Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LLgBbb2leHbjyclfdS51ZrJaGE8.cer
File: LLgBbb2leHbjyclfdS51ZrJaGE8.cer (raw, json)
Hash identifier: PdAksiOARYXp376p3JnyhBoC53CRdN5uYTYPaQ2WUn8=
Subject key identifier: 2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A996FC46FEADB7698C40D8BED27B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.153.0/24
IP: 2a13:3400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:99:6f:c4:6f:ea:db:76:98:c4:0d:8b:ed:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb8016dbda57876e3c9c95f752e7566b25a184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:71:6a:90:ec:be:01:b5:41:98:61:ff:b6:
5e:ee:47:aa:82:8b:a9:8e:e8:aa:30:12:26:25:9c:
d3:f8:ba:d6:af:0b:f8:d4:54:57:08:d3:35:13:c5:
1c:32:8d:79:c9:d1:b4:f4:fa:4f:56:b2:cd:73:ed:
91:56:4d:08:a5:bc:0b:a1:57:61:91:a2:f3:cc:e0:
15:28:ec:9d:bc:d9:b8:4c:0e:d0:3e:b3:5e:eb:00:
16:e3:54:17:e1:c4:4a:9c:3e:b8:39:a5:a1:0b:b0:
e9:8e:7a:f6:69:3f:01:5c:cf:e4:f3:76:08:4a:82:
09:23:ea:73:1e:29:18:cc:33:c6:e4:b4:b8:3b:94:
e4:2b:e8:9d:7b:8a:77:ce:a1:19:15:4e:12:1f:93:
c9:a1:04:7a:11:28:b7:95:f1:4c:2e:65:ec:46:39:
40:9b:09:6f:d3:a0:74:cd:c2:50:d8:74:bb:51:1a:
bc:d2:e9:d8:71:a9:e9:66:80:a4:2c:f8:e2:f1:b1:
1f:75:84:2e:a6:48:99:71:7e:f2:fc:a6:cc:c0:62:
0e:aa:18:43:20:e5:ea:ce:84:67:28:a4:ac:70:90:
10:97:41:ba:63:cb:e1:cd:7e:b1:c8:ae:fe:de:c2:
47:e5:cf:d9:ee:bc:98:90:17:98:2a:cf:5f:92:a6:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.153.0/24
IPv6:
2a13:3400::/29
Signature Algorithm: sha256WithRSAEncryption
6f:6a:5c:43:95:01:38:a4:74:9c:0a:df:1c:64:6b:73:5d:b9:
ed:af:ad:71:37:99:88:d6:1e:6e:ef:1c:37:68:1f:cf:86:7e:
4d:f9:53:cf:2b:a8:4f:a0:bc:a2:d5:18:98:03:74:09:17:6d:
4b:33:28:8d:09:22:4b:83:d8:9f:1b:57:01:4c:67:ce:b6:30:
0b:80:6b:10:4c:7a:61:26:8f:ad:ff:d5:d1:ef:05:26:c3:92:
60:75:ca:65:a9:37:e9:7f:2e:1b:06:d8:c1:97:1a:05:ed:a2:
13:49:32:b4:b8:0b:49:42:6a:88:6f:3b:eb:26:57:b1:86:cb:
d9:cc:c9:f9:a4:bf:0f:69:c0:ba:f8:18:ed:09:26:89:81:74:
e5:ae:af:76:18:92:6f:1a:71:a8:08:d2:ad:60:20:49:59:94:
a8:7a:a1:f4:a9:c0:f6:10:c0:b4:ec:42:f2:25:a1:97:84:b5:
9f:19:35:48:56:b9:8c:74:c0:89:b3:17:7a:ae:a6:31:af:ca:
4a:2d:16:84:dd:cc:0a:c6:e2:19:6d:be:15:ee:cc:43:65:c6:
3e:2e:9a:01:00:4b:3c:8f:37:dc:ba:7f:50:65:02:25:2b:2e:
f5:44:9f:2e:b3:7c:e3:0c:04:4c:44:3e:09:10:e1:d7:41:f1:
81:de:80:03
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtGplvxG/q23aYxA2L7Se2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2I4MDE2ZGJkYTU3ODc2ZTNjOWM5NWY3NTJlNzU2NmIyNWExODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlhxapDsvgG1QZhh/7Ze7keqgoup
juiqMBImJZzT+LrWrwv41FRXCNM1E8UcMo15ydG09PpPVrLNc+2RVk0IpbwLoVdh
kaLzzOAVKOydvNm4TA7QPrNe6wAW41QX4cRKnD64OaWhC7Dpjnr2aT8BXM/k83YI
SoIJI+pzHikYzDPG5LS4O5TkK+ide4p3zqEZFU4SH5PJoQR6ESi3lfFMLmXsRjlA
mwlv06B0zcJQ2HS7URq80unYcanpZoCkLPji8bEfdYQupkiZcX7y/KbMwGIOqhhD
IOXqzoRnKKSscJAQl0G6Y8vhzX6xyK7+3sJH5c/Z7ryYkBeYKs9fkqZ+WwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCy4AW29pXh248nJX3UudWayWhhPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzJhYjBk
MC04ZTQ0LTQyOTQtOTAzMC0xNDU4NjdlNjNjMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMmFiMGQw
LThlNDQtNDI5NC05MDMwLTE0NTg2N2U2M2MzNi8xL0xMZ0JiYjJsZUhianljbGZk
UzUxWnJKYUdFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbWuZMA0EAgACMAcDBQMqEzQAMA0GCSqGSIb3
DQEBCwUAA4IBAQBvalxDlQE4pHScCt8cZGtzXbntr61xN5mI1h5u7xw3aB/Phn5N
+VPPK6hPoLyi1RiYA3QJF21LMyiNCSJLg9ifG1cBTGfOtjALgGsQTHphJo+t/9XR
7wUmw5JgdcplqTfpfy4bBtjBlxoF7aITSTK0uAtJQmqIbzvrJlexhsvZzMn5pL8P
acC6+BjtCSaJgXTlrq92GJJvGnGoCNKtYCBJWZSoeqH0qcD2EMC07ELyJaGXhLWf
GTVIVrmMdMCJsxd6rqYxr8pKLRaE3cwKxuIZbb4V7sxDZcY+LpoBAEs8jzfcun9Q
ZQIlKy71RJ8us3zjDARMRD4JEOHXQfGB3oAD
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:12 2025 by rpki-client