Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
File: TkJsh9-8xVLceQ_sPtHN56j4huk.cer (raw, json)
Hash identifier: HDnokJMVf7ELZeHxR0Mo1QlF0obuuxmTh1Pe7H4Id9w=
Subject key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423692A0F020668F9EB8BF40720A82AD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48197
IP: 94.127.152.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2a:0f:02:06:68:f9:eb:8b:f4:07:20:a8:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:fe:85:bd:c7:27:9c:f8:52:a7:60:7b:67:
60:2c:5e:6d:dc:e7:4e:9c:ca:16:b9:a3:54:29:34:
47:8a:59:68:ab:8f:0e:2a:71:9c:4d:ca:cd:e1:c3:
4a:e9:68:1b:5d:ee:b4:76:fa:66:81:8b:48:7e:49:
3b:cd:2e:49:35:f7:d4:d4:39:c4:4a:56:ac:d9:ed:
a6:eb:2f:03:43:37:54:4d:dc:9b:25:f7:3f:2c:6e:
ee:8d:33:d1:3b:48:ef:99:58:92:a4:01:e1:9a:4d:
0d:fc:d4:23:33:56:01:bf:89:ef:e1:2a:ab:77:55:
7b:24:f6:77:ff:8f:bc:9b:78:c9:c9:70:7b:4c:8a:
5d:80:0e:46:55:0c:ff:4e:23:17:64:0d:49:55:80:
8b:39:4d:26:b5:c0:fd:4e:31:b6:63:18:c9:b3:ac:
df:e2:d8:bc:3e:b6:5c:cb:bf:bc:03:cf:1f:d6:1c:
2f:cb:9b:88:e0:6e:e6:b8:1e:2f:35:1a:b1:2b:7d:
8e:f4:0a:96:f2:a0:da:42:f5:3c:a7:40:78:e4:5a:
71:6f:ea:5a:28:19:52:39:5d:14:7c:e0:62:57:72:
8d:7b:b4:0b:7a:2e:a9:69:f9:8c:bc:f2:23:49:19:
0c:1a:2c:e7:bc:68:0c:7d:e7:18:c9:40:43:b6:59:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.152.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48197
Signature Algorithm: sha256WithRSAEncryption
8d:32:61:95:85:2e:a2:f6:6d:a9:9c:2b:70:64:f4:3e:d2:08:
f1:38:97:34:c9:4e:02:a4:20:44:39:80:90:86:20:9d:24:d6:
fe:0e:ab:86:1a:d6:87:f0:11:77:19:17:27:a1:86:a6:97:5a:
d1:49:e8:b4:f2:1e:ee:81:69:5e:e1:84:ab:da:53:6b:2d:93:
27:48:36:0f:56:af:11:c4:8e:97:5d:e7:80:80:b1:e6:aa:5b:
c9:78:7e:83:87:68:cb:25:f8:60:28:3f:83:ca:41:c2:3a:9e:
27:fa:3d:ca:65:69:0b:e3:13:6b:a3:49:a9:33:97:88:3d:00:
6f:43:8b:18:31:bd:e8:23:5e:30:82:67:b1:27:46:1c:cc:ee:
1f:a1:96:eb:e0:51:e5:66:be:24:a3:36:1a:c7:32:73:dc:8b:
6b:02:cc:03:4d:10:c0:e9:46:08:8d:4b:6a:e1:01:7d:bf:09:
18:9a:33:8b:3d:6e:1a:71:03:ff:a0:cc:c1:ce:79:e1:b6:43:
8f:8e:7d:2a:ce:09:e9:2a:62:1d:d2:3f:bd:61:e4:26:50:ff:
39:83:5f:56:34:f8:64:a1:fb:5d:f4:b1:41:81:9e:f4:66:30:
09:52:37:9d:a2:0e:c9:fc:bb:ba:e0:fc:6c:7b:75:e0:92:1b:
ca:31:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:20 2025 by rpki-client