Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer (raw, json)
Hash identifier: C92TNZm+5xpr/7N5lonPg6jkRAk1p8BvCClTYFL5aS4=
Subject key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B288DBC59B1DA1E3802B059B7C612D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15550
IP: 193.25.224.0/20
IP: 2001:678:9fc::/48
IP: 2001:67c:242c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:88:db:c5:9b:1d:a1:e3:80:2b:05:9b:7c:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:f4:22:c2:31:5d:f0:2e:93:da:dc:bc:54:
34:0d:d2:9b:7b:27:d9:71:2f:80:47:7c:9d:8e:20:
6e:24:ef:05:91:aa:b7:1c:03:c5:ad:41:44:af:8b:
05:fb:02:25:18:0b:c2:41:5f:45:dd:a4:af:50:aa:
d7:7c:69:00:5c:5b:f4:7f:f8:c7:57:32:63:f7:ff:
96:14:dd:c7:01:ef:f4:a9:31:35:73:45:50:76:ea:
9f:10:a3:8a:5d:e5:2d:00:7a:c3:ff:3f:01:fb:63:
d8:0f:18:03:60:ec:b4:90:6f:f7:40:80:c1:3f:6c:
ec:8a:e3:8d:5a:58:88:87:f8:bd:51:78:1d:1e:58:
92:a3:8a:b3:75:b4:f8:f4:06:ab:ab:71:cd:b6:f7:
d6:a3:38:5c:76:de:68:bf:de:57:bc:88:c4:6d:d4:
ff:a6:82:29:c3:2b:03:23:c8:9b:4d:e3:9d:9a:de:
49:98:3e:a8:0a:93:00:41:c2:b7:dc:b6:cf:5c:d0:
f3:fe:8d:9d:34:68:cc:c3:fb:58:e9:e0:6c:98:9b:
9a:6d:c9:3b:bf:d1:e1:39:15:88:24:65:fa:50:29:
79:cc:26:d8:7e:0c:0e:9a:5b:c3:22:16:19:b2:ac:
9f:34:5a:77:58:61:af:ea:b7:00:a6:fb:f2:fc:be:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.224.0/20
IPv6:
2001:678:9fc::/48
2001:67c:242c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15550
Signature Algorithm: sha256WithRSAEncryption
2e:70:e6:c6:60:d6:e5:0b:f4:2b:ba:3c:13:eb:09:02:b5:06:
1d:2f:b0:11:e9:63:45:8a:ba:25:ea:03:e2:8d:5f:6d:14:1c:
79:7f:5e:25:e6:c7:da:1e:4b:14:c1:26:b2:72:80:93:86:d2:
73:4f:11:89:f4:23:75:5b:5f:49:2c:1a:0b:1a:6a:60:5f:bc:
23:6f:39:db:fa:54:b9:c8:36:f9:40:69:c1:37:a5:ca:a5:87:
a2:f3:ee:86:c2:9a:1f:bb:c0:dd:c7:ff:4b:6f:21:82:9e:ad:
1d:83:9d:90:d5:c2:71:60:36:1d:72:fa:42:3b:ad:76:1f:ad:
15:43:af:32:3b:2b:a0:16:75:66:d4:fe:58:6d:3f:c2:c2:dd:
0c:e7:22:29:85:79:c3:a8:a1:e6:db:60:b4:ca:b0:60:20:b8:
c1:30:c0:39:54:54:20:ce:fe:31:38:38:40:96:6f:a6:da:94:
11:7e:8d:2e:7c:0f:fc:08:19:3a:9e:3b:fe:d6:5e:0f:da:3c:
c8:84:53:ac:fe:45:e0:ec:84:04:35:ae:f1:23:46:c6:dd:d1:
26:6e:28:ce:8f:85:e7:ba:9a:58:ac:f2:cf:d6:40:d3:47:9f:
fd:9c:78:7a:21:e6:43:9b:70:ce:97:ac:67:df:10:b4:1f:89:
67:5f:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:17 2025 by rpki-client