Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
File: llRz1oVy6iI4vdh1r6cloEBd5IM.cer (raw, json)
Hash identifier: Fnjg4hogOvWuBBCQFrTCdzx2dPigPBzUl/LpIqJMALc=
Subject key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB8B6807A052F61F00FCF4705576D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.80.124.0/22
IP: 2a05:7c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8b:68:07:a0:52:f6:1f:00:fc:f4:70:55:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=965473d68572ea2238bdd875afa725a0405de483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:87:3e:47:d6:00:5f:08:27:a6:97:f4:8e:
cc:47:6d:42:dc:4a:c3:77:7f:dd:6a:11:b0:17:28:
d5:15:67:60:ef:02:6a:1f:d7:fe:4b:c2:7b:2b:1d:
66:2f:12:79:28:67:24:e6:20:03:1e:1e:1e:c8:63:
06:cb:6d:5d:88:f1:98:b1:19:0c:f8:51:18:a0:94:
e8:bb:81:a4:ff:88:59:b1:24:01:ab:73:82:30:db:
0e:c6:5e:d5:aa:17:13:e8:3f:49:38:07:d6:cc:44:
cc:eb:6f:1e:55:eb:85:e5:65:b0:a1:91:ad:79:2e:
51:7f:e9:00:0c:be:bf:89:23:07:2e:8b:76:01:b8:
39:c3:bb:95:22:bf:4d:1a:1d:4f:b2:6c:d9:cd:40:
41:da:74:95:53:15:35:b8:45:38:3f:61:a4:fc:f8:
51:33:54:c0:59:3b:f8:cb:49:f4:cb:96:08:97:fc:
da:8c:40:e4:19:66:71:40:1d:60:27:03:87:ea:b2:
f9:5c:45:0b:9e:ab:c2:e9:ce:21:56:c7:9c:50:1a:
40:58:16:87:18:eb:43:bd:30:c1:4e:63:52:84:85:
db:7e:c8:3d:f9:49:b2:cf:ee:3f:a2:0e:91:31:33:
bd:ea:f8:68:93:61:36:a4:23:b5:b5:e5:e6:3f:e9:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.124.0/22
IPv6:
2a05:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:df:d7:0c:6a:27:c1:bb:53:70:94:1f:d6:bb:3e:f6:e5:c5:
77:37:86:14:c8:7e:8b:46:37:4b:48:6b:26:9c:ef:b5:b6:cf:
be:31:2e:95:f3:7b:a5:29:6c:ab:8b:7d:c7:5a:4f:1a:b8:1e:
2c:45:b3:91:b2:48:64:cd:68:a4:ff:74:ac:0e:da:3e:54:fb:
65:ef:de:c4:bb:2c:8d:15:f0:8b:b0:1c:13:43:78:98:08:2b:
6f:de:a7:f8:de:79:65:d0:32:43:db:31:89:49:f0:fa:ab:9e:
01:b7:56:6f:ef:af:2d:f6:e1:b8:20:f9:89:1e:48:db:33:ac:
db:6b:b0:31:9b:40:a5:0a:a4:c6:a0:f8:03:c9:2a:1d:0c:6a:
55:33:ab:3b:bc:76:1a:48:4d:5c:1e:2b:71:a4:70:86:5b:84:
67:1e:62:3e:b0:9a:5d:8b:44:9b:76:02:d3:23:ca:5e:91:ec:
10:43:aa:e8:99:c1:72:e6:e5:ef:67:e1:0e:4f:ab:4f:f7:db:
bd:6c:9c:7d:bb:b7:38:ff:80:08:6b:a5:5a:8c:83:f7:10:53:
62:3c:11:61:a1:93:9a:ee:46:aa:cd:0f:7e:b8:24:14:ae:9a:
35:6e:68:cc:4a:92:82:6e:06:83:b6:32:ea:6c:ad:36:8f:2a:
0b:62:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:32 2025 by rpki-client