Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.cer (raw, json)
Hash identifier: IRAHlIJmlf3CDXG9H3g7K5lduNUQPgBKaBMj4BR1pL4=
Subject key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144398CCA80B352F28562D46CF1D444
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.90.211.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:39:8c:ca:80:b3:52:f2:85:62:d4:6c:f1:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:33:9a:b7:03:91:a8:f7:3e:ac:57:84:48:
b1:b5:a7:d0:e5:4c:ba:60:29:a5:31:7f:f7:39:45:
fa:91:b9:61:b6:fd:3f:74:bb:66:7f:df:71:c3:6a:
62:c5:bc:9e:54:08:0b:5f:08:2a:80:97:ad:f5:0a:
fb:39:d0:7d:9a:0d:d2:68:ff:40:e5:c7:39:8c:77:
ea:81:9c:32:30:14:b1:13:d7:e3:b3:0d:b5:cd:bd:
59:b6:1c:49:8e:3e:d6:ac:14:99:98:77:68:1e:b5:
92:6e:e6:86:bc:71:de:0c:3b:54:f5:02:b8:6b:61:
30:4f:63:f7:90:c2:9d:9a:2c:a3:d0:64:a9:24:66:
95:df:39:19:ef:92:8b:d2:8e:46:c4:9d:d6:9c:19:
f3:49:aa:89:4a:e7:72:0e:e1:67:65:71:0d:61:36:
9e:7f:f0:57:cb:ea:75:33:6a:0b:80:45:9b:59:b7:
f8:81:74:9f:93:ac:0c:0b:b9:46:54:19:a1:b9:65:
6a:cb:86:3d:2d:ec:56:22:ca:db:59:4a:c2:54:3d:
2c:c5:f8:b5:a0:d0:29:a3:5b:9d:af:bd:b2:f4:87:
ce:f4:95:59:fa:1c:34:b3:18:c2:f4:2d:37:bb:b1:
19:19:ec:9f:8e:ed:0c:91:e8:33:2c:81:cf:f0:27:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.211.0/24
Signature Algorithm: sha256WithRSAEncryption
44:05:35:9e:2a:88:7a:b4:d4:b9:00:7d:9a:48:27:5e:33:19:
68:40:3f:3c:2b:61:1c:9c:f2:7b:e4:1f:a0:d8:8e:ed:b0:48:
88:54:8a:8a:55:5a:2c:68:cf:a8:63:05:bf:31:ba:f0:cf:4d:
50:8c:f1:ec:13:0f:52:0d:cb:8d:69:02:91:15:a0:7d:a0:2c:
6c:8a:db:c1:01:b4:ac:b4:d7:70:2d:5c:ae:c9:4c:ea:25:a0:
d0:fe:7d:e7:27:4c:19:54:29:73:9c:4f:5d:ab:5b:54:8f:fe:
50:ee:f2:b7:ad:ec:00:83:63:05:f3:46:b4:4b:3e:9c:64:37:
3d:22:7b:1a:6b:4c:e1:cc:53:6b:e4:e9:33:2a:53:0a:4f:44:
df:84:63:32:d9:49:42:9b:c9:28:f4:3c:ff:77:a2:46:27:49:
e6:f0:ea:3e:6e:08:e5:ac:86:f0:9f:71:ee:6a:db:b4:da:3b:
87:e3:6c:7d:3a:05:68:b6:73:56:fc:20:48:2e:9d:d4:ad:44:
95:c3:96:c1:37:f4:a2:d2:b3:f3:8f:ea:8a:d4:2f:02:5e:04:
a4:56:a6:48:d5:1d:64:ef:8d:8c:be:fd:34:c2:a7:63:27:d6:
d9:bd:e7:62:fe:ed:f7:54:ed:49:e3:fc:63:5b:48:5c:fa:d1:
2f:6f:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:29 2025 by rpki-client