Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
File: 1II6TKTXaJe13f55iOJx_2gTGPI.cer (raw, json)
Hash identifier: k6XAtQzUAzJh+FHtgWLfpprXmFXsiRwFfjAp7xU6CBs=
Subject key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C942912559CE303B93B1924EB2232
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12651
IP: 83.172.192.0/18
IP: 212.74.128.0/18
IP: 2a10:cf00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:29:12:55:9c:e3:03:b9:3b:19:24:eb:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:a6:d6:18:46:88:e0:c6:55:72:89:2f:11:
c4:e4:83:fd:d9:6d:5b:0d:5a:ce:f7:d9:75:82:88:
10:60:50:89:88:bc:48:74:21:59:42:65:6d:85:27:
6d:e2:4a:7e:3c:c3:5b:b8:13:b3:bc:11:26:5b:10:
3e:99:84:c5:b9:ae:f1:8d:8b:d6:ad:cb:bf:84:92:
b6:74:49:05:e6:22:6a:7c:e3:8e:c1:cd:1f:6f:e6:
20:41:4f:00:00:1a:5c:c4:ec:c9:2e:a1:44:63:87:
c4:2a:53:d0:a2:5a:46:17:97:72:6e:d3:fd:ec:82:
1b:d3:70:c4:02:84:8a:e4:a5:81:e5:39:e2:9e:16:
54:14:7b:5e:cd:87:bc:0f:11:26:00:3d:53:bb:cc:
9b:80:cb:99:45:46:7f:9d:fb:ef:9e:21:29:61:23:
f0:41:6e:ff:df:3e:15:40:45:4b:8b:8f:f8:49:5f:
51:a7:7e:b6:76:88:a9:a2:e7:7b:7e:2a:57:18:52:
f0:ff:3e:34:f6:5a:41:45:47:7b:bd:89:66:3f:ff:
8d:59:32:e8:20:ef:a2:94:0e:ce:fc:d1:56:cd:b4:
5f:2f:0f:af:bc:0e:c2:81:06:8b:81:3d:8b:51:4b:
ca:83:91:cd:cd:de:f9:dd:be:73:d2:a5:e4:f0:92:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.192.0/18
212.74.128.0/18
IPv6:
2a10:cf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12651
Signature Algorithm: sha256WithRSAEncryption
0d:85:3c:3f:44:a6:bd:01:0a:df:94:be:d0:2f:eb:af:a7:b3:
1b:e9:cc:14:8c:87:3f:ed:ba:57:9e:fb:37:17:94:31:88:14:
1e:6f:1f:ea:df:94:25:01:31:82:7c:2c:86:6f:c7:bf:99:5b:
da:01:32:3f:2c:09:1c:c8:2c:d2:84:38:b1:c9:05:11:ac:49:
4c:ce:2a:83:12:e7:4f:60:64:64:be:29:48:2d:d5:87:ae:8d:
56:0e:a7:da:c8:db:3d:dd:30:57:3c:91:d6:a2:4d:61:04:05:
d0:d1:61:f3:26:ab:86:aa:38:6c:40:7a:ce:dc:3b:f0:11:da:
5d:b1:bf:84:19:e7:a0:e8:3a:31:13:6a:49:0f:39:a6:1b:04:
7c:f8:ce:d4:4e:50:b9:06:c1:2d:94:68:91:d5:08:1d:70:81:
61:49:75:b2:2a:fa:b8:a0:e8:92:3d:29:92:f5:b2:49:0b:32:
bd:71:e7:d7:d2:09:a3:23:40:d9:06:7e:d8:7e:39:6a:e3:39:
15:5a:96:2c:15:89:25:0b:5a:8a:05:3e:1c:17:db:ad:3a:f0:
e1:b9:89:8d:c7:12:2f:72:63:94:e7:91:76:82:68:c5:8b:10:
c0:33:19:59:40:25:41:5f:b4:d2:09:d2:64:ee:4a:e1:f7:43:
e6:85:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:25 2025 by rpki-client