Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
File: so7x9PiCePTfGec-M4HOzXjgacE.cer (raw, json)
Hash identifier: uLeG48yO0HVo172+puCnmWWtUJ+pHWhuWtuvdlW7W50=
Subject key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453E1610C6842775E99EDF63B37F57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214165
IP: 83.175.143.0/24
IP: 2001:67c:260::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3e:16:10:c6:84:27:75:e9:9e:df:63:b3:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:d1:23:aa:0a:9d:52:9a:8f:a8:84:45:64:
23:55:d5:8b:08:34:84:75:1b:58:1b:56:c3:96:aa:
b4:4f:ee:e1:d0:43:fe:1f:32:2b:03:4e:33:00:b0:
74:92:7c:04:9d:17:22:90:ca:0e:1d:d2:3a:3b:30:
fe:69:8d:ba:8c:98:dd:a9:a2:58:46:96:45:65:2b:
48:15:60:71:ef:60:84:83:d0:3a:49:bd:84:58:bb:
f7:79:ae:2f:01:89:f1:a5:97:c2:8a:50:31:d6:7a:
86:ad:e1:7b:86:27:db:38:90:5e:68:ce:93:fc:90:
da:f5:79:c8:b8:65:f4:09:fb:3d:af:16:68:97:3c:
34:8b:a4:8c:bb:67:ef:db:15:81:51:7f:33:22:fb:
3c:2a:89:75:52:86:ac:3c:03:38:08:c8:b9:45:27:
12:be:a9:52:a4:d1:90:06:06:61:07:5c:aa:c9:95:
e2:dc:72:fe:71:a8:b4:2e:f6:9c:d9:a9:9c:65:0e:
2c:17:86:38:af:5a:92:23:f7:65:6b:87:1c:a0:ed:
22:a3:61:bd:94:03:85:aa:f2:94:2d:4c:4c:6b:61:
d7:03:67:c7:ee:0c:8c:1e:1f:a1:5c:b3:ab:52:31:
32:ca:90:91:a1:a8:e7:f7:13:61:ed:7c:6d:bf:81:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.143.0/24
IPv6:
2001:67c:260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214165
Signature Algorithm: sha256WithRSAEncryption
54:cc:de:0f:31:11:d7:ab:3c:50:f1:ef:c1:de:5a:10:fe:39:
a3:59:69:eb:77:b5:cf:c6:a7:29:11:2a:a3:1b:6d:58:4f:50:
24:bf:2d:ef:f7:a5:52:e8:88:e1:17:d5:c2:ae:d3:32:00:78:
bb:7b:b6:7c:d4:e4:09:92:de:1b:34:27:ca:81:e0:63:65:90:
85:b1:7d:08:db:86:f8:9c:d8:52:66:49:ac:96:be:de:06:66:
a1:40:69:21:47:06:99:d0:2e:07:c8:81:07:33:e1:7b:51:4f:
54:e1:01:61:9b:18:24:d5:71:a2:67:ca:70:0e:56:7a:8b:e9:
73:59:0e:46:49:a0:eb:f1:3d:32:46:81:4d:c1:80:4d:4e:c1:
48:ea:7c:a4:ff:23:6a:ed:52:d2:71:e0:e6:6c:7d:6c:96:c6:
08:09:c2:35:dc:df:f4:a0:a0:2b:1a:61:45:e2:98:1d:c5:34:
19:91:77:d3:80:57:b0:df:a8:06:5e:b7:37:f7:7d:b9:16:a3:
28:6d:dd:1a:39:d8:7a:e6:95:4e:49:92:df:7e:5a:64:2e:93:
55:b7:e9:50:35:c0:71:ed:0c:7b:ca:3e:32:82:a0:22:ea:11:
23:96:ee:a5:e4:e9:1e:40:f3:3e:97:6c:ce:81:2b:ad:cd:f8:
85:43:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:26 2025 by rpki-client