Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
File: C2LPjNkLafk26CtXgBzXedcuPz4.cer (raw, json)
Hash identifier: tvrZT73bfgaEpFhoUJHdP7N7x/HPMzQDvldVeZCR8zM=
Subject key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144252C07E55ED501F61E40B5BEFB45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.53.216.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:25:2c:07:e5:5e:d5:01:f6:1e:40:b5:be:fb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:27:48:72:a5:6f:e1:b1:51:c4:e0:03:05:
21:31:13:2e:ae:ef:51:74:47:0c:95:fc:94:fb:2e:
48:b0:60:05:e8:b7:84:43:50:8b:17:e7:b5:7f:e1:
88:0b:7c:ad:1a:96:e8:2d:ad:0e:0c:86:fe:bd:3a:
aa:c0:25:50:11:1b:f5:6b:0f:c3:b8:c1:d1:d4:12:
08:97:b7:a1:15:7b:90:b9:e0:a2:25:75:ba:64:03:
40:94:ba:38:01:cb:c9:2f:33:f7:91:0b:e9:40:94:
d1:18:08:71:ee:71:a7:42:79:fd:55:eb:08:8a:38:
4f:b4:18:c1:28:88:55:03:88:2e:3c:d3:9c:45:78:
50:f6:5b:da:19:9d:bb:65:b5:69:64:f2:de:e8:95:
56:1e:42:94:04:a0:99:b2:c4:1b:0f:8d:5d:39:38:
24:6f:8d:ce:ff:d0:4a:7b:bd:31:a4:3a:3e:b8:cd:
98:75:51:a5:c7:ab:14:54:17:20:38:43:47:77:2e:
f5:f8:12:45:ec:7b:d9:a4:74:a7:16:1f:3f:dd:e8:
7c:5c:e9:c3:ec:7a:9a:a5:b8:63:f3:c1:a8:8e:8f:
83:58:a8:da:2c:33:14:93:a4:47:92:39:b0:67:d3:
d6:f5:6f:e1:0d:12:06:a0:d5:63:8b:e1:73:1f:cf:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:a7:bb:c3:2e:9a:bf:d6:cb:09:53:36:04:11:b3:57:9d:fa:
71:6c:50:81:67:75:92:d0:bb:51:b7:26:6c:69:ef:9d:ce:be:
76:0d:60:eb:69:01:f3:c7:9e:78:a4:f7:fd:6b:2f:37:0e:34:
30:ec:7f:f0:9b:d3:0c:0e:e3:b9:0b:7a:56:aa:d4:08:49:24:
c2:00:00:76:80:84:33:f8:bc:25:53:ef:df:b5:98:bd:e1:56:
97:4e:a5:85:79:e3:25:0c:18:43:0d:12:9c:3a:ce:e4:73:f5:
0e:76:fe:1e:c7:72:f1:bf:67:bc:14:3a:18:d0:82:a9:6d:c9:
99:56:0d:ef:4d:43:a8:f8:6e:3c:e8:3d:e0:92:6f:2c:cb:19:
b8:44:43:00:7a:50:83:96:7a:c4:49:05:3b:28:85:8c:5a:91:
a7:30:67:49:09:bb:1c:49:b0:04:6a:51:26:62:29:0c:17:dd:
5f:09:40:19:e0:d3:ea:a3:a9:3b:9a:25:c4:4b:8b:88:92:fe:
8f:ba:62:01:27:26:af:43:19:22:54:10:88:96:1a:60:2a:cc:
a0:86:78:f7:cc:d4:8e:88:78:ba:0d:a6:61:07:d4:1e:bd:a5:
4d:be:6a:5d:79:e7:98:d9:cf:be:6e:35:a8:eb:63:45:36:b9:
e3:52:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:49 2025 by rpki-client