Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.cer (raw, json)
Hash identifier: AE/QE6+/njdD6oKzCyEQZDDlMGti5V8gs5bzV6M1a8U=
Subject key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DB7D2C9AF1BD9DCACAF2CA8EFD1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21094
IP: 91.212.202.0/24
IP: 193.109.87.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:db:7d:2c:9a:f1:bd:9d:ca:ca:f2:ca:8e:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f6:38:c9:1b:3e:06:46:6e:d4:be:70:85:08:
c0:17:02:3b:e8:8f:96:88:ff:9a:a2:9b:6c:4e:e3:
1c:59:d6:f3:76:d5:fc:eb:56:ed:eb:64:9f:65:89:
48:86:8b:f9:1f:f5:dd:26:ad:09:5b:64:5a:da:e0:
62:fc:e6:7b:8a:fd:9f:3e:32:5b:25:7b:37:32:39:
ac:41:42:aa:1e:a6:dd:9e:39:51:17:45:91:ba:3a:
98:7d:fa:15:85:f1:80:a8:28:ce:79:08:c5:00:db:
d0:72:39:75:95:37:0d:77:80:57:07:6f:34:0a:68:
4e:3a:6a:a2:5e:2d:c8:b3:a1:cd:cc:6a:e1:3a:e8:
24:b1:41:be:f4:21:18:a4:89:08:23:6a:2b:23:b3:
26:5a:8d:05:a1:c2:7b:c0:7d:3c:f3:f5:f6:69:07:
30:e3:14:24:15:15:ea:37:bd:a7:1e:92:dc:c8:35:
a9:62:e1:80:8f:e2:d0:43:c6:cd:4a:35:58:f5:21:
3f:7f:10:34:98:c2:74:c9:e9:92:1d:27:46:0c:cd:
77:4c:3b:1f:2e:b6:38:22:1c:21:41:74:f4:79:fb:
ae:37:fb:38:29:65:5e:65:ff:38:17:df:7d:ef:2f:
48:f0:41:0c:b6:a4:46:5a:33:b6:98:f2:b0:aa:4a:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.202.0/24
193.109.87.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21094
Signature Algorithm: sha256WithRSAEncryption
79:24:e4:7c:2e:68:4b:15:c0:c3:c1:4f:4c:35:98:33:2f:4b:
51:23:80:0c:71:e8:dd:3a:3a:ee:43:1d:c7:bc:08:0b:8c:e5:
e3:d4:fb:a0:66:d9:a5:17:cc:db:ed:19:09:9c:f2:a4:cb:29:
4d:bd:c9:36:57:8e:33:0d:2d:77:76:0b:ab:f8:c6:96:49:48:
ee:ec:5a:6d:0c:61:04:3f:cf:8e:17:d9:6f:36:23:24:34:27:
e7:9e:c9:e7:fa:04:78:b0:91:36:6c:28:17:bd:52:54:4e:eb:
04:69:e8:64:ae:cb:98:7f:7e:44:bf:09:92:7d:b1:dd:8c:a8:
b7:be:33:ee:05:dd:cd:74:c7:0b:cf:7e:0a:79:3b:35:44:a7:
32:d4:d8:6f:0a:fe:5b:4b:a3:5a:2e:dc:01:c1:15:ef:5a:6f:
9c:13:aa:7e:58:47:cb:32:6b:1f:39:d1:d6:44:5f:a1:57:68:
e2:14:1e:36:92:7e:af:b2:31:00:6a:b2:05:b5:75:24:5c:4c:
ad:74:b7:a4:46:a7:a5:5e:06:5f:7d:37:58:6f:75:41:22:19:
f7:7f:db:f8:ee:8b:af:d9:30:07:93:f6:72:57:86:fd:47:47:
6b:7f:5a:c9:c9:70:64:6c:a6:d6:62:fd:0b:a2:ac:f5:8f:39:
e7:cd:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:06:27 2025 by rpki-client