Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer (raw, json)
Hash identifier: /9ihsHXOYS0H9D9vH6wuINXQsye3wxF2YCdPoleB9j0=
Subject key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDE73CA860578F50045DC7C09F25DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199354
IP: 185.19.228.0/22
IP: 2a03:ffc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:3c:a8:60:57:8f:50:04:5d:c7:c0:9f:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:e3:04:93:15:cd:d1:4e:29:5b:f4:b1:03:
b7:e6:5e:ed:80:85:7a:76:a3:53:98:0c:45:31:58:
5a:c0:e2:b5:70:06:bb:fa:63:16:3b:09:73:4a:e8:
50:d8:46:99:09:c3:0e:b1:3e:67:4f:1b:0f:fb:38:
a8:ec:1d:04:bc:c8:f8:7d:b9:0b:0e:d5:d1:95:fb:
94:f6:bc:57:2f:8e:82:bc:ea:53:a9:a6:6e:63:7d:
34:7f:2f:7c:02:2e:b6:a6:fc:83:83:c9:98:6c:e8:
0c:80:28:65:20:1e:6d:cd:e0:01:94:c9:c3:03:b4:
0a:ab:43:15:d6:6e:ae:c3:00:82:5b:ca:fe:00:7b:
a1:7a:3b:31:6c:45:30:3d:6f:1b:3e:7f:37:61:bf:
63:48:c4:a3:f5:fd:a4:32:65:ab:85:0a:ef:93:b0:
fc:f3:58:83:0d:6d:d5:15:f9:b4:ff:f3:c8:e1:d0:
54:53:ff:cf:9c:04:71:06:dc:a0:82:27:34:d6:e2:
2e:a9:89:84:2d:18:09:ab:b5:51:92:86:3e:7e:a7:
a4:df:e5:d4:70:8a:45:49:e3:fe:7c:32:89:8a:88:
12:4a:e2:58:41:87:97:ef:89:62:59:4c:a2:71:fe:
f5:11:7b:fd:ca:82:4f:3a:79:5f:ce:e4:c2:81:73:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.228.0/22
IPv6:
2a03:ffc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199354
Signature Algorithm: sha256WithRSAEncryption
02:88:e2:c9:d4:8a:a3:61:b0:51:bf:4a:e8:cb:95:d6:de:3d:
da:0f:09:d4:76:3f:bc:92:69:e6:e6:9c:f7:b3:e9:63:e6:0d:
d7:be:fe:71:5d:15:de:b2:a7:f5:7d:56:de:3d:4e:85:2c:9d:
54:c2:8d:77:57:58:c1:2a:f2:ae:72:94:20:39:a2:92:e4:00:
48:64:26:79:1c:db:a2:a4:5c:e7:84:be:07:a9:67:95:3a:d5:
c7:c3:eb:fc:a4:5f:4c:1a:de:33:60:a7:17:41:b4:7a:f8:50:
70:1f:b6:53:00:03:66:d8:fa:0f:0a:62:0e:35:51:74:4c:90:
29:2c:63:40:ab:da:cf:8a:ba:68:97:c1:03:29:69:ce:43:f6:
59:f4:ed:bb:82:d8:14:88:10:53:22:2a:16:a2:d4:3b:56:26:
c2:5e:4f:b4:a5:5a:df:1d:13:ba:8f:b2:a8:c1:95:3f:a6:65:
2b:94:ff:1c:19:7a:7e:c4:4d:2b:ed:92:c6:7a:66:1a:fb:ff:
d5:27:c7:fd:52:a3:92:80:01:52:eb:06:e3:12:04:00:4e:c6:
f4:34:6b:8e:b6:20:71:e5:2b:fe:65:7e:18:3d:ea:1e:5f:46:
81:27:c5:0c:ba:6c:61:54:9f:cc:b8:de:42:54:d5:fb:10:48:
2c:ef:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:36 2025 by rpki-client