Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
File: 9rA2a7rqx7WITkJt-ACewnosYC4.cer (raw, json)
Hash identifier: lPBByE+yy1atgo2STEIfEytuW+svpK/3ooKly3ijkHg=
Subject key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B967C3593DD1DAFE69EF65FCE4AEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.42.0.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:96:7c:35:93:dd:1d:af:e6:9e:f6:5f:ce:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:3f:02:dd:8e:7c:23:f4:4c:fc:29:74:43:
a2:37:a9:e6:ad:84:fb:30:05:1b:8e:93:94:47:58:
bd:95:98:ea:52:22:bd:40:54:5d:fc:e6:f1:11:dd:
9c:a7:9a:1f:26:d9:1f:56:dd:a6:27:c2:e9:d3:b2:
08:68:ac:65:91:49:58:a6:7b:a6:c7:a4:c4:c2:d1:
fa:27:7f:76:34:1a:99:ba:17:ee:9b:ae:1a:d9:b5:
f3:cd:b1:8a:88:2b:b0:9c:6a:d8:7d:af:90:1d:0e:
cc:64:6d:a7:ef:42:28:22:40:a2:27:da:bc:e7:42:
5f:95:b7:cd:1d:5d:ad:77:fc:27:30:c9:1e:bc:99:
ec:a0:27:01:b9:98:2b:b3:a2:90:4b:31:7a:78:af:
65:74:e3:74:8d:4f:b1:fb:2a:cf:7c:7a:b5:9a:1d:
8b:cd:ef:c1:fc:e6:06:df:83:96:e4:41:05:44:9f:
b5:bc:7a:11:e1:c7:14:32:f1:1a:63:d2:59:4c:2d:
fe:39:c7:95:06:12:7a:74:1f:f8:b0:ec:94:df:c4:
80:be:7b:1a:48:79:ac:30:ea:07:2e:7e:3b:0d:88:
67:e6:45:cb:a9:e5:2f:35:2c:cd:c5:a2:69:b7:22:
0d:a7:f9:89:2e:f2:07:1c:8b:9f:bc:c1:a4:b0:b6:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f0:46:5a:c5:5e:2b:d7:f3:4b:80:9f:8c:40:d5:06:7f:f9:
5d:2c:e5:0c:b9:ea:22:73:bb:42:8e:54:ee:b0:36:33:5b:32:
2f:cc:d8:13:ab:da:73:71:eb:0e:bd:bf:3a:40:55:1c:15:23:
22:8a:c1:24:a0:c4:aa:dc:6c:8a:ae:77:63:44:58:a5:cf:11:
18:b1:00:22:f4:c1:e7:19:56:a2:90:38:31:29:06:5e:6b:18:
57:d9:75:55:fe:4d:6a:91:1f:7e:be:a1:21:9f:38:4a:4f:30:
62:f4:8c:c7:c9:b6:45:5d:c2:62:c3:57:10:86:3f:be:0a:a2:
1c:df:05:d0:65:dc:dc:b9:dd:4a:50:39:7a:92:04:1b:e5:73:
a8:fc:dd:f8:e5:55:6c:db:52:45:63:b3:52:47:db:49:19:85:
31:84:2f:01:a7:af:f5:36:96:12:88:ed:43:6c:a3:75:55:43:
2f:e0:e6:45:f3:a2:66:b8:4e:f4:5f:10:26:72:c9:20:d1:1d:
37:ab:9a:29:62:00:cf:c8:91:78:eb:65:ee:ae:f3:f0:79:e1:
dd:c3:4f:71:c5:7e:21:e9:c9:73:73:ce:0b:b8:ce:c0:b0:b0:
ca:14:64:0a:43:c4:ea:4f:dd:c3:69:0a:df:74:db:ba:c5:b3:
87:05:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:02 2025 by rpki-client