Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.cer (raw, json)
Hash identifier: iPmHAf0Vq/QQXs8Q0dkk/POe/aWPYD+H3PA1rsJiC1k=
Subject key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214422BE90829B88674078D82F89C444
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211029
IP: 185.253.244.0/22
IP: 2a12:9540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:22:be:90:82:9b:88:67:40:78:d8:2f:89:c4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:1c:0f:8a:db:b5:fd:3a:96:40:c1:db:27:
f5:b2:9a:8b:5a:71:93:23:59:bd:73:08:cd:d0:38:
bd:1d:1a:0c:3d:78:c9:30:36:f0:82:94:cb:38:e4:
12:a7:65:dc:68:6e:af:ac:90:aa:1b:5f:97:e8:96:
69:ca:d8:76:61:7b:b8:21:f7:66:f0:3a:fe:71:b0:
f4:43:c5:12:71:8a:01:26:73:94:ec:e6:e2:e8:bf:
85:c2:8e:c4:ea:94:43:8c:db:8b:8b:d7:3c:b0:83:
da:a8:06:73:8b:19:8f:f6:3d:6d:d5:78:81:d7:9a:
67:19:9b:a7:98:09:ce:c4:51:f5:f7:11:64:42:a1:
37:fd:e8:b0:aa:08:a8:63:f1:45:bb:c8:64:3f:de:
82:c9:0d:be:ee:f5:0b:55:45:2b:60:3a:75:ea:dd:
d4:cf:50:48:d6:93:ce:be:06:8c:81:d3:52:c7:81:
a9:f1:a2:fd:0f:c3:21:82:ab:41:9f:b9:46:9d:55:
21:8e:5b:8f:cf:6c:35:97:8b:48:e8:a7:50:a3:c7:
b0:9d:9a:b8:6e:73:3a:40:d7:d6:d7:3e:e4:86:7b:
86:4d:a7:9e:b3:2e:92:f2:62:b2:8c:31:6d:e1:ce:
5e:58:c8:23:1b:a0:5e:ae:9c:bc:89:fb:de:88:a7:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.244.0/22
IPv6:
2a12:9540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211029
Signature Algorithm: sha256WithRSAEncryption
1f:93:2e:28:97:7e:c4:30:d5:5e:97:02:02:a7:6a:83:13:71:
2b:f4:3a:0b:12:ef:0e:f2:d2:2c:69:b6:56:1c:ce:92:3f:d1:
a5:a4:16:cd:fc:58:75:dd:56:dc:2e:69:75:52:29:22:9c:3d:
20:a4:c0:3c:4d:4a:b4:0f:bb:d9:4a:c5:00:13:b6:9c:09:f7:
9c:8b:a2:43:42:94:4a:dd:a3:46:5c:4b:d2:3a:0d:34:b2:c2:
ee:c7:3a:d4:f2:8c:47:b1:bd:4b:df:d6:a4:88:a2:bb:39:a5:
c4:63:d8:56:86:45:da:64:6f:cb:f3:d4:73:f4:7c:95:f4:b8:
dc:8c:82:65:02:af:93:dd:48:9e:34:53:40:b0:2f:6c:59:9f:
c1:b5:42:7e:0d:f6:e6:d6:ce:7b:8a:4f:87:fd:8a:21:5e:86:
ab:1a:5f:84:c1:b9:d3:ad:76:45:b8:95:b8:55:63:5d:f9:94:
73:2b:c9:33:60:00:4d:5d:78:c4:65:09:45:53:c4:a6:c5:8a:
fc:ba:82:21:2b:77:61:20:90:44:64:a9:4d:a0:2f:f4:58:7d:
bb:4f:ef:65:3f:42:6c:69:ba:aa:8d:7a:f7:15:e3:9f:ff:67:
1c:fb:93:5b:dd:4a:cb:9a:d9:b4:2b:71:b9:11:98:13:7b:0a:
a9:cf:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:04 2025 by rpki-client