Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
File: HRUAB3Kzw_orvXcn09OJORoUYz4.cer (raw, json)
Hash identifier: 54TzEJPG4cECe1PYUi1C69WYAlrXcGlXH9MLxBjBrLY=
Subject key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453E1A9EC52DAAC55B61BE62214D1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.224.44.0/22
IP: 2a14:6940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3e:1a:9e:c5:2d:aa:c5:5b:61:be:62:21:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:10:6a:8c:29:cb:e9:2a:4f:f0:db:10:00:
b9:47:72:20:07:a6:a3:88:0f:46:a9:72:97:d8:b7:
ec:fa:e9:89:0f:67:de:87:ac:3a:ba:16:aa:b3:94:
af:1f:f9:46:23:58:13:95:73:19:16:f7:05:54:b7:
65:a9:7e:fa:da:17:83:dc:a9:a7:02:ba:59:25:5d:
c0:53:84:01:4c:c5:c0:e0:9e:1f:1f:55:ff:b3:3b:
e4:14:9a:ab:8c:d4:48:b7:db:96:53:ea:81:bd:54:
76:8f:0e:8f:3f:4c:fa:61:d7:28:6f:42:60:4c:0c:
a0:bd:28:3d:39:ea:58:cf:f8:b1:41:91:aa:bd:97:
b0:9c:5d:85:20:e9:26:61:ab:22:59:5b:6f:87:59:
c7:af:dc:eb:40:5e:08:4f:90:bc:d9:73:12:09:48:
d3:93:23:40:19:72:1d:c5:d7:e7:62:a0:ae:b7:bc:
7c:77:2e:32:6f:8d:2d:cd:ea:27:be:d2:eb:32:a2:
0f:32:88:f6:40:d2:1d:3d:27:bb:ed:72:d1:3c:40:
72:97:1a:9d:53:18:c3:2c:5a:5e:8c:0a:44:54:fd:
51:9c:8d:1a:bc:bf:3d:9a:8c:99:db:26:d0:c3:9e:
b5:45:09:6c:65:b1:7a:04:09:d3:f3:55:0e:0a:2f:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.44.0/22
IPv6:
2a14:6940::/32
Signature Algorithm: sha256WithRSAEncryption
ab:5b:d9:20:e5:cc:dc:3f:3b:42:fa:81:a5:2d:9b:50:36:33:
fc:b3:a8:58:0d:9d:8e:c5:dc:45:06:7f:64:c6:a4:23:20:18:
7c:d5:9e:35:8d:ea:c1:98:1f:b3:b7:68:b6:1d:32:3d:53:29:
a3:b0:5a:64:1d:78:eb:08:47:21:d0:bb:3a:27:6a:50:39:3d:
ec:44:14:50:27:ee:80:49:89:ac:ca:d2:23:9d:23:12:39:f4:
39:d8:d3:5a:a7:69:a8:c7:bc:3c:ca:1d:28:7a:5e:0e:06:cf:
da:da:16:4b:ad:08:e3:c4:af:39:38:c5:4a:19:95:b3:47:db:
77:95:bc:97:03:06:11:0c:e5:ae:86:18:13:e2:76:5a:11:ce:
35:3e:15:b5:ad:8c:ff:de:e3:17:dd:a1:43:83:eb:44:f8:76:
7e:2c:ad:3f:dc:57:93:bf:2e:5b:02:4f:52:aa:3a:da:ce:f3:
c7:1e:05:44:f1:25:2c:b1:15:af:62:e7:b0:86:b4:66:73:4a:
2c:05:eb:79:80:8c:0f:4d:cb:14:72:8d:a9:d9:6a:20:b2:b7:
f1:50:54:58:f5:45:b8:8c:7d:ad:3d:1a:4c:a1:54:12:19:75:
e0:a4:af:d7:76:ea:ec:0b:45:7e:9a:e1:a2:3b:27:bb:f9:c3:
cf:bc:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:52 2025 by rpki-client