Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
File: 6fRRBEShet1zJxRhUpQ0lauruWg.cer (raw, json)
Hash identifier: 89gNksetllR58gfLU9fV/zeqnht8uE8O+ACROXzo4O0=
Subject key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420680301EAAAEA72D5FD5403700703DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.168.143.0/24
IP: 2a0d:ec00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:03:01:ea:aa:ea:72:d5:fd:54:03:70:07:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9f4510444a17add7327146152943495ababb968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:8e:80:19:61:b6:61:6b:8c:1a:4a:a8:da:
4a:fa:20:23:42:32:d0:41:54:ae:62:89:52:54:ca:
7e:66:ba:41:30:0f:b3:d9:2e:59:34:de:a9:d0:fb:
84:f4:eb:09:2a:49:26:c2:36:96:a0:bc:89:67:2d:
35:e0:21:d2:fb:46:7f:24:2a:6d:6a:19:1a:a6:5f:
e3:f6:eb:3f:50:2c:8b:66:98:21:55:63:5f:9d:33:
7e:39:44:02:f3:e0:6b:dd:c3:4f:0c:58:71:00:9d:
70:2c:59:ea:f1:76:83:3e:5d:e9:32:37:77:fb:14:
a8:91:d3:12:2f:8c:24:f5:2e:7c:f9:15:32:93:ec:
d3:c8:25:65:ce:a3:8b:d4:5a:ef:c4:63:0f:06:27:
ef:91:76:b5:3a:6d:6b:4d:cd:ff:af:92:5d:0a:26:
18:0b:71:ab:f5:f6:9f:e5:03:e5:3e:0f:6c:ab:23:
fc:97:49:4f:23:86:df:f8:34:53:81:64:13:28:17:
7b:e4:15:aa:bc:82:65:f5:75:71:af:99:4e:fc:e7:
bd:db:52:bf:3a:03:60:b3:69:2d:4e:23:c0:59:64:
c9:80:5a:70:f6:85:20:f4:84:12:91:38:a5:43:95:
f5:b2:ee:bb:59:fa:85:99:56:9f:5e:6c:fb:aa:e9:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.143.0/24
IPv6:
2a0d:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
75:a4:d4:f2:74:c4:05:29:8c:c2:90:57:fa:3d:3c:f7:12:72:
f0:c1:61:3a:03:23:03:39:36:e3:fd:21:f1:4f:4f:8c:ae:0f:
77:99:83:6e:83:6a:8f:b3:ac:8b:a6:1b:46:50:52:28:b6:f4:
68:eb:5d:ac:ff:2b:49:de:d9:f0:7c:23:5f:7a:6f:c3:39:b4:
47:16:aa:ab:9e:9d:52:e2:7f:7e:61:63:0c:a9:ee:11:86:d3:
84:7d:66:68:49:4c:23:a6:ac:fe:5b:48:e9:b4:80:a8:87:91:
86:61:1d:33:97:52:da:46:98:37:70:f7:c7:8f:ce:7e:d6:89:
ed:b8:51:f9:c8:7a:d4:de:70:e2:2f:6e:3d:52:2d:ae:76:90:
a9:25:5e:1b:5b:75:31:3d:be:2e:23:65:90:3c:8f:51:be:b1:
81:a5:f5:47:8d:85:cc:fb:6f:5b:3f:be:86:19:cb:c7:ff:c1:
4f:db:02:f8:68:06:ae:33:5e:91:38:6f:2e:9c:55:b8:6d:71:
aa:9f:67:d2:73:a9:69:df:3e:e4:1e:72:59:84:89:3c:7a:5c:
8d:ba:f8:2f:d1:14:13:95:e0:0c:4d:a3:19:6f:23:d2:9a:68:
b9:ce:a2:ab:22:85:1b:cc:d6:0d:95:12:09:e9:61:dd:ff:7d:
b3:4d:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:11 2025 by rpki-client