Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
File: 7edmLVl_r8lt12VXdQjD7QKdZWc.cer (raw, json)
Hash identifier: 3kqVQoOS/oFS8gUMaTDkZho7ApM1U9R+Z3dz0O7VGRY=
Subject key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D771302AD32EF7846CD3DA09616757
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44205
IP: 45.8.120.0/22
IP: 45.144.180.0/22
IP: 185.115.120.0/22
IP: 2a06:7600::/29
IP: 2a0e:8900::/29
IP: 2a0e:f340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:71:30:2a:d3:2e:f7:84:6c:d3:da:09:61:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ede7662d597fafc96dd765577508c3ed029d6567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:d2:51:9c:23:60:30:47:47:97:9d:d7:4c:
da:9c:15:cd:3b:99:24:7c:bf:1a:ef:41:7c:f6:7e:
35:f1:86:1c:2d:59:ad:16:bb:7c:f2:35:e1:a9:5e:
5d:ce:2e:8b:6b:ce:d9:a6:38:ea:44:3e:df:48:83:
78:40:06:33:a9:58:55:d0:63:03:b1:7f:36:51:eb:
35:6a:53:bb:06:bc:8f:ec:3f:94:d1:61:a5:33:e2:
aa:c7:03:12:d3:8c:93:06:c8:27:2a:6e:6b:11:da:
88:5b:6f:3c:30:65:dd:72:f7:62:95:2f:e6:67:67:
de:e8:84:3e:f9:81:f4:80:a7:90:d3:23:70:d8:7b:
11:13:66:a1:a0:07:fe:5e:a8:85:a5:ae:a5:a3:4f:
4a:60:f9:14:13:2a:f4:bf:26:f0:ba:76:4e:97:a2:
b3:85:82:03:31:38:e4:7b:38:e3:6c:51:be:58:0c:
21:4a:b0:96:d6:49:bc:36:fe:3a:12:c9:1a:0b:23:
0f:dc:d4:5d:84:7b:e8:06:95:e2:cb:87:27:9e:b7:
c3:9e:2f:2e:5e:89:3b:d1:2c:4b:f1:28:ad:49:3e:
2e:61:54:aa:e6:1c:10:20:aa:8b:2c:5d:47:ae:30:
82:0b:87:78:86:2b:52:1d:c1:b9:3e:20:bd:1f:af:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.120.0/22
45.144.180.0/22
185.115.120.0/22
IPv6:
2a06:7600::/29
2a0e:8900::/29
2a0e:f340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44205
Signature Algorithm: sha256WithRSAEncryption
0d:7c:fd:4c:f6:9e:66:96:be:26:9d:45:b8:bc:ef:95:ab:26:
2b:e0:da:d6:33:69:c4:7e:5b:cc:f9:fe:49:ad:1a:4e:f6:9a:
5d:0b:8e:69:80:71:c4:c1:f6:d1:14:ac:cf:68:66:dd:f5:ce:
b6:01:42:48:69:4a:ab:e1:ed:e3:46:b1:31:5b:2b:22:48:eb:
59:3e:b8:cf:48:72:61:2c:82:f1:7d:c8:df:9d:66:3b:a5:3a:
18:d1:b3:1e:3a:0a:46:60:c1:0c:07:63:1d:a3:4d:01:f9:5c:
5d:bf:56:15:68:0b:62:3b:c3:a7:d3:52:df:dd:99:5f:ff:97:
2b:92:cb:6a:c0:a9:b9:15:e2:bc:97:07:7a:29:42:0b:99:e5:
c9:30:83:27:5a:13:8d:24:1d:e1:4c:65:5e:90:15:f8:e7:01:
7b:6c:c5:ae:22:f2:47:c3:51:74:52:16:e8:5d:11:3d:2e:30:
43:0f:7c:04:40:ba:48:02:d6:70:63:53:7a:d1:bf:5e:97:76:
04:90:99:12:52:40:b0:92:4f:72:73:44:96:0c:69:86:dd:db:
1e:e4:2d:36:d4:01:f5:73:ef:71:9d:17:8d:cf:d1:92:6f:cf:
1f:c2:08:a5:eb:4e:64:77:d7:11:48:95:e4:b0:0b:69:d1:b0:
73:05:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net