Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.cer (raw, json)
Hash identifier: 4vBYz8TJOL4mI6D2LRU/7pXY6jNyfhmXw9vMcuAe2g4=
Subject key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DB0636B5D8F7055F4D881C35AFCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207867
IP: 45.159.104.0/22
IP: 188.68.188.0/24
IP: 188.68.191.0/24
IP: 2a0f:7580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:db:06:36:b5:d8:f7:05:5f:4d:88:1c:35:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:b5:42:a5:68:a0:e6:67:dc:bf:fc:51:1e:
12:ec:7d:fb:13:69:e9:dd:91:78:6f:93:64:b0:9f:
55:88:a9:a1:09:b5:a0:72:ae:df:71:40:dc:40:92:
30:54:0b:ea:ea:a4:b5:9f:65:c0:de:0e:17:76:df:
7f:27:1d:fd:3a:58:40:d2:d9:be:fb:8d:13:f7:08:
f1:73:ef:b3:0d:25:51:1a:da:af:68:32:b7:44:f6:
59:1d:7f:92:5f:64:49:a0:a9:8a:43:90:6f:89:0e:
52:5e:29:82:97:4c:e8:fa:97:ae:18:d7:9c:df:08:
3d:e7:24:48:b0:ec:b6:90:93:4f:66:45:1d:4f:d2:
19:2e:87:03:c3:eb:cc:f4:f8:78:68:41:f0:b8:a4:
c3:e4:79:96:4e:fc:1d:f8:e0:e4:8e:13:41:38:44:
de:b4:c9:5c:dc:20:87:91:9b:45:7d:e8:01:4f:3d:
1f:32:47:71:a1:a9:ed:af:4a:5f:15:ee:aa:fb:97:
c3:29:6b:63:75:de:e7:dd:c5:c6:ff:b2:c1:80:8f:
cc:ad:ca:08:a2:8d:a0:2f:83:43:ef:35:06:d5:8b:
41:53:98:54:e2:a1:b6:f1:90:70:1e:bf:7f:4e:05:
03:99:b2:15:54:88:67:f6:5d:02:ef:23:8a:07:52:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
IPv6:
2a0f:7580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207867
Signature Algorithm: sha256WithRSAEncryption
77:05:38:9e:77:19:f0:26:58:7c:20:4f:3b:18:e3:05:9d:f4:
74:51:8a:9c:e1:d0:db:a4:f2:12:96:74:c8:72:d1:b8:3b:af:
f9:f0:c0:f0:37:4a:46:02:e7:31:e1:a7:e6:fc:f7:e8:90:ab:
1b:7e:b8:7e:25:19:02:00:91:8a:cc:28:9e:2d:f1:95:1b:4e:
54:27:56:56:2b:81:99:64:53:26:71:f8:ac:00:1b:0f:58:5a:
c1:af:bc:80:d5:17:e3:3f:da:48:2d:ea:3c:ce:2f:77:03:4e:
58:0b:0d:00:e0:e0:8d:d8:3c:be:95:31:7c:59:3a:30:d8:0f:
fc:b5:8f:a0:2b:ba:fa:f9:84:4a:35:a8:41:82:1e:80:19:d5:
bf:be:4a:ea:d9:7d:c8:75:c1:af:da:0a:ce:8e:a6:c0:85:dc:
dc:85:3b:07:b6:58:04:01:79:b1:3e:a7:e0:91:bf:4f:3d:be:
05:30:be:02:b2:1e:b4:70:8d:24:60:d9:bd:e9:96:42:fd:e4:
bd:0d:8b:81:8c:bd:68:2d:9b:43:86:a2:04:fa:19:19:1c:90:
f1:19:f4:9c:21:8e:34:0d:61:a8:1a:f4:d7:85:15:f7:79:eb:
27:36:da:3e:a9:f8:ab:74:ee:5c:01:bd:8d:a8:aa:a7:b2:cc:
33:53:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:34 2025 by rpki-client