Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.cer (raw, json)
Hash identifier: dSxsD91teabCPQiBU+EpwscsBZrtLjZL9InGu+qabH8=
Subject key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252152BD383329D172BB66770B0BD5BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.183.151.0/24
IP: 193.161.200.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:52:bd:38:33:29:d1:72:bb:66:77:0b:0b:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:b2:99:82:21:0f:9e:86:17:b1:b1:af:94:
1b:a9:02:79:a6:ad:31:8c:bf:7d:e7:4c:c6:20:90:
26:e3:d9:99:75:43:5c:f7:6a:cf:0e:bf:f5:ec:81:
5a:f8:ba:8d:c1:cd:e1:98:90:e0:26:9b:de:83:50:
db:7f:4e:75:cf:b1:d5:a2:d5:f1:d7:6e:77:10:89:
0a:a6:22:c6:71:60:7c:84:3e:b4:ac:5c:e5:07:67:
a5:0f:d1:c0:8d:38:91:c0:f8:a0:b8:9a:2b:c6:1b:
6d:30:88:01:0f:df:56:c3:e9:e3:8f:84:0c:b6:b7:
a0:52:90:c0:cb:d5:aa:92:49:bd:c4:90:25:94:29:
a9:37:77:c2:df:b3:02:df:20:28:c3:ea:e9:75:ac:
05:96:d6:bb:da:97:31:bc:6b:e0:2d:74:b7:b8:50:
db:73:8d:03:cd:c1:a9:fa:8f:4f:c8:71:5e:96:cf:
96:88:9b:a0:be:db:e4:25:10:66:77:95:09:e1:0d:
9a:09:ba:38:9d:b0:26:48:17:5a:84:95:3f:f6:12:
de:9f:4a:d8:20:ca:2c:e7:26:98:6b:a6:15:9f:32:
2b:38:7e:df:71:d2:a7:75:b3:2f:21:c6:91:71:92:
61:31:1b:9b:12:00:c7:c2:9a:91:10:a6:a1:ef:d1:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.151.0/24
193.161.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:67:ab:ae:69:ab:f2:46:42:56:d3:4b:ce:ec:d1:69:af:47:
96:88:72:cb:a7:ec:c8:1e:0d:64:a8:dd:53:2f:8a:ea:f3:9a:
7b:ef:16:08:9d:83:f1:43:41:0c:1a:f4:1e:9c:4e:e1:9b:39:
4d:95:ba:fa:b4:1f:3d:bd:05:6c:98:68:0d:21:fb:47:d4:b1:
04:86:32:cd:cc:46:4d:c5:ff:6a:e6:76:bf:98:0c:20:ed:9e:
f8:4c:47:b3:c0:7c:d4:59:a9:91:75:ec:7e:8b:52:b9:62:2b:
91:d4:0d:7c:29:f8:6b:6f:ef:fa:57:ab:9e:48:23:08:08:c4:
3b:c6:89:12:cf:ec:87:f6:92:6a:a3:cf:93:5c:c9:72:22:ea:
dc:27:90:08:d2:c4:4d:4d:49:5c:27:c0:9e:ae:b8:95:0f:72:
ec:22:f3:e4:89:e3:21:d2:28:ec:bc:17:c7:86:93:7a:9d:d9:
81:23:fd:34:05:af:36:09:42:d6:ba:b3:d7:e4:23:4a:8b:49:
af:2d:dd:67:6d:be:c9:f0:27:5f:14:a6:3d:c3:a7:e3:91:13:
89:3b:e5:1e:ee:72:72:a3:72:ff:a2:9d:e7:f2:46:14:8e:b9:
5c:6f:c8:b6:a8:a9:9f:b0:b4:03:b2:ac:6e:47:d6:d6:87:60:
fb:9c:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net