Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
File: VwFSjCouLEaRPAsoyjVw84gPGlY.cer (raw, json)
Hash identifier: BiMnFCTbZuD8NfEuKEQ8KZKtJ1c4liewhP+u+CGd2C8=
Subject key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5C811198302D6C75E63C47069A9D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.242.124.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c8:11:19:83:02:d6:c7:5e:63:c4:70:69:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:9d:99:a4:bd:91:a4:34:0e:33:dd:74:0f:
df:ee:99:dc:38:88:f8:ad:f9:a3:ab:88:e5:60:16:
3a:96:8e:f7:53:55:74:5f:36:dd:13:e7:0e:fa:b7:
52:92:7e:29:57:54:17:fd:24:87:83:6d:56:3f:b1:
7d:be:c4:f4:e9:1d:29:c6:fc:44:56:b8:45:1a:0b:
0f:5c:11:54:25:f4:97:9d:0e:4d:5c:98:3a:8e:a1:
0d:b0:2f:3e:8b:00:59:8a:b3:b6:aa:12:65:77:0e:
d2:55:e4:91:8e:79:f4:1c:31:bf:71:b5:f8:09:1f:
24:06:df:44:91:33:5e:56:f1:2d:c2:2c:36:eb:04:
0c:a3:2c:d0:90:31:84:87:49:1c:83:2a:c7:e9:e3:
b8:b0:9d:3e:00:58:5d:1c:3e:4d:36:62:45:13:1d:
d1:c7:29:dc:bb:ca:84:fa:d8:0c:dd:d7:fa:35:7d:
66:e2:fa:b2:83:fa:3e:ec:b1:3c:62:a9:2d:56:fe:
2f:06:0f:40:59:0e:80:d4:66:85:dc:11:1a:43:06:
02:2f:7d:08:cc:ff:d1:6b:e6:7a:21:7d:3d:a3:79:
a9:c2:02:c5:dc:9e:60:65:0c:f4:bc:c9:a7:3e:96:
0c:e9:07:7a:3a:20:01:4c:ed:28:4c:d3:85:63:a7:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ad:28:35:7e:d7:84:8c:e5:c2:f8:e4:0e:fa:f6:3d:fc:e8:
a8:5c:2a:f1:72:7b:65:ca:4a:cb:c8:33:05:e1:df:74:11:df:
37:ef:e0:8a:1b:a4:62:eb:cd:d6:9c:50:41:a6:c0:b1:dc:58:
9a:48:92:c1:d9:a5:c7:69:39:0d:54:41:9c:4e:0b:e8:f4:9d:
56:f7:6d:95:f1:dd:d0:96:10:b2:9f:d8:67:71:e5:53:50:8a:
05:05:c2:83:47:d1:b1:04:05:c8:5d:ca:e7:3c:0d:4b:93:32:
5b:5b:73:73:d2:83:94:f1:9b:a8:fa:ad:0f:1d:41:d7:86:4d:
c3:a0:1f:53:e8:82:c1:f0:c7:4f:d1:8c:43:08:ad:ae:44:3a:
d2:36:35:68:9d:24:ac:18:42:c9:b9:d0:2d:35:c9:55:8e:19:
70:58:74:5c:80:0e:07:ae:f2:67:a8:d6:46:54:fb:3a:ec:bf:
15:c0:ec:d0:fd:59:aa:d3:e1:75:09:56:69:90:3b:bf:f5:03:
35:8e:ff:67:7d:2e:91:75:87:ae:9d:d5:c0:39:54:ca:01:fd:
6c:ba:7e:7a:9f:39:40:75:52:98:38:3b:7f:80:9f:c1:eb:41:
24:69:83:2a:bd:91:6e:1f:f5:92:0d:42:ad:a9:5d:d8:78:b8:
9b:70:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:35 2025 by rpki-client