Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer (raw, json)
Hash identifier: jfzhLRmqV3mapAi+RMu1RjTAkEyLzP5tl1hyuEi/qMA=
Subject key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444837EECEDC916BE9A42DF85F7BC1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 138.248.0.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:7e:ec:ed:c9:16:be:9a:42:df:85:f7:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:e2:00:53:ce:d8:b8:5e:20:26:da:0b:f9:
7a:86:3f:ee:19:07:7c:3f:0a:36:4a:fb:12:1f:21:
c7:6e:53:88:04:f8:c8:24:b7:27:14:1c:b8:c1:4f:
49:4c:26:05:8d:16:b8:39:bf:a9:9a:c9:d0:de:9f:
32:c7:c9:c1:0f:cc:ce:e5:1e:22:62:ed:19:9e:91:
c6:db:6a:54:56:de:df:c3:5b:75:b1:8a:b5:c8:91:
2a:f4:b3:5f:16:50:0c:a1:54:ce:ca:01:65:08:9d:
a5:89:5c:f5:df:c0:84:89:e7:25:4d:e9:29:7a:7a:
14:dd:8d:8e:65:32:f4:11:e2:af:3d:b4:8d:97:90:
08:29:0c:75:61:62:47:9d:c2:90:a2:70:23:2a:b2:
b4:e7:ba:7b:6c:53:0a:e2:f7:f4:5c:2e:7e:5d:d4:
3e:9d:06:d0:49:0a:1f:15:34:e8:49:96:9d:a8:c5:
11:11:ae:e8:84:a3:25:64:7c:1d:11:18:0b:5a:ff:
98:e9:f6:0a:84:ff:ba:b9:64:c2:dd:a6:b7:8d:29:
fa:4b:80:48:01:0c:ce:44:9f:77:9c:e5:ce:d0:e2:
a3:ac:ef:21:d9:6e:86:c8:ed:30:71:e7:b2:14:9c:
ac:9c:47:6f:e1:88:f8:9f:12:b6:b3:1e:17:ad:22:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.248.0.0/20
Signature Algorithm: sha256WithRSAEncryption
32:1f:a8:84:b9:c4:43:ff:fc:67:d2:68:7d:a2:19:8f:b8:50:
9e:cb:a6:bd:13:ee:8c:ed:c7:43:2b:90:c5:b1:d7:87:3b:75:
96:25:a8:82:2c:0f:a3:13:7c:96:5d:42:6f:33:13:74:49:37:
45:a9:2d:aa:e5:9e:be:c3:6b:79:1e:75:f4:cb:45:21:db:0e:
e5:dd:2e:8a:7f:fd:b6:5f:78:64:24:f4:1e:ad:00:27:81:34:
19:8e:fa:a1:33:94:19:22:86:9e:16:ad:2b:7b:de:c7:a3:1b:
01:78:42:db:ae:bb:fc:6c:0b:6c:26:b3:ff:3a:69:7e:8b:f8:
eb:91:b1:34:f7:61:6c:55:d7:a5:df:28:e8:60:07:1a:fc:02:
a8:33:b7:95:86:36:74:3a:37:fb:be:c9:ac:84:71:09:d9:79:
ec:19:9e:e7:92:23:f5:37:e0:ef:d8:47:0b:c7:20:2e:e0:0a:
7a:41:68:af:a4:a4:19:9d:eb:db:a4:a6:b9:c1:6f:26:95:d0:
f1:7a:fd:a1:9b:a6:b5:b4:ea:25:2a:ad:f5:34:35:69:87:6b:
11:d8:7f:88:40:c7:44:47:19:59:32:c4:ac:8a:a0:4f:20:9d:
e2:99:9c:87:6d:15:7d:81:1c:75:9e:de:7d:32:19:27:7e:7e:
aa:1b:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net