Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
File: RU-dLb7ZdFOEBaefbsfobErt09E.cer (raw, json)
Hash identifier: 3tUSpvADOCZeisJ5auDPogUQgD6eKHxjNMwVmgulaR8=
Subject key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D649EF4AA2F69A21B9678B2DBB1201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.118.37.0/24
IP: 185.68.80.0/22
IP: 193.238.192.0/22
IP: 195.234.91.0/24
IP: 2a0d:9980::/29
IP: 2a0f:5140::/29
IP: 2a0f:5940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:49:ef:4a:a2:f6:9a:21:b9:67:8b:2d:bb:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8f:18:fe:23:9c:14:66:a9:05:23:7f:7a:
43:98:32:d8:72:86:a0:38:01:0f:69:19:e1:dd:18:
8b:7c:3b:ca:a6:55:5f:86:ea:a7:b6:f6:24:d8:03:
8d:ea:8e:49:6b:d2:e3:8a:00:84:94:f6:aa:20:83:
3e:4c:7b:e3:6b:ad:d0:47:6c:81:e1:14:25:38:48:
c6:46:28:cc:8e:04:54:11:02:4c:52:9f:27:bd:8c:
0e:58:b6:a1:e4:cd:9e:e5:c8:ed:db:47:97:1f:2d:
2f:4f:5c:4c:a3:fc:fa:39:2e:3d:50:99:86:8e:d3:
e8:1d:bb:67:df:fd:18:fc:86:e4:61:c8:a6:dc:20:
de:12:04:c6:9f:db:14:a1:9b:37:a8:bf:67:10:4e:
16:f1:5d:19:02:73:37:94:a6:fb:65:88:7a:05:52:
5a:e6:c9:a2:34:bc:67:68:43:a8:7c:a8:3d:19:fc:
b8:67:cc:aa:21:1a:c4:ec:28:8d:11:2d:b7:c4:30:
fe:1d:2c:23:0d:5d:e2:70:e2:bb:ea:3b:c8:1f:18:
c0:27:70:f5:52:72:b7:2d:9d:55:69:b4:1b:96:1d:
30:85:d1:5b:46:d3:59:69:c3:32:85:fc:d1:53:bb:
c4:c2:9c:a0:98:1c:66:c1:5e:7c:a4:cd:98:c3:6d:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.37.0/24
185.68.80.0/22
193.238.192.0/22
195.234.91.0/24
IPv6:
2a0d:9980::/29
2a0f:5140::/29
2a0f:5940::/29
Signature Algorithm: sha256WithRSAEncryption
0c:9b:9a:98:b4:46:5c:bb:5a:03:1f:5e:be:4d:19:f7:8d:67:
aa:f9:eb:42:45:cb:aa:2d:8d:46:d4:7f:38:50:fb:6b:eb:2b:
56:97:4d:23:a6:b2:51:44:27:8f:30:a4:6f:ea:61:1f:57:d6:
ee:1b:9b:8a:dd:53:28:ed:ab:af:6a:7d:f8:4c:aa:38:b2:35:
0d:6b:e5:62:61:44:fe:2a:6f:ce:68:12:21:cf:13:91:f3:ab:
ce:f9:2b:cb:db:f9:fa:22:5c:fd:18:59:bc:1e:71:f9:2c:e0:
db:81:20:6d:b0:71:32:79:0a:b1:69:f1:af:27:b5:d7:13:31:
90:bd:65:05:9a:c8:16:ed:fa:5c:24:96:61:d3:ed:67:e1:a7:
ea:43:9a:8a:1d:3c:97:a1:24:a3:52:fe:b9:c5:1c:6a:e3:46:
27:a9:5f:c7:cf:d7:7e:24:71:84:fc:4a:88:dd:ff:0e:44:92:
3b:fc:60:d5:3a:16:b8:12:92:2c:60:6b:48:9a:cc:79:97:f7:
8e:f2:11:b4:0b:36:25:f8:ef:c9:71:ca:8e:9d:7c:be:60:55:
60:e9:73:55:66:0a:78:c2:ef:cd:2c:b9:08:0e:63:a4:57:c7:
a1:5a:ce:e8:40:15:17:1b:67:70:50:e6:19:5a:33:e3:78:d3:
67:a3:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:54 2025 by rpki-client