Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer (raw, json)
Hash identifier: ZyF0yb2V2vVRdaRm18dD4DNDZG8pcZwXrcVZfeJR1t4=
Subject key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC56C77C5982585061DB65A343C43B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.109.88.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:56:c7:7c:59:82:58:50:61:db:65:a3:43:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:1f:23:fb:4e:c1:4c:19:35:45:fa:e3:de:
bc:57:ee:15:14:74:52:6c:ab:65:bc:6d:8e:1f:12:
95:70:eb:4d:69:dd:c5:ee:86:65:f9:f6:c6:3f:ce:
1a:ec:1b:28:6c:7b:de:78:96:8c:dd:a4:72:b5:5e:
b8:37:b8:1e:87:79:89:bf:b4:0d:e4:76:11:35:e2:
5c:3d:24:c7:fd:6d:51:9e:59:9e:c8:af:76:ce:80:
18:4a:38:d2:67:66:61:a1:d2:3b:48:6d:bc:cc:9e:
ba:34:04:2a:23:68:77:14:c5:eb:26:6c:6e:9e:7e:
ff:43:0b:76:63:d9:f5:ab:cc:b2:68:27:f8:17:52:
39:c5:db:32:8c:ab:6a:2e:f2:fe:56:09:03:9e:ca:
2e:ab:92:0c:c1:cd:61:8c:a0:6f:cb:7f:d5:79:76:
2c:be:1e:4b:77:e5:3f:58:e6:0c:d1:c1:5a:ca:2d:
4c:4b:16:27:4c:63:52:c8:2a:1a:0b:ca:f9:91:4a:
55:11:e9:ca:ad:15:4d:bf:71:bf:dd:35:9e:b3:72:
0c:99:df:50:f9:1f:0c:06:9a:e9:46:98:ce:c8:0b:
95:73:f3:91:6b:76:e8:fa:ed:92:8b:fc:8c:11:e8:
05:56:34:eb:87:51:0d:9c:01:49:4a:47:9b:1d:06:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.88.0/24
Signature Algorithm: sha256WithRSAEncryption
26:11:ff:36:84:90:30:35:ea:ac:e2:d8:45:a0:53:7f:97:1a:
2e:af:6e:a1:20:15:5f:d9:12:b8:00:f8:47:05:98:cf:11:a0:
56:80:04:4c:bf:55:c1:61:c0:ea:32:fc:29:31:3e:c9:74:a4:
29:f9:cb:3e:c0:e1:1d:e3:9c:c0:a9:ce:7c:52:e8:01:f7:3a:
26:1c:b9:74:6a:9f:37:07:de:8e:17:38:32:d5:54:8f:4a:1b:
45:0d:57:ec:98:0e:4d:71:1a:a1:98:e8:f2:2c:fa:46:a6:aa:
bd:bb:42:f8:76:d9:06:1d:c0:c6:e4:cb:e0:34:4f:89:a6:39:
15:15:25:09:f3:90:cd:af:e2:e3:56:42:34:47:c1:bb:b6:f8:
b9:1f:81:f5:17:1f:ef:64:1a:2a:32:c3:2f:d9:d0:34:4e:2a:
3d:37:46:aa:bd:1c:0c:99:24:d9:33:48:7d:93:97:99:fa:c8:
46:7d:58:83:35:22:35:b1:49:14:41:41:e4:59:3a:76:4f:e5:
9f:d1:db:29:57:6c:bf:bf:9d:18:9f:a0:5d:85:f5:36:8e:ba:
95:99:74:b0:3c:2d:56:20:41:64:8c:a7:bc:ec:de:1a:ee:a1:
33:21:60:fc:ab:26:bb:16:93:5d:f6:94:19:0b:a3:ab:fe:04:
69:c2:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:37 2025 by rpki-client