Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
File: xReRpYEcf27YH9RBtQJlr16cYbA.cer (raw, json)
Hash identifier: xLcznCMDiShBCUBbvATqX/h2ZFivK0nzt9PQHORWMQU=
Subject key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521B26018AF67307E58F8F519B12214
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2876
AS: 9204
IP: 185.170.224.0/22
IP: 194.4.168.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b2:60:18:af:67:30:7e:58:f8:f5:19:b1:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:f9:ae:8b:92:c7:0a:e9:9c:60:75:c8:90:
3a:5f:20:21:c9:a2:00:f1:7b:b4:a1:65:be:b5:bc:
5b:9f:ce:a9:ad:39:4a:2a:14:2e:23:4e:96:39:0f:
ec:6c:fa:b9:2c:89:18:db:e0:49:3d:1f:c9:44:35:
66:7d:29:e0:67:6b:30:ab:98:0e:13:96:67:6a:c6:
c3:92:62:3d:d7:1d:23:c9:7b:85:75:59:26:ff:cc:
6d:00:4d:0f:b2:3f:71:55:2c:f9:d6:c8:60:6c:9e:
de:34:40:91:51:f8:24:21:80:7f:b7:8a:fb:a4:98:
40:95:d7:16:29:27:68:c4:86:ec:06:3c:ef:6b:13:
38:4f:fc:20:f5:30:74:e7:0f:a1:a0:ea:24:0f:6c:
7a:81:61:27:49:9b:eb:fd:15:c3:64:a1:ea:dc:98:
33:5d:6a:2a:7f:6a:7a:3c:b9:7b:85:92:17:f3:99:
41:a4:39:d1:8f:51:02:7d:8e:48:d6:00:5d:5c:8d:
5e:58:64:fe:10:66:64:45:51:90:99:4a:68:85:af:
f8:6f:12:df:27:83:d2:ca:86:6a:7c:16:f9:fb:a6:
1e:35:98:02:93:b1:32:9f:ec:8d:da:10:af:de:02:
8b:ef:13:00:49:c3:f9:a0:30:ed:fc:fd:a5:58:e8:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.224.0/22
194.4.168.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2876
9204
Signature Algorithm: sha256WithRSAEncryption
5e:0d:39:35:b3:81:53:2a:c3:c0:00:2a:e0:11:4c:44:1c:a7:
53:04:d9:de:1c:57:c7:d7:7f:dc:42:bf:4b:e9:a7:8c:4a:dc:
9a:86:ed:60:17:ea:6b:8f:70:ef:f0:2a:36:d9:43:65:57:f8:
82:d4:43:40:5a:d8:31:1e:0a:40:1c:90:7b:6d:fc:70:2d:7d:
09:2c:22:06:17:12:e4:2b:24:06:8b:12:e9:d9:9f:35:9d:b7:
62:06:83:61:0e:98:e9:eb:48:ed:f4:fc:5d:d0:0a:18:49:fa:
1f:47:3d:13:db:62:e7:14:84:e4:db:e4:c4:d9:de:f3:00:11:
99:70:2b:10:54:4f:91:20:87:2f:7d:e2:19:08:db:4a:3c:a8:
0d:07:6e:29:58:ae:7e:0b:bc:bf:ad:c3:a3:75:a6:ff:af:05:
42:bc:70:4a:eb:6a:13:e6:0f:a7:23:a0:ec:87:1e:ff:10:6f:
b0:13:b6:11:b3:ff:c9:a9:df:99:be:87:44:01:29:fa:34:ea:
35:23:2c:38:42:e5:af:92:ff:29:05:2a:64:75:d0:04:b6:4a:
99:12:1d:b4:e2:94:f5:51:7d:53:58:87:60:1d:59:bf:fa:36:
67:e8:b1:b1:66:88:c1:f0:48:16:99:c5:eb:5f:6b:fd:d2:0f:
f9:9f:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:02 2025 by rpki-client