Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
File: 2C4TD2tr3205KA43XfNE5uCjSzw.cer (raw, json)
Hash identifier: dFCqT+ABEuXwr0mkWks3Y4LE/B/WaLy074kHp/SzD1E=
Subject key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3CDA3ECA5C00A07BF6C1D394B172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50180
IP: 195.189.166.0/23
IP: 2001:67c:2ff0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:da:3e:ca:5c:00:a0:7b:f6:c1:d3:94:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:35:36:cc:26:36:18:6f:3c:0a:02:f5:cf:
c7:fb:66:ad:58:7b:51:9d:65:12:2b:5c:84:d8:32:
7c:33:25:e1:e5:e7:01:c0:cf:3e:e6:a6:a2:ad:41:
e3:c8:3c:24:e5:d6:35:8d:35:f6:a5:6f:44:1c:a5:
fc:8a:de:65:3d:b2:5c:dc:92:58:a1:a3:6d:61:c1:
cd:4e:fe:3a:57:3f:d2:b5:0f:9a:89:8e:dd:5b:04:
fa:74:5c:77:5c:0a:4f:71:2b:15:9c:18:05:29:40:
f0:b3:b9:2b:ec:b5:1f:c9:5f:fc:84:50:8d:3b:2c:
a0:8a:90:c5:df:98:a7:bf:11:47:54:fb:b1:70:41:
ec:22:e1:e9:90:6b:73:90:0c:8b:80:40:29:87:7a:
72:2f:a0:8e:3d:c1:55:2d:72:1a:82:fe:4c:7f:de:
b5:12:47:e9:82:13:de:1b:e5:f9:b4:b1:b3:e9:f6:
21:b6:db:71:d6:25:8c:4d:92:eb:e1:bf:f6:d0:94:
ed:a7:43:38:c4:80:74:c0:22:ef:ff:ca:90:7b:a9:
0c:51:72:6f:44:1a:45:a5:d5:e6:9d:24:8b:cf:08:
91:91:1c:8f:a3:5a:96:ce:9a:a8:e3:6c:cd:a6:d6:
74:32:79:b3:6e:7d:38:89:f0:f3:89:52:4f:20:34:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.166.0/23
IPv6:
2001:67c:2ff0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50180
Signature Algorithm: sha256WithRSAEncryption
af:d4:e7:68:44:45:65:d7:8c:b2:7c:ba:92:1d:14:3e:79:94:
91:09:20:1b:5d:88:f1:59:24:09:87:c9:e5:b3:3f:84:24:06:
8a:25:f4:99:04:90:0d:ce:f8:ab:a3:42:ac:33:ea:a9:e2:52:
fd:d7:bf:94:7a:69:d8:6c:f6:3c:00:1b:70:b1:c4:64:ae:ff:
9e:e1:21:40:29:9c:32:29:a5:ec:05:ef:e8:80:0c:a1:42:88:
bc:ca:55:58:65:4a:5e:6c:61:21:6b:05:ad:10:8d:06:19:bd:
05:1e:cf:4e:80:2a:02:5c:9f:3b:72:03:18:21:7f:73:dc:4e:
8d:e8:59:38:90:4e:3b:45:2f:12:da:81:52:b2:3b:c7:5e:3e:
fc:88:19:68:80:35:08:a0:65:4d:6f:4b:d9:8e:4b:01:b1:d2:
6b:4c:79:55:15:54:68:91:e2:31:15:dd:f5:45:a4:4e:d3:33:
e3:97:12:77:73:df:d7:81:b7:f4:c6:8f:64:46:0b:5b:6a:95:
45:eb:cb:84:1e:d9:28:75:32:d9:33:be:de:5c:82:86:87:2e:
77:bb:e2:c7:37:c7:b0:d5:2f:8d:04:7b:54:0d:0c:32:fd:c6:
4b:08:ff:b0:b7:c9:c8:0f:53:20:1d:4f:f6:aa:ed:f8:fa:53:
8f:37:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:28 2025 by rpki-client