Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.cer (raw, json)
Hash identifier: pr6hczmrQDPjnghRhfWRuDeh3Z10Y2a/xPgSus/YO5w=
Subject key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521CFE96DE6CDDA60A26FBED8E1E0A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48968
AS: 199511
AS: 212882
IP: 91.237.218.0/24
IP: 95.130.184.0/21
IP: 185.14.108.0/22
IP: 2a03:ac40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cf:e9:6d:e6:cd:da:60:a2:6f:be:d8:e1:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:01:e3:0c:08:98:06:5c:a2:68:f5:da:d3:
95:67:e6:02:7d:24:f8:6a:4b:b6:17:cf:f7:a1:4f:
1f:b2:21:66:bf:df:b4:b2:98:a4:b0:ef:d5:58:73:
ec:e8:ae:6d:36:53:72:dc:0d:24:b8:fa:27:cb:fb:
bd:77:b0:21:19:0c:e3:34:98:f5:a3:2d:a1:ed:b9:
4e:76:2a:fd:17:cf:70:e8:9c:4a:5b:20:cc:5b:1a:
46:2f:b8:0b:cc:ea:9a:37:0a:7f:aa:d4:c7:08:32:
af:70:f2:46:3e:7c:d0:3e:71:54:03:91:82:d4:c3:
38:c4:f2:3e:a3:18:09:fa:1e:0e:c8:f9:ed:25:ee:
99:e0:95:83:ee:12:77:bc:d0:9d:ce:e5:2f:d5:ff:
a8:02:0e:e1:03:17:63:84:8f:2c:20:c4:7c:2f:1e:
e7:00:5c:99:cf:c4:65:c3:0f:76:ff:84:09:33:bf:
f5:18:17:67:3d:24:8c:4c:41:8d:bc:21:78:32:ac:
21:41:a9:6f:19:95:83:41:ea:f5:ee:7e:0f:55:4a:
3d:48:32:30:48:fb:62:69:4f:0c:37:30:14:d5:e3:
1e:7a:71:db:78:8c:cc:75:45:d8:b8:c1:fa:7f:0c:
18:76:e7:bf:93:93:2a:c9:dc:02:c6:1e:36:53:15:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.218.0/24
95.130.184.0/21
185.14.108.0/22
IPv6:
2a03:ac40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48968
199511
212882
Signature Algorithm: sha256WithRSAEncryption
79:ec:d9:5d:ee:c0:b2:c7:f4:d3:19:aa:39:d5:f9:4e:d9:46:
af:87:9c:ba:e8:ce:61:3f:75:43:52:4c:8d:c9:0f:36:03:5b:
f1:da:56:2b:4f:80:aa:52:06:21:86:0a:90:c5:3f:78:49:2e:
55:b3:d3:68:0d:80:81:8a:9a:8e:ba:f1:39:ae:23:31:5d:2e:
c5:a5:f5:5c:f1:a1:2a:b5:a5:ae:fb:fd:02:5c:91:56:c7:18:
f1:5e:52:7b:ee:83:4a:f9:92:d7:38:22:c5:a9:b8:91:c9:46:
15:0c:97:77:e7:a4:dd:95:3b:47:66:7c:f0:ea:80:9a:94:e0:
a5:9c:8b:e1:fe:d3:e1:dd:02:e8:55:8a:7b:1a:ba:50:47:da:
ee:a3:d4:5c:f6:cb:06:8b:9c:ad:19:01:c0:91:6c:d4:f3:6b:
6d:f0:51:b4:8d:13:67:d5:a6:cb:5e:8c:fe:e0:d9:fc:67:ac:
db:43:c4:ef:dd:50:9c:80:f3:dc:2b:48:2b:b3:ac:9b:8f:ee:
bb:70:71:2c:ba:fb:c7:4c:d4:70:50:82:d0:dc:03:e4:16:0f:
99:41:50:22:5f:8e:f5:66:49:06:1f:28:33:28:7e:72:c0:72:
83:94:d9:22:d2:12:4b:90:99:6b:7e:3e:af:c0:26:32:d0:e1:
e5:8f:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:05:55 2025 by rpki-client