Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
File: C155jbbo9XxfSkRRUJAd7oqW1eU.cer (raw, json)
Hash identifier: VD3ljflXMOtXPgiMZ7/8rmRblVOiv/PKjgnLMHGrKuo=
Subject key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5CEFFD47A78BCD9994A6674438131
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34024
IP: 91.199.235.0/24
IP: 193.26.26.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ce:ff:d4:7a:78:bc:d9:99:4a:66:74:43:81:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:e5:bf:78:3c:5a:c0:19:ca:30:60:04:9c:
99:2f:93:20:b5:a5:d9:56:0b:05:c0:26:c8:e8:7a:
8c:35:aa:88:a7:33:50:1f:38:5e:30:e5:32:1b:dd:
8e:e0:9f:73:16:6d:c3:c3:bc:0f:08:16:70:62:19:
52:9b:3a:7a:ba:71:d0:01:64:72:99:cc:89:7a:4a:
a8:6b:10:0f:f6:64:3f:d3:e3:f0:dc:64:7d:d1:39:
52:19:b7:10:53:3e:e5:e7:b9:42:a1:70:cb:8f:89:
7e:a7:48:64:e8:58:b8:54:ee:19:9a:02:43:b4:f5:
4e:d6:37:3b:6c:b9:b1:ba:e9:c7:0c:81:16:00:aa:
b5:97:d0:a9:0d:e2:dc:44:3c:7e:c8:65:e3:dc:c5:
e1:d0:18:aa:01:04:24:4b:46:cd:30:9d:91:3d:c8:
9d:4d:51:64:2c:30:de:3d:81:e0:f5:0d:63:06:db:
7b:5d:56:01:75:67:78:b9:63:51:11:4c:a9:a8:92:
3d:b9:e3:fe:05:ce:c2:ec:cf:1c:94:a6:e0:13:9e:
af:95:ac:bd:b4:26:25:3b:6d:f0:e4:d0:1f:44:2d:
58:17:d1:5a:d6:d4:be:e1:17:46:8b:47:96:2b:fb:
de:3c:24:76:76:bb:8a:1e:4c:6d:7f:85:7a:10:17:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.235.0/24
193.26.26.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34024
Signature Algorithm: sha256WithRSAEncryption
24:c1:86:32:84:53:67:e7:70:79:d4:d1:f7:3d:67:b1:76:ed:
82:2b:d6:33:ec:91:3e:6f:3a:4e:5b:8c:63:5d:18:a1:25:bf:
2e:3c:d0:95:54:db:86:b4:2f:0b:59:42:c4:fd:15:8a:ae:62:
52:85:99:19:76:17:6e:3f:0a:de:1b:e7:ff:16:54:fa:d2:15:
6c:4b:06:5a:69:3f:32:5e:84:b2:aa:d1:0d:af:84:aa:34:66:
8a:3e:82:4a:b4:4f:2b:3c:3b:7b:c1:e1:07:a8:5e:20:7c:53:
47:d5:d7:9f:44:08:78:76:fa:ae:bb:82:94:de:9d:c2:65:da:
f2:dd:90:0c:45:a5:ac:8f:08:1c:51:d3:37:6c:27:10:59:2f:
d6:8d:71:71:7e:89:18:fb:c4:3d:13:c6:d5:6f:fd:98:b1:63:
07:c8:5b:43:18:ff:61:e6:b4:0f:18:f8:6d:3f:67:b7:1d:0a:
ad:95:a2:72:0e:e5:8d:6d:ef:ac:c2:09:a6:04:74:90:15:51:
64:48:f5:f9:47:46:8e:f2:c7:77:03:94:39:e6:83:6e:28:b0:
dc:c3:f3:dc:1a:f0:2c:44:8a:00:b4:1b:7a:9a:88:95:f8:d1:
be:ca:c9:18:7b:71:fe:43:92:29:ad:66:3e:4b:9a:ef:dc:c1:
25:a8:15:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:23 2025 by rpki-client