Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.cer (raw, json)
Hash identifier: t/25XRZHHjVjjH2lnxs59VPtrwNdnLNeRd7cC1Yf06I=
Subject key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD786417740B245AFFAEF514BC3B3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.153.248.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:78:64:17:74:0b:24:5a:ff:ae:f5:14:bc:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:9f:b6:98:d4:3c:88:ab:22:27:58:22:a8:
19:65:f4:67:11:f1:76:09:74:dd:c4:fa:95:2a:d9:
c4:38:f9:ce:c3:26:20:a8:37:07:6e:33:30:c3:97:
07:d0:99:d6:49:8b:1d:2f:89:3c:9b:ce:11:da:98:
ec:82:2a:af:aa:01:d5:1f:fa:08:ca:49:66:cb:27:
74:e5:04:b4:c6:78:cb:02:9d:68:bc:31:6f:14:c2:
f7:65:eb:d5:3b:42:20:d8:68:13:1e:80:a6:1b:08:
c7:bf:69:dc:11:db:bc:1a:17:62:59:46:72:51:44:
cc:81:35:1d:14:1c:45:ff:8a:77:42:b4:8f:a1:68:
10:cf:db:ac:30:9e:12:7b:00:13:7f:d7:12:b7:fc:
68:5b:0f:cb:32:a7:1b:e6:c8:13:aa:be:63:f3:f2:
5c:c2:41:9e:7e:70:8d:b2:88:13:f0:0b:7a:6c:fc:
ea:84:c0:75:fb:57:cc:db:eb:2e:4c:92:9d:4b:7e:
87:3f:4d:09:a7:aa:bc:ec:89:e6:35:9d:1c:07:fb:
28:39:14:9d:c9:d9:3f:ce:ed:e5:b8:ef:cc:46:6c:
71:99:b4:0f:ff:13:32:2f:40:d8:13:2b:b4:e1:67:
fb:db:a6:a7:ee:57:b1:4d:47:20:b4:b9:0d:fe:73:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e6:df:6b:f1:3d:0f:8b:0d:44:22:81:3b:58:bb:b3:7c:d4:
a6:4e:b8:32:93:c1:85:e2:81:ec:ea:0c:fc:0b:85:2b:47:db:
f9:ca:cf:61:33:8e:f1:d8:88:88:90:21:2f:cd:f3:a0:d3:68:
63:d8:1e:1e:26:65:42:d8:cb:76:9e:b1:43:e2:e7:15:26:f7:
2f:1a:6e:ec:b6:35:6a:82:07:fe:69:84:c9:6f:71:4c:75:4a:
90:f2:14:ba:03:2d:c5:43:74:31:d5:37:1f:82:ac:b8:5b:ca:
f2:dd:e3:2a:a6:d0:66:62:4b:96:fd:01:13:b8:f6:93:2a:eb:
8e:61:56:4f:f8:20:c2:73:8b:1b:1a:04:f0:8b:37:83:a2:c7:
87:4b:5b:23:a2:53:af:f0:b9:b4:69:8f:0d:9c:cc:96:61:7e:
f0:69:9f:06:65:ac:dc:c2:54:ba:f7:f0:f7:f4:a9:85:b7:1e:
fe:a5:0d:6d:98:9f:49:37:3d:d1:a0:3e:fb:9c:ab:fd:42:5e:
57:0d:65:89:99:65:98:f7:c7:97:c5:25:33:97:97:9c:56:fa:
7e:8a:ae:f5:2a:4b:9b:87:fc:52:ed:35:17:60:43:fe:0a:c0:
1b:d5:f6:5e:91:48:4c:42:28:68:1a:15:e1:c2:c2:7d:9b:1e:
a4:ad:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:25 2025 by rpki-client