Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.cer (raw, json)
Hash identifier: YQB2MbyqaVOXSAUYIFHtbnEO+Obr68NYzm+a/Hj94RI=
Subject key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143FEA8271AE26A5B7578999D6225DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.38.4.0/22
IP: 2a09:1a80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:a8:27:1a:e2:6a:5b:75:78:99:9d:62:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:44:0b:96:fc:2e:f7:7f:97:11:fa:78:31:
7a:2a:cf:55:40:ce:b5:a3:e5:0a:00:7d:94:ca:60:
27:35:91:50:5c:20:9e:aa:66:7f:09:b3:1f:26:34:
e7:b0:1f:83:de:6c:ed:f9:97:71:d1:9b:a6:82:bc:
b8:4e:02:90:7e:76:81:7c:54:23:a0:24:25:88:b7:
16:f2:fa:ab:5b:d6:41:09:9b:70:5a:a3:bd:cd:f6:
b6:6d:83:aa:24:e8:51:a9:84:32:d5:53:4e:cd:c0:
e2:35:85:c5:a8:d8:9b:86:d7:c3:98:4e:11:4c:e5:
29:eb:3a:cd:65:6b:7c:6d:5a:36:95:2d:b0:50:22:
cf:e9:91:98:7f:65:21:a2:46:08:7a:3a:2d:ef:11:
28:8c:9a:30:ca:ac:70:00:58:96:e8:23:3b:d8:23:
84:fc:7f:39:63:2a:ce:30:df:38:d0:fc:3d:dc:ed:
d8:15:21:83:fa:ec:4b:ca:6f:57:f0:62:0c:4e:e8:
52:24:87:4b:a8:20:ec:6e:05:39:04:51:a3:d3:63:
9c:09:3a:2c:df:bb:aa:7b:d0:b9:24:d9:d4:d4:68:
4c:e0:41:1d:f1:00:dc:cc:ac:e6:45:4e:2c:49:fa:
90:20:62:5e:75:49:9f:10:5d:79:1f:31:a5:18:ba:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.4.0/22
IPv6:
2a09:1a80::/29
Signature Algorithm: sha256WithRSAEncryption
20:f5:a9:8e:ae:a2:e7:54:b1:41:48:37:c4:04:fc:7e:64:31:
d5:0e:c0:d6:96:7f:44:e8:66:a2:c9:95:0c:d3:17:c2:b9:a7:
43:42:9e:df:51:99:6c:bd:b3:82:c3:e6:03:a6:c0:c0:34:2d:
75:07:a3:32:92:34:bc:80:0d:06:d4:c4:48:3e:13:5b:f1:c7:
c4:79:8d:69:4a:d9:22:4c:7b:d5:47:82:0f:2b:c4:41:8d:53:
6f:4a:8d:61:68:ef:06:a2:80:dd:02:33:fc:32:02:64:56:2d:
db:0b:65:65:c1:2b:8c:ee:0b:ad:e8:c0:a0:15:41:03:0f:ef:
ec:ab:94:4d:6f:aa:46:62:b6:f6:e9:66:b9:65:c1:da:6f:03:
65:c4:8c:b9:eb:8f:99:2f:8b:a7:6e:2a:d4:2e:30:6d:5e:34:
62:10:1a:58:11:52:69:3a:a7:7a:50:a5:69:9e:98:8d:90:43:
51:e5:2f:41:6e:59:fa:c6:2e:fe:2b:d6:5f:1a:6b:77:40:5d:
c2:57:78:6d:ef:08:38:5e:72:96:87:c4:d2:70:7c:66:ef:b5:
69:f2:0d:33:53:e4:4f:64:af:bb:70:92:4a:a4:5c:cc:45:1d:
b6:08:8e:3c:88:4d:1f:cd:9d:7b:15:65:db:26:b1:05:c8:f3:
1c:92:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net