Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.cer (raw, json)
Hash identifier: 7NT2HcaAZqanJGNOLc6BCl6mChqmv1wOypJCher+ifw=
Subject key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B38E3DCF31A7C5CBD57C47FAAFA025
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8643
IP: 87.239.232.0/21
IP: 88.197.0.0/17
IP: 193.218.72.0/24
IP: 195.134.64.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8e:3d:cf:31:a7:c5:cb:d5:7c:47:fa:af:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:37:65:76:39:b9:bc:ed:c6:a6:41:b6:f1:
a1:15:42:54:fc:0b:d1:7e:bb:0a:48:48:68:36:c7:
5c:8c:97:92:14:fb:bc:73:28:44:03:f5:ee:99:1f:
3d:fc:91:cd:a7:9a:f0:65:94:16:4e:dd:5f:1f:72:
95:8e:9c:fb:3f:81:38:4d:91:eb:5f:82:a4:a5:2b:
ac:36:ab:30:14:25:f0:74:50:71:01:5f:76:32:70:
cc:ca:5f:a6:34:36:07:06:7d:25:d5:e5:bd:90:2e:
c7:18:63:e8:b9:71:41:e7:d3:49:1b:ed:39:b4:ab:
69:c3:a1:79:d8:86:7f:8c:eb:5e:7b:95:90:2a:b4:
d1:7a:b8:46:00:9b:ec:44:3d:ad:2c:9a:cc:e1:63:
92:a6:6c:39:34:48:e6:5b:74:63:29:33:8c:76:b4:
d1:a3:4e:68:c4:2c:b6:dd:05:b6:f3:a8:a9:38:9d:
77:ce:d2:12:d7:63:56:1a:41:8b:a7:df:fb:01:be:
4b:16:45:06:97:e3:96:52:60:5a:c7:cb:38:e7:4b:
51:ca:81:f8:75:23:99:b1:4c:80:c8:46:31:f6:ce:
52:b5:a2:3b:8e:19:ef:55:c7:91:21:d0:97:82:85:
5d:0f:b2:79:34:7e:a2:58:e2:0e:07:c6:57:22:8c:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.232.0/21
88.197.0.0/17
193.218.72.0/24
195.134.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8643
Signature Algorithm: sha256WithRSAEncryption
2e:30:28:d7:02:00:7e:4f:6e:b4:90:0a:93:d9:b3:f1:e5:24:
fe:42:8f:7d:c6:b3:0c:92:8d:92:d8:29:9a:5d:58:85:3a:b2:
76:d8:1d:8c:79:79:b4:d2:0f:97:f0:ae:67:14:36:3f:26:04:
e3:b6:27:c4:0b:cd:a9:0d:fe:b5:45:c7:2e:26:76:e3:55:62:
95:23:39:a8:31:21:0e:cf:6c:44:27:d1:42:29:be:27:35:47:
d4:19:d7:7f:19:bb:34:7a:13:4e:4c:da:89:89:b5:0d:89:4a:
5e:1b:62:11:41:51:47:f8:d3:91:0e:02:3a:36:fe:8a:4c:ca:
fb:38:50:cd:11:c5:b3:52:0d:05:18:91:9a:94:7e:40:af:b9:
41:56:18:d9:b0:52:87:d2:5c:63:1e:e5:34:04:d8:ad:e7:7f:
37:3a:33:0a:ea:b7:d0:6e:33:77:d4:bd:a4:90:1a:8a:bd:76:
04:4c:48:5e:2c:aa:11:31:88:c8:ad:62:7c:d7:c6:6d:a9:71:
19:15:21:15:ed:e9:6f:6e:9f:2e:7a:1a:cc:5f:1a:5e:a7:89:
19:83:56:b5:04:87:83:19:ce:d5:f1:dd:01:4f:00:8d:8d:53:
06:a9:ae:85:7f:b2:f4:11:c1:4d:af:92:4e:96:aa:2b:07:6f:
90:6d:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:08 2025 by rpki-client