Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.cer (raw, json)
Hash identifier: 5zbLxhmL0C8+pcx51qsYlLgcxFYtzFQMaOtE9fDJ1d8=
Subject key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421441322A005F0D8B519DE18DE3686CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.27.3.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:22:a0:05:f0:d8:b5:19:de:18:de:36:86:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:6b:cd:df:ea:9c:1a:19:52:5e:04:34:61:
4f:78:37:15:46:23:a9:c9:e4:8e:48:d8:f6:c0:76:
bc:cb:9f:2a:f6:2c:93:fc:1c:59:f3:33:db:4d:2d:
a9:32:37:de:1f:45:78:3c:eb:68:88:fd:23:be:ec:
16:66:1a:88:c5:b0:dd:c9:d4:63:f2:5e:14:73:ac:
3a:8a:99:b5:08:ba:9b:b5:99:04:5c:d5:b3:74:84:
e6:7f:7d:43:e1:e0:b3:cb:9c:17:50:5e:cf:1d:cf:
95:d2:7e:e4:fb:d6:03:31:19:64:66:46:86:2e:f2:
20:ad:fa:be:1c:06:b7:6d:b2:09:6f:56:34:9b:78:
1a:18:5f:75:fa:ed:0d:dc:03:58:e4:1e:04:20:c3:
fe:06:3f:39:66:3a:25:f0:ec:bc:21:c3:3d:29:5c:
fe:88:1a:53:ed:1b:2e:8a:b9:09:5b:b5:6e:47:5f:
77:8d:99:8a:bf:6b:0f:0b:0b:db:71:65:14:f7:7f:
3b:c4:69:5f:7c:d7:10:84:9a:72:5e:80:4a:29:8d:
f0:b6:21:7f:ac:07:ce:09:9b:56:ca:17:53:75:3b:
12:9f:5c:39:02:b6:ed:3d:77:b1:5c:40:dd:f2:76:
9d:4e:25:1b:6a:92:68:42:4c:f1:ac:31:3c:44:da:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c2:d5:6d:c8:d5:7d:cc:54:b4:9d:d4:3f:3b:0c:19:bd:de:
3c:7e:52:93:fc:97:24:55:d4:2a:94:99:b0:9d:a4:5d:d3:f3:
70:20:36:ef:a1:94:94:54:1a:cd:e2:e0:90:ad:4f:6f:19:cf:
72:98:0f:45:fe:72:91:6e:78:d9:ed:bf:d6:2e:ee:df:96:55:
b0:74:de:98:8a:ab:a2:fd:89:4e:23:36:40:ae:fd:3e:dd:ba:
5e:d1:62:64:7c:67:48:bc:55:da:c5:5e:c8:24:72:11:d2:c6:
c4:7f:ba:6b:ca:b4:9e:20:09:fb:74:c6:e0:47:91:e3:cd:24:
91:f2:5e:45:e2:83:65:84:60:67:77:6f:80:1d:9d:43:d7:5d:
f8:1c:d4:1c:9e:f8:57:c5:12:e5:b3:ea:6c:17:0f:da:d0:32:
80:50:11:45:d6:c7:41:1b:52:db:1b:bb:46:3d:c2:ea:a0:68:
1d:5f:80:2f:2d:82:d3:80:aa:00:13:01:47:3a:a4:04:00:6c:
d5:8c:fa:86:7f:79:33:57:89:48:e3:20:98:71:49:d9:25:5f:
16:c1:84:46:4f:1c:31:9f:81:34:a2:75:63:17:4a:85:7b:e8:
99:47:75:b2:fd:a9:9f:fe:28:bb:b6:81:5f:ad:6c:3d:a0:b1:
00:93:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:58 2025 by rpki-client on console.sobornost.net