Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
File: lSCTFQ9KRhAazX6jomu0OFExI7U.cer (raw, json)
Hash identifier: xzjvhA/stVoQ2/IJ9fOFLzUI5IOuxOj6hjqZQMVz2xg=
Subject key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A0D935B720B2890F51EDAEEE9669
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.113.208.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:d9:35:b7:20:b2:89:0f:51:ed:ae:ee:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=952093150f4a46101acd7ea3a26bb438513123b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:b9:70:13:7f:a7:20:5c:af:52:5e:b8:7d:
94:79:35:b8:02:eb:86:25:37:bb:59:0f:12:bf:7f:
99:cf:eb:14:71:a7:5d:45:d4:c7:4f:4e:96:ce:4f:
3f:66:b3:68:5e:15:20:52:38:45:1c:f3:48:69:7d:
a8:0c:d7:4a:0a:cc:c2:16:5a:29:08:3f:33:64:4e:
f1:10:a9:26:cf:94:d0:a0:3b:af:9d:72:30:5e:c5:
28:93:a2:f1:b0:c3:72:f6:a4:9f:e2:8d:bd:f3:3a:
66:70:76:b0:94:da:1f:b4:bf:6e:69:5b:23:2a:9a:
42:78:3a:9b:96:45:8c:15:3d:e1:90:12:aa:02:0b:
75:e5:48:0c:bb:f9:5a:38:15:e7:f4:f3:62:cf:38:
ad:2a:32:de:cb:4f:44:70:d7:86:cb:31:8b:6a:18:
94:28:d8:91:b9:25:8c:1e:8d:8e:1a:e3:0e:88:6b:
a2:3c:c3:76:5b:a6:40:01:0c:7f:1d:b4:f7:ce:30:
33:05:a1:b3:74:7c:ba:d5:ea:1a:2d:fd:52:d6:ff:
b1:72:04:29:75:29:0a:1f:e5:ac:5b:a8:4f:74:87:
44:0c:bc:90:78:4c:de:c9:c2:c3:60:59:91:7f:01:
a3:68:01:4c:7b:19:55:a1:3d:76:2d:47:2a:3b:d4:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:df:6e:dd:1d:e9:fd:3f:c6:44:77:79:8e:ee:7d:4a:13:2b:
c1:b7:bb:05:3b:26:6f:79:af:8e:6a:52:4a:bd:03:cd:54:3d:
98:75:b3:35:4e:7c:b7:e9:e6:ce:42:cf:ac:50:c4:00:8c:3e:
78:2b:58:2e:6a:38:f5:52:1e:33:20:29:ea:73:10:b8:e7:37:
24:95:57:cb:b1:4a:4b:dc:20:32:cd:60:2f:7e:c2:fb:b7:72:
95:b1:54:c9:8e:59:5f:f3:72:2a:b0:7c:dd:99:17:21:0a:1b:
e8:0c:58:57:bf:00:9c:c3:be:da:ad:36:54:1c:5c:b4:e1:75:
e4:17:bc:27:6f:13:58:aa:b1:bd:c2:f0:86:b0:77:5e:46:9b:
3d:06:37:d3:22:fb:f0:dc:e0:3c:9c:45:72:83:f2:23:ac:53:
46:dc:ec:b0:b7:2e:84:78:ae:b0:87:c1:d6:36:85:a5:cc:88:
c9:ca:f9:e4:f9:b2:4e:17:05:b9:a9:21:26:37:00:74:25:13:
2e:e5:1c:46:d0:a5:00:26:ca:6e:48:09:0a:a2:ce:43:3f:6a:
23:ef:ca:fb:b4:82:3f:50:cc:fd:0b:a3:b5:9f:7a:f1:47:fb:
cb:53:2c:b7:1d:da:2d:89:58:7f:77:c0:d0:e7:7a:66:35:49:
0b:3c:f3:9e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQg1aDZNbcgsokPUe2u7pZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTIwOTMxNTBmNGE0NjEwMWFjZDdlYTNhMjZiYjQzODUxMzEyM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaq5cBN/pyBcr1JeuH2UeTW4AuuG
JTe7WQ8Sv3+Zz+sUcaddRdTHT06Wzk8/ZrNoXhUgUjhFHPNIaX2oDNdKCszCFlop
CD8zZE7xEKkmz5TQoDuvnXIwXsUok6LxsMNy9qSf4o298zpmcHawlNoftL9uaVsj
KppCeDqblkWMFT3hkBKqAgt15UgMu/laOBXn9PNizzitKjLey09EcNeGyzGLahiU
KNiRuSWMHo2OGuMOiGuiPMN2W6ZAAQx/HbT3zjAzBaGzdHy61eoaLf1S1v+xcgQp
dSkKH+WsW6hPdIdEDLyQeEzeycLDYFmRfwGjaAFMexlVoT12LUcqO9Q7lQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJUgkxUPSkYQGs1+o6JrtDhRMSO1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzk1OGNi
Yy1jMmY0LTQ4ZjctYWRkZC1lODA0ZGNiZGQ3NjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOTU4Y2Jj
LWMyZjQtNDhmNy1hZGRkLWU4MDRkY2JkZDc2Mi8xL2xTQ1RGUTlLUmhBYXpYNmpv
bXUwT0ZFeEk3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwnHQMA0GCSqGSIb3DQEBCwUAA4IBAQB8327d
Hen9P8ZEd3mO7n1KEyvBt7sFOyZvea+OalJKvQPNVD2YdbM1Tny36ebOQs+sUMQA
jD54K1guajj1Uh4zICnqcxC45zcklVfLsUpL3CAyzWAvfsL7t3KVsVTJjllf83Iq
sHzdmRchChvoDFhXvwCcw77arTZUHFy04XXkF7wnbxNYqrG9wvCGsHdeRps9BjfT
Ivvw3OA8nEVyg/IjrFNG3Oywty6EeK6wh8HWNoWlzIjJyvnk+bJOFwW5qSEmNwB0
JRMu5RxG0KUAJspuSAkKos5DP2oj78r7tII/UMz9C6O1n3rxR/vLUyy3HdotiVh/
d8DQ53pmNUkLPPOe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:24 2025 by rpki-client on console.sobornost.net