Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.cer (raw, json)
Hash identifier: g0ySMIOgA+/YC0KXipJbZFVAZmWcVK83508VgwCgk3A=
Subject key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5E279568B6875D17C17C8009DF437
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34182
IP: 193.28.185.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e2:79:56:8b:68:75:d1:7c:17:c8:00:9d:f4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:75:7e:f8:04:30:f2:4e:0a:95:d7:82:54:
26:e3:94:df:fe:f1:60:5f:20:95:d1:d8:36:64:54:
22:07:5c:ad:a2:b4:d7:bd:9a:4d:d3:35:28:ab:ba:
78:ae:33:11:f2:bc:06:86:d2:f0:fe:f6:22:d2:db:
37:07:52:ea:de:ed:1f:e2:9a:e1:8a:06:48:da:7e:
e5:dd:15:eb:5f:2f:77:55:ab:f4:d1:e0:c5:5c:2a:
04:4b:04:9e:e7:43:82:d3:06:3b:28:25:49:80:d6:
21:48:0f:d6:c7:a9:c8:ec:ad:b1:ef:9d:14:7e:99:
6d:89:56:20:d2:4e:20:5a:48:5b:c0:89:fa:72:48:
5f:cb:bb:0b:93:dc:aa:b3:6a:c1:51:55:1d:cc:c2:
0d:77:93:1f:9d:f7:84:ef:3b:a9:e8:bb:4e:f7:38:
91:53:4c:52:96:89:c8:4a:cf:9b:d7:ec:c2:88:24:
43:4a:95:f5:fc:e5:99:eb:5a:2a:a5:c1:0d:20:70:
81:5d:04:59:51:7d:93:0f:97:26:4d:3d:fe:35:a9:
d4:91:53:44:ac:8e:4b:dc:7c:d9:10:87:28:1a:4a:
96:2e:37:5d:29:4d:af:c3:3b:12:24:6c:4d:fe:84:
07:35:fe:41:de:9a:b2:cf:c9:56:1c:33:e1:d9:48:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.185.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34182
Signature Algorithm: sha256WithRSAEncryption
11:46:fe:d6:ff:b3:f1:e3:5e:aa:d9:67:9a:81:bf:3e:28:e6:
bf:9f:97:7d:ae:7b:e3:56:77:eb:d0:1c:85:e5:9e:6a:4c:e6:
1d:b8:b8:4a:82:a8:bb:0f:7d:1d:41:b6:fb:01:85:bd:d3:f2:
a7:b9:cb:c8:3a:d0:f6:3f:15:3c:ec:39:3f:5e:d4:6c:d9:d4:
27:a2:81:6b:54:41:a6:7e:e0:50:86:cf:fa:ec:ed:ae:f2:51:
21:4e:1e:7e:c8:2f:01:b6:85:2d:1c:6d:a9:5c:49:a5:48:78:
f4:c3:68:58:61:8f:97:47:44:84:14:03:14:e8:d5:b8:87:26:
cc:90:53:c5:b5:0f:89:7d:1d:d1:f5:cf:67:2d:5b:36:0a:91:
62:e1:a2:fc:ba:20:47:59:c3:7e:30:f9:74:fe:fb:b5:08:5f:
d9:3c:09:87:6d:62:a4:72:01:70:d6:66:cf:d0:f1:de:f0:47:
06:4a:3d:95:c4:23:07:45:6e:16:f3:93:0e:1c:4a:28:c9:fe:
1e:48:cf:f7:88:d8:1a:03:94:94:f7:a2:25:a3:29:81:6c:23:
75:2a:99:ad:42:a3:b4:de:51:d2:4f:0a:ed:21:bd:a1:89:e4:
e8:ae:b7:5d:b8:a0:2a:1e:21:00:91:4d:9d:25:cf:51:06:a3:
56:ef:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:53 2025 by rpki-client