Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
File: jnAqYWwElB4snwcWUeScXfOu0LE.cer (raw, json)
Hash identifier: 5PeXWK1/xFDFu1tNEp0IPXM6f096SSkn39pxZcTk1QY=
Subject key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C00A5F2465F2A8F12381C3827C210
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200325
IP: 91.200.176.0/24
IP: 107.150.176.0/24
IP: 109.104.146.0/23
IP: 109.224.228.0/22
IP: 193.162.131.0/24
IP: 212.104.158.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:00:a5:f2:46:5f:2a:8f:12:38:1c:38:27:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:68:6f:80:e4:68:c6:78:1e:ab:08:9d:e3:
8a:7d:69:dc:62:3d:0c:5e:82:7f:d2:79:00:fc:c5:
81:8c:5a:87:2b:66:c1:49:cc:f3:74:80:c0:f7:8d:
e7:4b:0e:f8:a5:ca:90:cd:60:f1:13:29:b0:50:20:
c1:8a:11:71:c7:23:f5:02:7e:a8:6e:f0:da:e2:31:
4b:c4:48:7a:07:bc:5a:2e:9f:43:55:be:00:df:1a:
e9:83:26:03:37:68:01:83:7b:00:20:df:10:82:ac:
bd:56:61:e0:f9:81:6e:8f:96:03:e7:03:d7:81:be:
5a:1b:79:b2:d2:d2:ba:23:46:58:c8:6e:c0:64:46:
e6:41:02:8a:d7:d7:96:fa:67:c7:e9:1b:d5:c6:22:
63:e8:0f:b4:f8:72:3a:28:51:64:eb:a6:e6:0d:3e:
d5:00:6d:7f:41:15:67:16:ea:2b:58:12:22:37:78:
78:d5:88:6f:f1:b5:44:56:5d:85:cd:30:2e:13:0f:
06:87:fc:72:62:15:23:65:56:fb:cc:13:05:d8:53:
f6:c8:c7:79:79:07:7c:e1:76:99:c0:da:bc:2f:87:
f2:15:a8:cc:18:95:e9:f6:b5:bc:87:0c:c3:d5:44:
39:b9:26:91:f6:44:98:9b:4e:9b:dd:56:92:b9:66:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.176.0/24
107.150.176.0/24
109.104.146.0/23
109.224.228.0/22
193.162.131.0/24
212.104.158.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200325
Signature Algorithm: sha256WithRSAEncryption
9a:c9:a9:78:23:23:c4:a9:9c:10:13:c8:ce:91:15:80:44:e2:
40:9c:88:d0:c7:a2:4c:67:8c:8d:f7:4c:e2:92:7e:85:30:dd:
a7:f8:2d:07:75:3b:b5:f6:9f:11:d9:1b:ad:55:fe:05:76:2e:
e4:74:d8:6c:2e:2b:7d:93:be:c0:db:54:56:ec:bc:e7:d8:ab:
ce:19:16:6a:43:c2:b9:2f:8c:28:75:41:bb:d8:4a:91:0d:4e:
da:8a:74:73:ae:20:3c:2d:6c:2e:a5:9a:79:09:4c:1e:78:f4:
ba:a4:f2:74:6d:21:3a:1b:db:25:9a:e2:ad:6f:3b:3d:8e:70:
f1:0f:24:94:9f:5e:bb:80:47:f2:0f:54:93:be:ce:d0:33:76:
3a:37:01:d0:b6:4b:25:ef:fc:48:e3:bd:a7:ae:70:02:04:dd:
f6:cd:ee:42:fa:35:e7:37:af:02:e6:7d:5e:a0:3a:80:b2:6f:
69:b0:f7:53:f8:f5:b6:54:ed:c3:f7:ff:29:a6:07:d2:11:f6:
51:f4:02:e5:a0:da:aa:b2:d3:22:e3:e8:50:7a:8b:61:48:08:
99:c5:ef:dd:68:cd:ab:00:53:91:bc:34:67:d4:92:38:02:f4:
8f:2a:ae:c8:0f:44:15:28:46:d0:af:64:5c:65:2d:35:39:90:
4d:16:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:11 2025 by rpki-client