d6:
46:96:13:b6:ef:3e:b2:39:74:bf:91:83:f3:61:b9:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.133.28.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:18:13:50:ea:62:e8:5e:4e:11:40:6a:75:fa:0e:39:0c:45:
2a:56:7a:a5:85:b5:68:e9:97:cd:20:d7:58:4f:e1:62:2c:fb:
ef:c8:da:28:b5:8e:3d:89:c7:ba:da:a6:3b:24:c0:45:02:d1:
b9:3f:77:0c:24:72:af:0d:78:a7:cb:5e:b6:32:0d:22:76:c5:
65:67:07:bc:14:75:2b:86:87:46:20:5e:3f:55:12:f2:43:1f:
39:75:d8:8d:7b:91:7b:0b:3b:05:7c:bf:62:a5:b0:ce:2d:c2:
6b:72:9c:41:2b:db:a8:22:ce:be:e2:5c:72:94:ee:fb:0c:9b:
eb:ca:5a:0b:d7:36:3b:f0:9f:af:bc:cb:12:e8:64:82:48:cc:
2a:35:27:a3:6d:fa:d4:58:fa:7c:4f:b7:e8:34:a9:1d:ba:78:
00:37:a7:10:f7:9e:2f:b1:ac:36:19:b2:c8:5c:34:de:c8:ba:
4b:4e:03:af:45:30:ca:a4:c3:94:f9:da:ea:14:b1:f7:b6:ed:
f8:2f:a8:ff:d2:44:af:ba:ad:6b:ea:00:a2:e1:dc:0e:be:96:
39:67:b4:5b:41:f7:a1:c2:e9:80:46:7a:cf:f5:b2:c1:be:ef:
84:1d:dd:a3:94:84:4f:ca:76:bb:7f:90:4c:4b:d0:1f:a7:34:
64:a9:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net