Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.cer (raw, json)
Hash identifier: kTAwkWvE4oDHCtVqtaw+K0Otx1gHvecqADb19GtdDYo=
Subject key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D20226EFCBBA47D7F54BD15E7E0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.189.74.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:02:26:ef:cb:ba:47:d7:f5:4b:d1:5e:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:46:0b:51:d7:67:2a:2f:bf:89:6a:13:d5:
c4:1f:25:44:c2:8c:f6:bb:5b:38:b8:fd:04:d5:61:
cb:a0:94:a6:5f:2b:bc:fb:77:c8:5d:7e:37:1f:ce:
5f:d9:f6:b4:79:d9:4e:0e:25:3d:53:21:65:a3:e1:
90:0f:08:f6:97:c9:cc:64:73:92:28:0b:f6:b3:9c:
12:55:49:af:76:df:99:ab:05:b0:78:ff:2a:f7:91:
ec:51:b8:c3:1d:a0:72:c3:fa:e5:4a:4f:44:8d:6b:
b1:9d:50:42:8d:d7:1b:3a:f1:9e:f6:1a:17:6a:cc:
6a:f7:86:6a:d2:2f:86:47:37:74:e9:98:21:22:15:
55:05:e3:69:91:6a:ee:bc:a1:93:a0:f7:63:6d:e2:
a7:ab:a5:5f:7e:ae:5b:36:0d:57:1a:f4:85:53:2b:
cc:b9:80:82:c6:9c:5b:ed:0c:64:22:ff:2e:7e:f9:
05:78:fb:9a:4d:c5:b4:c6:c0:68:69:dd:29:a5:39:
e1:e8:d5:00:cd:34:25:4b:e3:2b:3c:7f:11:4e:b3:
ba:4f:88:6e:96:ed:09:a5:23:d4:7d:9d:ca:e0:df:
4f:87:5a:f3:b8:d9:a8:cc:5e:de:0b:48:9f:2d:c9:
46:c0:3e:ed:b8:c9:8d:e5:8d:b2:a9:2e:6b:fa:7a:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
24:74:87:ed:a8:09:8d:f3:37:2d:22:7c:68:70:c6:b5:03:dd:
65:88:3b:47:1e:cb:97:b0:bd:2b:12:9b:8d:e0:bb:2f:f1:1c:
4c:99:de:fd:5c:70:87:aa:25:d2:6c:95:67:ef:69:48:1a:ba:
08:7d:d5:c3:d9:8c:b0:e9:2a:77:0b:08:97:74:a9:b5:7b:b6:
15:e4:46:d0:19:3a:e1:37:50:4e:1c:9f:fc:1c:93:fa:38:76:
93:d2:40:f5:1c:10:0f:5c:0c:ac:ac:d2:d2:a4:48:40:55:e9:
5f:1c:5e:24:7c:df:97:2c:12:39:b8:33:eb:5f:e3:1f:0a:21:
1e:59:0b:7b:cb:a7:9c:fb:93:4b:17:f0:c5:f4:55:b6:81:12:
a9:e7:e4:54:8c:87:04:c7:86:a8:c6:23:5d:30:d2:85:da:85:
7b:cc:61:86:6f:24:5d:4d:17:39:62:9d:7b:a2:bb:6f:2a:32:
1f:f8:54:25:48:1e:de:f5:d6:84:9c:c0:93:2a:1d:31:1d:fd:
47:a2:af:c5:4a:5b:b4:76:84:44:98:47:e9:69:de:32:15:f2:
72:d1:63:a8:27:10:c5:96:96:e0:98:5b:67:3e:55:61:c3:e1:
1c:a5:16:87:24:c3:8a:2f:60:0f:02:87:a0:6d:01:be:ea:ff:
e2:69:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:59 2025 by rpki-client