Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer (raw, json)
Hash identifier: 58s389kyHz0zcVog5phAV3uqgH65finBaxPXHwDdT1c=
Subject key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D3C5D6965006DD3ED69345330F5A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.216.109.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3c:5d:69:65:00:6d:d3:ed:69:34:53:30:f5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:2a:e5:63:c3:6d:23:7a:1f:db:d1:d2:59:
5c:e9:b4:84:ce:c6:c9:b4:6e:71:ec:71:73:b8:ec:
1c:04:1d:e4:84:c3:46:10:6a:98:14:1c:f1:67:85:
a8:85:94:69:74:bf:98:08:9f:b4:b4:13:61:75:be:
4d:7b:f5:58:2e:63:5b:29:3b:08:e4:4e:3b:bb:b7:
6e:73:0c:16:a5:da:34:89:bf:9b:0e:a7:db:bc:35:
83:67:8e:fa:53:ab:a6:30:44:42:2f:5c:41:36:49:
33:6d:5e:66:5a:61:c8:4e:d6:d7:ac:0d:48:ed:bb:
ca:39:8d:b7:1c:8c:d2:c7:d0:06:f4:fe:7a:4e:e7:
b9:3d:47:65:0f:b5:bc:6b:79:84:64:a5:55:58:ff:
af:f5:e6:07:1f:5a:fe:6c:d0:85:18:4d:bb:35:38:
18:74:bf:59:a9:03:b1:51:12:61:b8:7a:ff:74:62:
5c:b3:98:b7:33:2a:a7:9e:0a:cf:54:d5:86:70:70:
38:27:71:70:8a:0e:0d:a5:7b:ce:b7:8f:e6:65:02:
80:db:a9:17:40:1f:eb:dc:86:74:6d:37:48:94:7d:
9b:17:cc:ca:af:34:22:67:3d:30:8f:f7:2a:96:95:
49:36:ed:a5:54:9a:c7:0d:45:27:11:0c:14:4a:c3:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.109.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a9:67:80:57:e8:a8:8b:f3:bf:0b:45:f5:51:cc:3f:72:4f:
72:60:7b:58:07:45:97:1e:c5:42:ad:07:cf:76:70:8b:63:e4:
5f:7a:91:23:1a:5f:75:1a:b3:75:b2:2d:03:a4:4a:33:8c:26:
98:f9:f6:72:3c:43:86:38:cb:a9:55:f6:66:05:ec:ef:c9:7d:
9d:78:dd:35:0b:cb:f2:58:eb:c0:e9:bb:b8:b4:38:ce:52:e3:
27:f9:53:71:eb:83:a3:c5:6a:74:a5:c8:d7:7b:03:75:54:08:
0f:b7:ec:d6:d3:11:58:09:c9:84:bf:b5:cc:db:7b:7c:57:c7:
11:61:d7:0c:dd:62:2c:a8:23:33:ef:78:7e:de:c3:28:03:48:
74:0a:a7:de:ed:fa:76:35:1d:3e:16:03:3e:51:d9:de:0c:69:
79:f6:e7:c1:25:df:59:55:83:13:6f:c2:24:6a:b1:c9:70:c2:
84:49:8b:cd:58:19:75:d1:1c:07:f9:4d:57:e1:04:a1:f1:ef:
e6:d1:f5:fa:f2:83:df:11:cc:f0:15:b2:07:6f:33:dc:4f:d0:
51:88:fe:17:e5:dd:a8:af:21:37:9d:d3:69:71:82:cd:4d:af:
67:f1:a3:1c:80:27:91:8d:58:a3:82:28:a1:60:94:47:85:c6:
34:dd:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:17 2025 by rpki-client on console.sobornost.net