
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer (raw, json)
Hash identifier: vmwunSsV2kjtoWFVl7wrWH+ZGir5H480jyTjkWqbris=
Subject key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A6524C2B84F7F82F6E23E8853E17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.248.0/23
IP: 193.105.244.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a6:52:4c:2b:84:f7:f8:2f:6e:23:e8:85:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:67:e8:f5:bc:d6:a2:81:28:66:98:1f:3b:
f0:82:0b:81:0b:43:0a:2c:22:16:05:10:1b:76:31:
73:9a:04:11:f0:a8:27:5a:e4:58:88:5f:11:5a:ae:
86:24:ee:bd:ff:fc:91:c6:59:4e:fb:0c:91:79:41:
94:93:ff:b3:33:de:87:a1:dc:f7:32:f1:b6:9b:45:
ed:7b:0d:47:53:bf:91:89:e7:25:7c:fb:99:78:e9:
39:55:7a:03:09:ba:18:19:de:f7:95:92:86:7e:0d:
7d:62:1a:73:cb:8c:65:5e:7b:1c:ca:35:cf:04:26:
ec:19:37:a6:c8:12:ce:70:f3:4b:7b:6d:26:77:55:
7f:68:ee:b3:e8:96:96:3e:07:84:02:f5:0b:e4:30:
d0:fb:3d:26:ff:00:f2:60:27:dd:49:93:55:08:aa:
8f:5a:12:95:f2:59:80:3e:a9:34:5f:35:f4:6a:7f:
9c:b9:ea:ef:5c:dc:61:e2:7c:3e:54:db:77:a0:54:
37:42:99:a8:e2:9c:d7:ad:28:03:70:a1:d5:44:9b:
48:37:46:f0:7d:e3:b6:aa:f4:19:51:ea:78:38:54:
7b:9f:6e:31:30:f6:02:d3:ac:81:d6:3c:8e:9c:73:
57:be:c7:64:39:f5:65:df:28:36:b5:a0:fb:42:2f:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.248.0/23
193.105.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:7c:16:58:56:6a:83:8d:24:ec:95:92:b3:44:28:d8:e5:ca:
a2:70:00:44:0a:e0:46:38:3f:09:b0:da:d7:f5:fe:73:ff:90:
1c:01:d7:f4:f6:e6:c4:58:aa:01:c4:a1:9b:f1:73:68:bb:64:
6f:1f:0b:f9:17:63:3f:f2:44:25:84:d9:d0:0c:20:88:dd:5b:
16:e1:f5:cd:b3:1a:9f:52:92:f0:c4:65:a9:bc:f3:9c:ad:7b:
6f:ee:61:bd:77:7b:06:b7:10:99:cb:b2:90:3b:91:79:a6:e6:
33:ee:89:f6:0d:66:37:9a:27:b9:25:b7:ca:36:84:b3:c3:5e:
f3:fa:65:fa:2f:ab:57:47:2e:65:4b:01:20:4c:44:b6:69:5b:
c8:99:47:e6:25:97:3c:be:13:1e:e4:af:1c:05:bf:2c:40:5f:
b6:f3:0f:cb:bc:f7:cd:90:2e:8b:f6:ba:b5:0b:a7:60:e0:5a:
ec:a1:6b:05:80:65:50:96:89:f8:7b:f8:81:3a:34:5d:97:60:
ac:f0:a2:25:7c:5b:90:6b:9c:02:d8:19:72:5b:84:a7:64:bd:
5b:a6:ab:36:da:89:0e:11:da:b1:b8:a1:0c:70:e1:73:cf:92:
89:ff:2d:fe:24:9b:93:49:24:2d:1c:9e:a8:d7:f5:0b:c3:7b:
dc:b1:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:06:31 2025 by rpki-client