Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.cer (raw, json)
Hash identifier: ipVtB46NzsmL2lnLuq1nJMtcUJqkrOKYbqciGXeVcVg=
Subject key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C079D477F832AA1D3F3BA05EBA045
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44461
IP: 193.200.205.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:9d:47:7f:83:2a:a1:d3:f3:ba:05:eb:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:d2:97:34:68:83:dc:3c:36:39:9d:69:b8:
56:ea:d1:04:6f:6b:77:ad:3f:71:9a:9c:69:fc:08:
e2:2f:95:d6:f6:3b:0d:67:e6:36:4d:de:6f:1d:d0:
f7:76:2c:72:f0:53:92:32:02:9e:0a:d1:d2:11:20:
92:c7:10:92:ce:4f:44:c7:eb:01:71:a0:d3:2b:97:
30:84:83:cb:c1:6f:b2:74:95:b8:ff:3e:1a:f3:49:
23:57:20:d3:0a:45:49:dd:17:31:a1:05:18:4a:38:
d0:8e:5f:df:58:ad:db:fa:dd:c4:17:23:ef:a6:b6:
5b:8c:cd:2d:7b:08:fa:f3:d1:0f:73:42:58:cc:43:
f9:0a:c3:9b:93:82:3f:cc:3e:d4:44:f0:d1:a6:f8:
79:66:fa:72:e1:4e:d2:ae:be:ef:f6:4d:6c:9d:45:
14:d2:43:7b:bb:cb:ec:38:e3:5a:32:0f:5b:34:d8:
ff:fd:de:07:a3:f6:22:f6:cb:7f:18:d9:49:94:67:
f0:bc:83:9e:1d:02:a9:df:d7:b7:62:56:1c:15:9b:
5b:ff:41:a3:56:5a:89:12:c8:1a:1a:7c:89:91:e2:
69:1f:51:b4:2f:ff:b5:66:9e:a7:ab:ad:a5:6c:79:
b3:d5:5d:43:ea:37:5b:e4:d3:e4:25:bf:87:42:e3:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.205.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44461
Signature Algorithm: sha256WithRSAEncryption
a3:bb:9c:ec:05:14:df:56:b8:3c:a3:78:87:71:40:0d:c2:92:
61:6c:5c:2d:2d:2c:be:24:bc:54:a7:97:00:53:3e:64:b0:b6:
34:ec:f1:04:2c:a8:e0:40:58:d4:64:c4:b8:3b:5f:40:e7:97:
2e:29:47:a5:86:6a:ae:bb:b7:bf:6c:fe:bb:d8:42:21:6b:eb:
d9:b2:ce:50:c2:ac:f0:c8:c4:28:b7:7d:ca:cf:47:64:c4:dc:
90:65:70:c0:b9:ec:ec:ac:02:98:e0:66:2b:72:32:0c:4a:38:
3d:6c:b8:4b:eb:41:2f:dd:6d:f5:1b:70:c1:57:bc:df:01:90:
ca:21:eb:4d:45:f3:36:fb:c9:4e:a7:db:fa:fd:be:f2:44:e9:
1c:e0:d3:85:0b:79:8f:31:2d:ac:ad:ce:66:27:85:79:6d:4a:
68:39:ad:92:4c:52:bb:a0:58:44:0f:99:67:ee:e3:62:31:01:
86:be:23:c2:c0:42:93:42:79:ad:27:60:ab:5b:95:21:ba:77:
88:ed:29:38:18:bf:72:0c:33:24:ef:c9:56:9f:d9:d0:8e:34:
1d:a5:71:41:db:04:b6:2c:bb:f6:4c:a4:b5:a8:e3:30:0c:d4:
a4:77:2b:6f:48:ec:e5:41:2f:5e:d6:b1:f3:6a:0e:ce:b5:77:
7a:a6:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:19:01 2025 by rpki-client