Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.cer (raw, json)
Hash identifier: /v/e5oxNKx5unr5ZvTyeEGGgHYQBDQynfC0IIbx46SA=
Subject key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24010FD38957935F3CCF54E46ECAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 95.128.195.0/24
IP: 2a13:3ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:40:10:fd:38:95:79:35:f3:cc:f5:4e:46:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:b7:0f:3f:45:35:1c:c6:49:6c:84:2d:79:
d5:b8:62:e2:dd:35:c5:d4:5a:18:db:6e:3e:2c:b9:
33:e6:62:e5:89:58:1f:da:ec:7c:e3:a5:59:a8:2d:
04:fd:4b:38:b1:52:b8:c7:af:68:ae:55:17:53:72:
eb:d9:ef:01:73:94:5c:5c:e6:71:c0:22:38:5e:ea:
87:09:b4:7a:9a:aa:df:ab:52:d8:2d:25:64:eb:f1:
41:0c:36:56:1a:85:a5:d4:62:97:e6:92:6e:ac:8b:
37:95:31:fb:a6:a4:7e:9d:6e:7b:b3:30:19:f5:4b:
28:df:48:93:f0:78:98:0d:71:79:16:21:ca:07:63:
07:1d:57:3a:7e:3b:6b:b0:15:f4:ce:b1:48:41:0b:
3b:a8:fd:df:db:75:6b:0c:9a:ff:19:d4:95:ea:ec:
5a:2b:2c:ce:2a:25:57:13:c9:57:41:3d:d6:d4:4a:
32:a7:aa:a7:39:51:f5:60:e2:1f:8a:74:65:33:8c:
19:e8:6e:f8:be:23:c1:94:93:51:2d:95:56:f9:93:
41:12:da:a0:b6:4c:ea:34:23:37:b8:8c:53:96:90:
0e:e4:8f:54:0d:02:5e:fe:7f:64:fc:ae:aa:b0:50:
df:49:31:78:d3:ed:7a:e0:b8:2a:07:9a:87:ca:d7:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
IPv6:
2a13:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:3d:39:f1:72:51:3b:37:cc:56:fc:c8:43:a9:e9:6d:6a:0a:
98:e5:09:7f:d6:25:dd:93:ee:17:80:17:3a:e2:83:b0:a7:60:
bb:a9:10:04:a5:c1:ee:8e:c5:2a:86:14:85:e2:b5:9c:7e:ab:
af:9e:f7:fc:33:ca:e2:fb:20:0e:7b:6c:83:96:21:5a:ef:2d:
7e:1c:75:86:c4:c5:9d:26:e3:79:47:ad:a6:1d:d4:d3:8f:b0:
96:8d:30:75:1d:69:15:c3:93:1b:1a:24:79:56:c8:72:d7:c7:
80:e5:af:df:54:15:b1:18:2e:65:0b:7c:0b:12:82:ad:52:72:
84:21:8b:ac:35:c3:ea:4c:60:f7:6a:63:38:47:cc:16:05:dc:
57:80:9c:1c:81:c3:70:e6:eb:03:8a:90:e0:a6:6b:f7:aa:15:
8c:20:e9:46:7d:ed:2c:cf:96:93:91:ef:30:93:49:db:da:bc:
10:fe:e6:17:f1:da:24:a5:82:f4:cf:65:b6:19:28:60:b0:a6:
78:11:33:cf:b8:41:2a:05:90:4d:08:7a:9d:09:2a:bf:2c:1b:
d3:2d:ee:b7:5a:e5:2e:3b:2e:6a:54:8b:12:50:96:fc:f5:39:
91:31:11:9b:a1:8a:31:eb:be:8e:b8:b0:b0:bd:42:0c:f2:3f:
d9:95:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:19 2025 by rpki-client