Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
File: 7JJpGF9j3DNWA39xPOigkJ_wciU.cer (raw, json)
Hash identifier: +S9geMMd8nbNfK4J2Dukvm6A3LOo3W0a/anqibnc7MA=
Subject key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAADF59379168C5FE82A9CD6CC578E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.144.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ad:f5:93:79:16:8c:5f:e8:2a:9c:d6:cc:57:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:bd:01:ec:a3:ae:a4:01:2b:cb:48:c8:21:
df:cd:0e:47:b5:7c:3c:e7:27:e5:07:a9:41:6c:61:
a6:e0:04:12:48:01:bc:a5:42:45:18:a6:84:17:52:
2e:8b:7e:45:df:5e:83:16:19:2c:cc:d0:77:98:c5:
49:a3:0a:31:a6:35:60:7a:ef:63:23:29:8d:61:62:
29:71:42:aa:86:24:27:42:ed:3b:04:57:1a:10:d4:
da:56:ba:9c:2e:b4:4f:c1:c5:0e:82:98:c6:11:43:
d8:d8:4b:70:ec:99:08:0b:f2:be:a5:d0:7c:8c:12:
99:c4:15:52:a4:5e:93:6b:83:d4:ca:1a:30:fb:30:
92:f2:95:4d:51:43:79:fa:58:64:ad:27:c4:0a:a8:
f3:57:cc:d4:17:34:1c:58:ac:69:df:71:4a:fe:fa:
4b:29:ab:0c:4c:1a:f7:59:3e:f3:74:a7:ea:2f:2e:
27:45:ee:f4:8d:69:d7:b5:22:20:eb:89:6f:85:31:
ec:06:32:9b:31:46:c9:2e:ec:11:0a:4b:96:d2:5f:
12:88:5c:d9:dc:09:84:4d:11:e0:b7:84:4e:e3:ea:
45:75:1d:8a:e1:0b:da:e6:27:90:ec:ca:bb:5d:1c:
d2:43:cd:02:d5:40:57:2e:e3:11:b2:c9:48:1f:21:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:03:3f:55:47:84:4c:bc:6f:d9:d1:0a:2a:a9:4b:4b:eb:77:
99:fc:2e:ca:b1:9b:86:ca:64:69:d9:86:d8:09:52:39:d3:c4:
f0:ee:62:2d:60:d0:01:b4:b6:28:28:0b:3c:19:13:c3:4e:ec:
94:03:79:57:19:4d:b8:a7:d2:95:4d:cc:20:16:42:f2:37:37:
e9:dc:f9:0b:4f:a6:f8:ba:fd:cc:fa:1c:1d:c6:d0:33:58:11:
35:0c:a5:54:73:da:9a:9a:66:b9:0d:ae:0c:25:0b:6e:6e:23:
59:9e:bb:b8:b8:f7:e5:59:53:6d:70:38:3a:71:36:7d:c0:34:
2e:5b:bf:21:ec:ed:7d:87:f7:52:e2:3c:fd:1a:52:7b:76:65:
30:bb:39:49:e6:6a:0d:cc:8d:11:eb:e1:d2:23:d7:3c:44:6c:
e8:82:83:fb:c0:e7:c9:84:97:c3:62:84:0b:7b:d6:e8:09:fa:
77:8c:f8:bd:4f:a9:18:da:52:57:2f:f0:a1:10:1f:d1:90:ec:
1f:bd:da:56:06:e9:32:8d:dd:8b:a0:85:22:0b:fd:0f:f4:c8:
a7:09:83:d0:b9:f6:6f:2a:1c:70:90:c1:9f:f6:c3:7c:08:24:
a6:a8:77:77:f6:6d:56:ce:88:5f:09:3f:a5:54:ba:ec:76:85:
06:a8:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:46 2025 by rpki-client