Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
File: IraiXy90GRvp6gypwZFf50XPV8g.cer (raw, json)
Hash identifier: Wd/69C6s4GR5lNSnaihcoMr2AtOVvIiz+IvnDZsYMcc=
Subject key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23BBCA47A10D60207022802EA2F5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.26.8.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:bc:a4:7a:10:d6:02:07:02:28:02:ea:2f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:b4:2f:4e:e6:43:4b:29:89:cc:9d:54:88:
80:36:f7:92:79:20:e8:af:f1:d4:8e:26:06:6a:46:
0a:85:c6:54:9a:ef:d3:59:ad:38:ca:a1:b1:77:11:
78:1c:ff:6e:28:f3:64:d0:a1:e0:cf:eb:4e:17:2a:
13:38:8b:07:97:a9:c8:87:1a:31:5b:8a:59:fd:af:
ef:42:cf:d4:0c:9d:e6:fb:c4:0c:86:05:1b:a8:69:
84:89:c5:42:86:68:68:f1:c9:bb:0c:7a:22:ce:a9:
ab:6e:dc:dd:4d:e8:4b:90:e4:a9:f4:10:31:94:7a:
dc:5c:13:12:6d:63:30:63:53:19:ab:22:cc:ca:66:
6f:2e:6a:66:46:b5:e0:96:1c:73:ef:d1:b0:3b:50:
6c:45:f4:28:c2:74:98:82:e4:41:96:93:5e:5a:24:
ec:15:4c:6b:be:6e:6f:40:ea:20:b5:df:a0:c0:fa:
09:a1:d5:14:cd:c2:76:99:6f:ee:f3:86:df:06:af:
38:45:43:5e:20:3e:c1:b7:0f:dc:9b:59:a1:fc:6c:
35:d1:8e:7d:d0:4f:38:9a:15:64:cb:2c:87:1e:b9:
a0:ca:92:b3:a3:bc:1c:f5:2a:f2:09:73:8d:ef:a4:
77:a7:00:ee:5b:a8:a4:ca:80:79:ab:db:e2:91:67:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.8.0/21
Signature Algorithm: sha256WithRSAEncryption
55:10:d3:bb:91:95:fd:9e:41:aa:5e:80:62:03:44:b9:3c:57:
0a:55:13:90:cb:3c:c0:86:8f:b4:29:84:6a:84:ad:32:eb:f0:
84:42:29:db:5a:f2:e2:9a:09:17:34:b1:50:62:30:cd:7e:6f:
d7:83:b9:ab:4b:52:f4:74:ef:96:46:e5:3a:bd:0b:39:98:b9:
7c:ed:8d:c4:54:40:e3:5c:cd:e4:6a:07:ee:55:2c:af:c5:24:
6f:5b:5f:8c:ab:59:f4:4f:49:4b:09:14:0f:56:53:de:b7:43:
ec:13:50:f5:28:ea:af:00:36:25:ff:30:d2:e2:58:8d:9c:16:
b0:1d:05:2a:09:75:6f:28:40:b5:19:03:67:ca:de:ac:dc:f5:
da:7b:c3:d0:52:f0:fd:99:53:f5:df:8a:98:de:1b:35:13:f8:
a3:76:5e:fd:07:7c:e6:c5:a0:57:b6:19:fc:ef:d9:d2:75:2a:
b2:6c:d2:47:9c:74:af:e1:a3:a7:a5:ec:ec:c1:12:6d:95:b0:
91:a5:01:5f:cd:96:05:5e:e9:eb:60:c6:cc:ae:ea:e7:8c:de:
e1:85:0d:62:5f:7a:74:36:1b:9f:2f:77:38:18:7b:d3:0a:62:
8c:f7:e6:4a:08:a9:aa:67:5f:c4:d3:14:4c:ae:00:ec:c2:3c:
b7:62:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:15 2025 by rpki-client