Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.cer (raw, json)
Hash identifier: UG+2f0GDaqeoVkH4pJZFDnF7cxOlqm79kE4C/teIpMs=
Subject key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274808E2A46597023A81B054F3A6BCEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.66.121.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:08:e2:a4:65:97:02:3a:81:b0:54:f3:a6:bc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:8c:63:cf:8d:a6:bf:11:84:39:a6:ad:8a:
20:4d:b9:a7:50:88:ae:62:f9:00:3b:11:91:07:db:
1b:0c:62:e2:d4:2b:16:89:34:7d:2d:70:69:87:77:
35:35:7d:12:e3:29:d9:1e:3c:5c:48:30:85:a9:7a:
86:2d:8a:c3:e9:b9:37:27:b5:64:0a:2d:62:85:f6:
61:4e:a7:c0:e8:11:fe:6c:1a:a7:31:77:b2:7a:53:
d4:12:f2:a2:b6:d6:06:3f:ac:0a:98:17:19:b8:9f:
b8:84:53:8e:5b:bf:15:a2:bb:8e:69:6c:bf:5f:6a:
d0:ae:54:ef:8c:d9:b7:68:5c:c6:1c:1c:1b:fe:67:
f6:79:1f:d5:3e:9f:39:06:d5:37:06:0e:4b:f1:6c:
25:66:46:21:16:ff:58:50:a0:e2:c4:c1:0c:b9:55:
2b:ba:61:a9:06:af:19:6a:d0:02:9e:bb:b9:a6:22:
04:31:6c:1b:46:4d:4d:a1:da:51:f3:29:68:97:20:
92:32:9e:6b:e6:ba:04:3c:4a:6f:88:dc:ee:0c:be:
02:8d:6f:76:41:bd:f8:25:80:38:39:84:4e:3f:1d:
3c:95:4f:d0:83:1a:12:e9:20:0e:ed:3f:ac:4e:60:
a2:6b:1f:7a:ac:7e:96:a5:5c:c7:30:ce:50:1e:41:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.121.0/24
Signature Algorithm: sha256WithRSAEncryption
09:11:62:d4:06:b7:fb:cb:f2:89:f1:28:61:57:1a:f6:a0:4e:
40:7c:ab:76:76:29:df:ac:a1:cc:98:30:be:ea:3b:db:1a:a5:
ba:1e:67:bf:56:52:5b:41:89:ca:1e:36:a7:f5:03:eb:de:8d:
2a:26:b9:61:78:e3:9e:58:30:46:40:8a:88:3d:b0:07:81:6d:
8c:c1:b8:43:d9:5e:4e:25:bd:51:b2:42:e7:d0:c4:f4:15:e5:
19:a7:a9:68:7f:75:35:eb:9d:d9:98:9b:0f:48:ff:6b:a1:d1:
72:68:99:a5:9a:4d:58:53:cb:b5:f3:a4:ec:96:80:66:52:0a:
57:ec:2e:e8:95:9a:53:78:66:a5:30:76:ba:96:8b:60:b6:ce:
71:35:a8:68:d5:0a:bb:83:60:2c:48:5e:f0:66:64:13:88:34:
21:39:b2:08:04:9f:5b:6b:1f:d8:10:39:1c:bd:b1:21:5d:06:
4b:58:11:0c:37:28:62:b1:7e:76:34:31:c4:50:f5:e8:6e:0d:
7e:91:39:a9:ef:b2:a3:da:21:0e:69:6e:d5:a9:27:c2:a3:15:
56:6e:a9:a8:93:2e:5b:9d:6e:6c:28:de:c0:42:e1:f8:f2:bd:
45:42:2b:1b:0d:3a:fa:81:36:95:29:3a:f5:40:62:3a:2a:9a:
ec:21:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:19 2025 by rpki-client