
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
File: JEXvDPLil0idGXNw-IXVn4npWqs.cer (raw, json)
Hash identifier: L+kcduTcE/n1uQJO1w+M74oFo9MeJl+eyW7KmDFAjTc=
Subject key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D323025BD7E24EBC6B85EADAA7D53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206596
IP: 185.181.180.0/22
IP: 2a06:1cc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:32:30:25:bd:7e:24:eb:c6:b8:5e:ad:aa:7d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:95:7f:99:bd:31:58:6d:26:42:cb:df:80:
25:b3:cd:67:2a:74:b8:55:40:39:15:37:d3:6b:61:
68:e2:3c:8a:dd:3e:a7:30:73:b0:e0:18:83:9a:a9:
be:a1:f6:8d:71:7f:c1:ca:2b:f0:72:ff:98:4f:87:
2d:f5:5f:32:9b:34:fd:02:5c:44:38:22:fb:e2:1d:
96:a9:9f:8b:a5:5a:06:d3:32:a6:11:40:93:63:cc:
f1:a4:a2:35:03:d1:f4:da:f9:fd:07:05:fe:18:03:
0d:b2:70:9e:27:e5:14:89:1e:cd:95:83:9c:30:66:
17:49:ca:2a:8d:3d:f4:bd:67:d2:cd:61:0e:68:14:
c9:cb:ab:06:eb:88:44:9d:f6:a4:e7:91:59:1f:ff:
72:08:ed:2f:c0:e4:5d:70:90:4f:bf:23:2e:cf:59:
f2:55:0f:7e:55:85:96:0c:2d:c1:71:76:fe:3a:cd:
26:35:52:91:de:1c:8d:33:02:87:34:ce:12:68:cb:
0f:d9:0d:0f:51:f5:8e:14:e6:6c:d7:e6:c9:58:10:
81:77:c3:ac:e5:f9:39:04:10:e2:df:9b:34:68:a5:
93:4c:e2:7d:8a:60:eb:57:d6:9e:ba:41:b5:03:f5:
76:e6:c0:e6:02:23:c6:3d:4d:e9:9a:be:a3:2d:a5:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.180.0/22
IPv6:
2a06:1cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206596
Signature Algorithm: sha256WithRSAEncryption
59:f7:c0:c1:e8:79:97:96:b4:e1:10:54:42:15:1c:bc:f5:4a:
73:e4:04:f0:b2:99:d6:e3:4d:99:bf:00:cd:43:d7:57:45:87:
f2:29:05:59:4e:8e:b6:47:d1:af:d7:0f:8e:e6:3d:bc:5e:b1:
8e:ca:5c:ad:c4:89:6c:31:e1:5d:6b:20:91:61:2a:6f:d9:49:
f4:3c:ff:b5:1b:68:57:82:e0:af:df:61:66:50:9f:07:2d:71:
ea:3d:d0:c8:49:8a:12:a2:ba:a3:86:77:a5:45:c8:33:bb:51:
ec:8c:5b:98:6a:f8:b0:09:11:8e:f1:91:ee:81:dc:23:6b:84:
82:da:3d:5c:66:4c:56:96:62:b5:79:8d:8f:c6:5b:d7:83:5d:
21:12:96:1a:88:b7:f3:82:89:b2:75:46:33:11:c3:aa:f1:2d:
8e:e0:59:48:61:92:3e:02:13:86:01:de:87:08:2d:03:92:05:
be:51:b2:51:22:90:3e:b2:40:64:67:b4:44:93:d7:6b:65:bb:
f9:27:f1:ea:ec:25:b8:2a:2a:b1:d1:85:80:ea:7f:54:38:6d:
09:7b:9d:a1:19:f0:57:41:63:d0:0c:20:9b:fb:cd:02:d0:aa:
ba:72:f9:44:72:60:d9:de:c5:f9:74:fa:e1:82:8b:ee:fd:f9:
09:8a:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:44 2025 by rpki-client