Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer (raw, json)
Hash identifier: 9dxLaWyKNlKwoNUQzJL5wsmKACz7u19bQj3UFuFMLkM=
Subject key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65FE6ED47DE7896E8EF229D7B6AAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.243.88.0/22
IP: 83.143.104.0/22
IP: 146.19.90.0/24
IP: 178.20.212.0/22
IP: 185.101.20.0/22
IP: 185.239.136.0/22
IP: 185.240.92.0/22
IP: 194.26.129.0/24
IP: 194.104.128.0/24
IP: 2a05:f680::/29
IP: 2a07:e240::/29
IP: 2a0c:5980::/29
IP: 2a0c:7980::/29
IP: 2a0c:8240::/29
IP: 2a0c:da80::/29
IP: 2a0d:1840::/29
IP: 2a12:6d00::/29
IP: 2a12:7c80::/29
IP: 2a12:b080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5f:e6:ed:47:de:78:96:e8:ef:22:9d:7b:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:c0:bf:3b:8f:7f:17:e5:e9:3e:4a:df:66:
9c:3d:c3:1e:55:17:db:75:ca:af:36:9a:48:22:a3:
d0:f5:31:32:f7:c5:db:b7:c7:24:fc:a9:00:a3:a8:
8a:cc:47:2e:29:a8:1f:62:42:80:54:e9:3f:da:ee:
13:7a:48:f5:6e:f6:22:d9:17:94:e6:75:d1:d6:ca:
11:fb:33:37:4c:96:0f:23:b8:d2:59:df:4d:2a:66:
00:54:cd:5a:c0:a6:ee:10:0e:76:9a:ac:c6:50:36:
41:67:48:ac:b0:d4:cd:f1:50:c2:e2:6d:19:09:cc:
83:0b:a7:02:ed:0f:0c:e5:83:ed:fb:64:df:5c:02:
bc:a0:d8:b9:bb:33:02:4a:b5:24:50:32:03:95:c0:
6d:e3:1b:65:cb:f5:14:d8:99:62:36:ab:46:64:c0:
9b:b6:ca:f1:fa:60:45:3b:6b:9a:91:e7:b0:9b:ca:
a4:61:41:27:52:72:87:7c:78:51:eb:92:92:6b:07:
83:a7:b6:f1:c6:50:e1:ac:a7:8e:fb:18:49:93:33:
7b:c0:2a:42:44:97:19:c2:2f:1e:f7:72:c2:d6:52:
14:28:76:65:c7:93:b2:3b:9c:e5:c4:18:48:a6:b7:
3f:8a:c5:08:81:66:89:42:4f:2b:b6:0a:3e:7b:99:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
83.143.104.0/22
146.19.90.0/24
178.20.212.0/22
185.101.20.0/22
185.239.136.0/22
185.240.92.0/22
194.26.129.0/24
194.104.128.0/24
IPv6:
2a05:f680::/29
2a07:e240::/29
2a0c:5980::/29
2a0c:7980::/29
2a0c:8240::/29
2a0c:da80::/29
2a0d:1840::/29
2a12:6d00::/29
2a12:7c80::/29
2a12:b080::/29
Signature Algorithm: sha256WithRSAEncryption
6c:ff:f5:4d:6f:9d:ec:b6:aa:b2:99:6a:dd:b3:a2:5a:61:d5:
02:59:97:40:63:98:36:d6:62:af:4f:41:cd:d5:77:b6:35:2c:
f1:39:52:eb:68:41:79:f2:4d:ec:16:a3:74:64:f6:74:00:09:
f3:58:25:ab:42:a6:29:3b:17:51:23:5b:e5:64:e6:e0:66:24:
6c:2f:d3:d7:da:76:90:46:20:7a:0c:01:81:70:02:11:d4:b5:
78:8f:26:7f:26:65:fb:e0:e5:21:ed:0b:4f:1e:59:80:a4:25:
0f:6f:41:dd:6b:73:e8:89:e4:45:ee:a4:ed:f2:6e:7f:eb:47:
b8:e2:46:87:16:e7:c6:8f:a5:cf:1a:af:1c:6b:d3:03:59:13:
7c:e2:7f:85:ce:57:14:d7:ce:9d:1b:a2:83:f7:fd:71:49:72:
e2:db:0a:8a:d3:b9:c4:fe:a9:7a:22:8a:b4:39:ba:c0:04:9e:
71:61:60:20:ab:df:2c:3a:96:32:39:f7:27:21:83:9c:0b:e7:
d4:3e:a3:36:ce:44:4a:d3:95:7f:bf:71:11:9f:2f:0e:6e:ac:
19:39:ba:21:2d:9e:3f:02:c7:74:7d:80:47:f1:13:2f:6b:64:
f3:da:10:c4:72:e0:47:03:30:45:b3:46:7a:a6:66:ce:93:b3:
de:29:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:41:09 2025 by rpki-client