Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
File: vjxU0e3KaS9Eydo4NALCT95yNQc.cer (raw, json)
Hash identifier: 3z3r/7ZuNf/4VCdTv0YPgs3eUjFWDM8j5fJMZPHjGiU=
Subject key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E41A2618C2E404CE21152F7048DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.42.221.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:1a:26:18:c2:e4:04:ce:21:15:2f:70:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3c54d1edca692f44c9da383402c24fde723507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:2c:83:77:40:0c:47:04:c0:f3:34:f8:4d:
ca:f8:6d:58:4a:c0:88:4c:0b:7c:f1:fe:81:b4:53:
14:c3:12:e0:d1:49:76:62:fe:bb:79:bb:7b:74:5f:
63:99:c3:62:fe:93:08:58:9e:8a:dc:0e:d8:4e:38:
f6:14:62:db:e5:0c:83:bd:8c:6a:57:22:9d:ed:f8:
62:b6:1d:0e:d6:cf:06:d5:18:b0:39:df:dd:a1:61:
c7:bd:25:9a:2f:67:d7:4d:d9:0d:47:b9:9f:04:c2:
39:a4:27:c8:10:d0:dd:d7:46:f1:b7:97:cb:68:38:
20:73:e5:2d:e0:53:81:b5:e4:f3:f6:01:25:57:01:
61:83:e2:cd:6a:72:db:87:cf:34:f1:0b:9e:fc:08:
70:ec:59:83:96:fe:cd:d1:76:9e:e0:91:b9:ff:74:
91:9d:7e:a4:ee:30:35:dc:26:df:5f:f0:b3:ea:0b:
a9:20:72:fc:76:bc:2c:5b:5f:b6:f3:a9:c8:91:09:
76:e6:e2:84:2b:11:ab:6d:47:e9:d5:51:d8:e5:49:
fb:fb:d8:a6:46:f4:6c:27:96:18:97:63:9e:5d:8b:
79:35:0f:a7:d0:03:02:40:00:58:38:f2:ee:32:7e:
83:7d:82:77:68:2d:4c:ef:04:78:94:64:92:df:64:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ad:56:02:6b:27:0d:84:57:1b:fd:7e:19:d5:94:9d:38:7a:
b8:a7:97:dc:b5:c7:c4:3a:85:36:b0:b9:20:94:3e:1b:30:bd:
a1:90:3d:84:b4:8f:b4:80:26:12:7c:30:53:b7:a1:6c:ff:e2:
d3:5a:17:fe:9d:df:57:9a:fa:56:ba:8e:19:72:21:07:65:f2:
b4:f6:4d:7f:c2:cc:78:31:9c:25:88:48:03:88:a7:8c:54:0d:
ad:6a:4f:61:b4:38:a4:32:0f:a8:00:e0:51:59:9b:7f:b7:93:
7c:cb:46:25:16:31:e8:8f:c2:8e:b8:d3:55:66:cc:37:8c:4f:
24:9f:14:ac:e8:7e:be:c5:fe:dc:c0:3c:d1:d8:a2:13:88:3d:
03:be:b5:56:f8:b9:62:34:2d:68:f7:a5:d1:b5:75:69:d9:18:
07:de:6c:f2:b2:ff:99:fc:a1:35:c3:0d:df:38:2a:2e:97:41:
52:02:0c:95:89:71:bf:c0:32:cd:ea:cd:3d:15:fe:ea:96:88:
d5:aa:02:77:6c:b4:b8:4e:b2:6e:f3:2d:d9:89:43:ae:72:55:
f5:d1:60:6f:73:01:55:39:c2:fd:39:76:aa:ff:86:78:a1:3e:
3b:c5:14:3e:49:75:b8:78:89:5a:6f:50:53:b7:4c:b2:08:8a:
88:ac:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:28 2025 by rpki-client