Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer (raw, json)
Hash identifier: Y4lOzjjeM3aV4shgpjQuNmEacvkies9D0RRyJr4JzIw=
Subject key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521CEB21969391E8162CA139D8CE52F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204904
IP: 185.236.88.0/22
IP: 2a0d:a700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ce:b2:19:69:39:1e:81:62:ca:13:9d:8c:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:49:cb:c1:71:1d:87:4a:48:3d:5c:45:e4:
03:6f:b3:01:f9:f4:41:1c:c7:75:a4:36:8c:15:2f:
e3:60:5e:9e:a9:a8:84:4d:42:27:25:77:86:4e:dc:
94:1c:7d:b8:82:9b:20:4c:99:05:93:60:bd:7c:d2:
70:80:9c:c0:a0:eb:f1:5a:c8:9e:11:31:ae:49:5d:
8d:72:f9:d6:ed:78:01:e7:82:4b:5e:df:1f:22:bc:
6d:99:ce:e1:db:1f:52:27:e6:aa:b2:c4:73:f5:22:
1c:88:f4:94:4e:45:dd:67:c5:42:3c:d8:cb:a2:df:
36:47:8a:19:39:dc:a7:e9:70:b1:32:fd:47:56:7b:
85:70:9c:63:1b:3a:ab:0c:a8:d0:98:b7:ab:b5:55:
17:05:42:ee:38:1e:99:26:32:c3:ed:7b:00:3c:c1:
c1:3e:30:3f:7b:a4:81:9c:8c:ad:29:7d:1e:4d:0e:
bb:f3:a7:92:ee:3d:98:2c:fd:59:84:ff:3a:78:b4:
8c:5e:24:85:1d:5d:93:f5:98:8a:2c:a0:18:12:b2:
e6:f3:99:ea:b9:d4:8a:0e:01:a2:89:05:fe:21:6a:
43:72:70:7f:71:44:d8:f8:4d:c3:eb:1d:ad:be:44:
02:cd:f4:04:c3:31:42:52:11:e4:a9:5f:b6:44:4d:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.88.0/22
IPv6:
2a0d:a700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204904
Signature Algorithm: sha256WithRSAEncryption
32:49:8b:7f:a1:6a:99:ac:9d:14:d2:09:8a:4f:f6:21:49:99:
22:ee:16:5f:0f:20:dd:03:f9:5c:7c:a6:15:bc:ec:5b:6e:a2:
ad:6c:63:fb:4f:9e:14:80:dd:67:14:31:5e:48:7c:2b:a2:be:
78:62:f8:92:be:4f:ee:7c:a5:d1:48:d6:cf:2a:c6:ce:61:a1:
9e:15:83:71:d3:8b:5a:92:96:ee:e3:13:03:ab:16:6b:70:71:
c8:87:fb:5f:81:bc:87:48:e6:52:cd:03:18:75:2e:1a:39:40:
3f:49:70:84:2c:50:a3:1d:7a:18:30:63:90:9a:e5:97:b1:87:
eb:3d:ef:73:de:0f:b2:38:bf:38:39:cc:2a:f2:89:09:21:3a:
57:27:22:e2:53:56:d0:af:31:8d:be:d8:fb:d4:da:10:7f:17:
3a:af:e1:1e:bc:38:64:74:6f:8f:e3:98:1f:9f:4d:15:52:f0:
21:09:b6:76:fb:00:3e:92:19:71:f5:e0:94:68:cb:2c:fc:a7:
2b:bd:46:b9:c6:57:16:3e:0a:e1:7b:15:53:fe:55:98:a1:e1:
01:c6:65:e4:4c:f5:1e:e9:38:c0:13:90:7b:ef:49:58:4c:43:
09:0b:e8:14:6b:7c:cf:73:07:87:dd:69:62:db:af:ce:b5:c0:
17:bf:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:57:07 2025 by rpki-client