Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer (raw, json)
Hash identifier: cMfMsn1TG2TLVX8ZQWg8j1Yg0BhLKej0otkGbbDFVRg=
Subject key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266AB688A3595145DDF2D7A6539E66B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51411
IP: 31.25.92.0/22
IP: 178.236.32.0/22
IP: 185.49.104.0/22
IP: 185.118.12.0/22
IP: 2a01:a120::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b6:88:a3:59:51:45:dd:f2:d7:a6:53:9e:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:8b:01:d8:3b:18:f8:73:52:84:ea:ec:5d:
df:80:40:34:14:b8:d0:ce:d3:a4:1d:2f:02:88:f7:
96:23:dd:ae:7e:b4:6b:fa:7a:18:6f:5a:74:1c:d5:
6e:b6:ff:4d:54:44:12:7e:0f:63:40:12:76:df:b5:
17:fe:dd:c7:1a:da:e3:15:a2:ab:65:89:4a:3d:cb:
fd:45:eb:b8:56:47:7e:be:f1:92:40:dc:8e:9d:38:
b0:c0:b0:9c:3d:2d:4d:31:2d:ce:7f:a3:2f:2d:5d:
5a:00:95:1e:a9:dc:f7:e2:ad:c0:fa:a9:ad:f3:2f:
44:e6:3e:76:84:ea:48:9e:3c:f2:fa:d1:62:5b:36:
66:8e:68:d5:3d:b7:0d:17:b4:27:36:2e:17:db:69:
36:ab:9d:e8:c4:20:d9:4d:1d:e8:71:42:7d:43:4a:
a8:e4:2c:30:00:4b:bd:25:97:dc:2f:e5:3f:ae:db:
4b:a7:a6:d6:b9:f6:15:5b:66:29:93:20:d2:0e:33:
89:90:07:12:7f:b3:93:f9:9a:15:3a:d2:20:a5:6d:
1a:eb:69:bd:00:74:bc:e0:fd:14:7f:5a:23:d1:32:
3a:a1:a7:1d:b5:3c:58:22:97:85:3f:a8:0a:ac:52:
cf:fd:ee:dd:28:89:b8:8b:37:8f:d7:10:05:9a:6a:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
185.49.104.0/22
185.118.12.0/22
IPv6:
2a01:a120::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51411
Signature Algorithm: sha256WithRSAEncryption
4c:de:4b:1e:47:b4:f8:87:0d:8f:34:6c:87:fc:f5:a8:3f:c0:
f0:9b:c7:a5:ad:1d:a2:21:31:8f:6d:e9:0e:d6:26:0b:7c:c2:
e8:f3:4e:27:e7:eb:e5:34:a0:f8:af:fd:34:05:32:a2:da:c6:
cb:5b:eb:f6:56:9e:e2:bd:af:20:93:c9:58:40:6b:03:e2:48:
2b:45:bf:7b:4a:ab:1d:ed:bd:fa:c1:3b:ce:67:ad:24:4e:83:
24:3f:b3:ef:08:e8:7a:0a:6a:b3:a2:52:36:f9:fd:75:00:cf:
63:c1:bf:ae:37:22:6b:6f:ee:c3:ad:9c:8e:8c:0f:12:41:4e:
8c:87:26:82:4e:f7:aa:e9:91:41:06:df:05:a1:ab:f6:90:41:
e6:1b:11:1a:81:09:15:2f:e1:78:b8:79:d3:dc:57:20:3e:0c:
a8:86:45:fe:46:9c:8d:f8:a4:6f:27:04:0f:96:7c:d9:b2:84:
38:28:a6:62:a3:d5:2d:72:a7:a6:4a:e7:8e:04:37:ec:f7:cd:
d2:25:2a:b3:70:98:6f:3f:de:04:21:35:0a:11:81:57:c3:b5:
f5:88:be:d2:c5:d4:32:f5:e1:9b:d0:fd:98:cd:1a:11:c8:c0:
78:c7:83:6c:42:66:e5:46:16:00:7a:ca:09:c8:d1:ca:dc:43:
4a:71:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:27 2025 by rpki-client