Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
File: PocLmnADxP2cUb01Sp3vo_t3tKk.cer (raw, json)
Hash identifier: MSPeQyKp8xkeTRS+l0I0ytPnzYNfMY8+D2H1KynMHW0=
Subject key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F7584B451EA6E201AB417F3844D5EE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:23:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207895
IP: 36.255.92.0/22
IP: 91.132.227.0/24
IP: 185.111.188.0/23
IP: 185.130.60.0/22
IP: 185.213.240.0/22
IP: 185.229.200.0/22
IP: 185.244.94.0/23
IP: 2a06:5ec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:75:84:b4:51:ea:6e:20:1a:b4:17:f3:84:4d:5e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:fe:b6:98:f6:d6:da:11:ff:03:ba:43:0f:
b0:45:a0:f0:04:2e:53:0d:e1:e1:34:ea:74:8a:17:
87:23:54:37:f0:d2:8f:61:cd:ca:0e:9d:e0:14:1d:
e3:86:cc:64:39:c4:36:91:bf:69:fa:76:c3:39:c2:
16:db:7e:9b:60:b6:75:be:fd:d8:12:67:5d:e9:0c:
2e:59:18:26:57:88:96:3f:0f:c2:96:3f:9c:5b:a7:
9b:39:56:56:36:4f:7d:b8:33:70:58:97:b6:d8:72:
1e:a5:bd:12:84:9a:d9:a2:51:9c:f6:cf:f3:32:11:
3e:9c:bd:5a:6a:73:b2:17:9d:4e:b2:ab:06:bf:10:
5c:e0:37:30:89:d4:08:b3:27:0e:56:0f:36:5c:81:
f1:56:07:6c:ed:33:bf:31:98:a3:87:f1:bc:23:91:
4e:b6:fb:74:81:ff:56:34:88:3a:ed:49:cc:d5:36:
c8:2d:30:47:e9:16:3d:41:3b:55:2b:b6:2d:b3:73:
13:7c:2e:56:92:9e:d7:96:07:08:bc:23:6d:0a:3a:
81:0d:3e:ab:50:d1:1b:f5:1f:3b:e1:e6:2e:4c:17:
20:59:be:57:04:10:a2:9a:57:4a:ea:48:ba:a5:17:
aa:e0:0f:a6:73:81:f0:dd:4a:11:4c:74:11:12:2a:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/22
91.132.227.0/24
185.111.188.0/23
185.130.60.0/22
185.213.240.0/22
185.229.200.0/22
185.244.94.0/23
IPv6:
2a06:5ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207895
Signature Algorithm: sha256WithRSAEncryption
0b:cd:a0:ed:18:58:37:48:ac:c0:fa:50:b8:99:fc:3c:da:e7:
ae:e0:76:4f:37:71:e7:e4:96:3e:dd:bf:0e:82:aa:06:c5:0f:
0b:7d:9e:90:68:d4:8a:6a:eb:89:da:72:12:d0:90:17:99:48:
c8:54:80:b0:74:31:65:85:06:3e:3e:a9:53:e1:7c:f2:90:ab:
b4:4a:9e:48:d1:be:93:84:fe:80:af:8a:49:b3:b5:54:3a:89:
c6:7c:c8:b6:11:f7:bb:71:10:42:d0:28:8d:43:fd:40:17:e0:
2b:79:f1:b1:dc:cd:aa:4c:b4:13:a2:45:ef:43:85:19:d8:d7:
99:a6:b3:a3:28:21:17:5c:30:7f:50:ac:6c:f5:f9:39:f8:03:
95:f7:60:7d:78:8a:1d:ad:78:8d:c7:11:a6:b4:0d:5f:6e:ad:
08:7a:2e:a7:64:9c:fb:54:99:30:f1:ae:9e:64:1e:62:7f:e1:
2c:ac:22:c4:18:db:5a:ec:e2:5c:72:7b:3a:7b:76:74:68:76:
5f:bb:e8:37:f3:45:15:47:1d:c8:91:ae:45:37:66:07:dd:d0:
e1:e6:45:51:18:17:ba:f4:a4:87:ce:72:d9:66:32:ca:62:33:
74:7f:b3:90:20:7a:22:93:c5:9b:da:f9:47:c7:55:0c:07:29:
da:a6:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:31 2025 by rpki-client