Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
File: 0RE68_NruSoPL72v47Zx9rn876g.cer (raw, json)
Hash identifier: veaf0GPruyY2kCDHW0hjeXQ0v3xQucYerlajjSF8IUw=
Subject key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA9C5F3677A73DC253AE3732DAB66D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42333
AS: 43334
IP: 185.202.228.0/22
IP: 193.25.205.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:5f:36:77:a7:3d:c2:53:ae:37:32:da:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:8f:06:78:b2:a2:ef:74:e0:e1:45:7f:a5:
01:af:3e:7b:71:ad:2c:6b:9e:c6:ee:6b:bb:8f:38:
fd:22:83:00:39:40:86:b8:4d:85:0a:84:ea:90:b9:
4d:05:6f:08:c1:10:66:e8:34:83:a6:a1:ab:ca:df:
37:66:4d:65:77:5d:f1:25:17:9b:fa:4f:5e:b7:e0:
4a:7a:ae:ce:23:9c:ba:c2:e7:e8:7d:7b:0c:2a:a7:
2e:0e:63:c5:10:41:01:9c:c4:28:34:30:c9:9e:19:
d4:d7:18:a8:5a:2f:5e:b0:73:52:64:14:81:77:a3:
e4:c6:fe:4f:6c:06:15:74:b3:1c:9e:47:3c:b9:eb:
11:9b:f7:83:2d:e3:2a:f1:65:2a:2f:b4:47:b0:fe:
23:2a:f1:eb:65:17:35:00:19:f4:5d:05:f0:60:66:
1e:57:fc:61:c0:05:74:8c:17:f6:9a:e1:b1:e9:76:
11:5d:4f:c7:6b:13:dc:d0:41:75:b8:fe:e0:5e:23:
7a:c0:57:cc:30:1c:ae:cb:dc:89:4b:c6:f4:4d:9a:
69:1e:43:b8:df:9f:5a:89:25:33:5f:f3:03:da:7d:
fc:a0:a2:f3:61:a1:85:88:13:ed:7f:f2:48:5a:08:
f4:5f:3e:c6:e7:c8:8a:0b:65:6d:18:11:b8:22:97:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.228.0/22
193.25.205.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42333
43334
Signature Algorithm: sha256WithRSAEncryption
52:42:c5:a7:0f:c5:90:62:36:94:f3:b9:5a:84:d0:8a:19:17:
05:c3:00:7d:2c:54:66:f6:19:d9:c2:96:0e:ef:fe:3b:6b:d7:
6d:6e:95:a0:d0:ba:53:1b:19:2a:d3:14:c9:6c:ba:46:72:a9:
c1:94:0d:82:62:2d:25:5f:91:b3:01:ab:e4:03:59:88:02:20:
cc:b4:fe:58:3f:69:cc:a3:6d:89:1e:d1:27:e7:a6:7c:d2:1c:
bc:d2:6e:a3:11:1e:b8:77:e9:c7:3e:55:c6:ba:7d:29:b1:b8:
14:f5:a5:f8:6f:24:b2:d0:04:2b:7d:56:34:de:06:cd:77:91:
08:be:88:f5:e6:ad:c4:bd:68:d9:34:dd:35:38:70:6d:47:be:
29:be:d7:37:8f:51:25:18:1f:be:21:d0:09:2a:c2:95:07:0e:
e9:44:34:3c:9f:9e:0f:df:99:f0:2e:d9:e9:ff:d2:07:5e:e8:
df:69:63:e5:25:f5:3e:a9:1c:8b:a0:11:ff:67:0d:60:19:45:
86:38:2e:2f:71:d5:a2:61:9b:ef:fb:8e:74:5c:55:f7:bb:92:
04:9d:d0:82:bc:9f:62:3c:45:bc:79:ee:c4:4a:fc:ce:89:d8:
f3:3d:94:a1:b9:02:e3:c3:f7:ff:df:29:ec:d0:ad:d4:b6:dd:
34:d3:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:25 2025 by rpki-client