Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.cer (raw, json)
Hash identifier: 3h56m4MGgfCppR8Jf3JCyiufmpTiQ+N7vPV2tFCAVnM=
Subject key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222261EDF6B37F13EF2DAB1F3F18D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.51.184.0/22
IP: 2a01:b460::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:22:61:ed:f6:b3:7f:13:ef:2d:ab:1f:3f:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:91:b7:88:1b:99:a5:bf:a3:bc:df:34:5b:
1b:10:7c:8d:ef:6e:cd:29:41:5b:23:98:2c:2c:9a:
7f:03:73:ca:7b:d9:73:82:28:0c:d3:10:28:0f:a6:
df:23:51:3c:59:5e:ae:2e:b2:00:a9:d4:55:52:3a:
b4:71:31:a2:24:f8:a0:13:74:1f:04:c8:7a:88:82:
d0:31:28:fc:3a:a2:ff:74:bb:b8:5d:1d:2b:94:f3:
18:16:87:55:88:a7:ea:7b:68:91:a2:c1:26:ce:cc:
54:c4:fe:bc:50:94:fc:6b:8c:cf:f6:c5:64:1a:ae:
87:cd:82:02:1c:b1:d0:54:cc:5d:a8:8d:d0:ff:86:
fa:70:4a:41:b5:8f:d6:79:0e:07:61:7e:58:c8:e9:
00:d8:1a:32:e6:65:bf:80:5e:49:29:d6:de:03:30:
59:07:65:06:b5:5f:e7:e3:71:c2:96:54:39:3e:f5:
6d:64:27:7b:8f:e6:c7:81:b8:c3:1d:d2:ae:fc:27:
f2:1b:16:c9:29:08:db:ac:a3:c2:01:bc:bd:92:c0:
18:53:38:64:24:06:f9:79:58:54:e1:ed:eb:86:d0:
64:46:5b:6f:fb:da:57:c5:61:89:b1:62:17:f6:a5:
44:15:ce:ef:3a:b6:e0:9a:1e:7f:d2:66:da:d3:19:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.184.0/22
IPv6:
2a01:b460::/32
Signature Algorithm: sha256WithRSAEncryption
68:ff:2e:48:b0:65:ef:1a:08:a7:8c:f9:19:a5:93:e1:0f:bd:
0b:d6:94:9e:d8:2c:18:9e:67:82:e2:14:09:9f:ba:16:5f:1e:
f6:84:78:51:9d:b4:88:55:68:08:84:ca:b1:fd:ba:59:6e:2d:
5d:60:f0:72:27:83:7a:5e:58:b2:0b:29:2e:e9:e1:5f:7b:4c:
47:ac:c6:72:57:df:08:3e:7b:a0:61:24:ae:60:f1:3c:72:d3:
54:5f:53:cd:4f:cb:55:35:83:3d:c2:97:70:78:76:7b:76:c8:
a1:98:c7:48:83:c4:b2:9a:ef:fd:52:95:e1:59:21:6c:a8:30:
a8:e2:e7:c6:be:85:92:a5:f1:d7:fb:9a:46:52:c6:8a:1d:5c:
97:45:b1:31:4e:60:68:82:dc:e9:66:21:45:78:2e:f2:3a:dc:
56:9d:e5:b4:38:a0:44:cb:b0:4f:ea:9e:97:8e:e9:f0:3c:9f:
85:1f:8c:df:4d:e0:31:57:7c:ad:a4:64:90:03:cf:19:30:96:
b9:bc:b4:8f:d9:fc:aa:80:61:7d:72:94:0e:72:88:00:9a:51:
4b:ca:8f:06:fe:f7:64:ee:98:48:fa:30:f5:34:6e:51:99:43:
7c:25:98:e2:a5:44:6f:ea:fe:59:21:f6:62:7c:18:4b:6e:98:
a6:e5:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:54 2025 by rpki-client