Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
File: lUoq7ghhdLAScvrnea1DHrCSrrc.cer (raw, json)
Hash identifier: 6F3LaL6NRAw1XL5sgLwnicrUrUnYUEXNfHrMAFoZa4o=
Subject key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E5D192AD597701AB743CEF37C6100
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44922
AS: 203555
IP: 37.247.112.0/21
IP: 185.7.80.0/22
IP: 2a03:400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5d:19:2a:d5:97:70:1a:b7:43:ce:f3:7c:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=954a2aee086174b01272fae779ad431eb092aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:d9:9a:45:4e:16:6e:32:0e:56:ec:57:ee:
b0:60:cb:33:ab:4e:2f:88:a7:4a:0b:b3:b2:7b:45:
99:3b:f5:9a:27:ed:86:30:83:3f:8b:b2:31:bf:90:
1f:65:57:aa:8f:00:26:33:ab:61:d7:c9:13:d5:b2:
15:4b:35:d2:b7:00:87:25:78:55:dc:99:6d:9b:9e:
2b:3c:e4:f1:31:c2:f4:a5:86:5c:26:f5:a2:49:01:
4f:3f:40:a8:9a:5b:94:d2:d9:cf:ba:35:0e:ee:b3:
d4:7c:1b:5a:37:2e:bf:3a:ae:3c:5c:6b:9a:76:22:
03:70:5b:92:13:0f:eb:6a:64:74:65:65:2e:47:28:
43:61:0d:34:74:d3:03:43:d3:31:82:b2:3d:cf:a5:
09:18:46:a1:9c:ff:80:f8:b6:09:fd:77:25:40:30:
2d:f3:55:96:e6:b7:23:01:99:3a:f9:8a:f9:cf:d5:
43:eb:11:ec:b5:fc:86:89:28:37:76:e1:e5:22:c8:
6d:ca:5e:a8:cd:95:3f:b8:30:1f:18:37:48:b5:32:
e7:e9:90:61:1e:25:1f:37:3d:6a:ee:82:60:64:24:
3e:87:dd:90:47:fe:dd:ad:d1:50:d8:5f:7a:28:bd:
b8:f7:c0:4e:e1:9a:d6:4c:49:15:ee:86:60:d9:ca:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.112.0/21
185.7.80.0/22
IPv6:
2a03:400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44922
203555
Signature Algorithm: sha256WithRSAEncryption
9f:aa:75:fa:28:09:70:52:91:6d:89:8d:c0:c3:5f:08:18:63:
80:a4:1f:9a:09:c7:28:0f:ed:ca:8c:32:a2:8a:3b:2f:ab:86:
9e:7e:b6:8c:29:dd:03:4d:3d:d0:e2:ec:94:91:6f:22:3d:20:
d2:5e:5a:e5:06:6f:ea:3a:f1:4f:f6:a7:44:92:5e:ee:b8:8d:
a5:48:b2:39:1d:c2:9f:41:43:90:3c:68:db:66:24:dd:ef:c2:
c8:30:49:3c:fe:c8:b4:bf:85:48:c4:29:e5:0d:a6:de:2c:49:
f2:f1:a9:e0:ba:35:18:03:3c:2e:ba:3d:38:54:f1:f1:3d:f2:
b0:22:45:b7:a9:45:6c:7d:62:40:b2:58:52:bb:86:63:1e:4c:
15:ab:5a:ea:e8:92:ed:30:60:9b:cd:1b:01:29:ee:0f:76:35:
3a:cc:00:26:c6:f5:81:8a:69:87:df:0a:25:20:e4:a7:7d:ca:
91:0f:6c:a9:ab:9b:b8:c5:14:3c:73:dc:2c:9e:97:46:c2:01:
98:de:58:ed:be:9a:9f:dd:bc:0f:47:1f:f4:a4:d7:ef:f5:c7:
ae:28:d4:6c:51:6d:cc:d3:70:98:47:86:2e:03:f3:6d:8d:2b:
16:99:e9:df:6a:e5:0f:7f:4b:b3:37:f3:b0:19:3b:83:d2:7a:
01:17:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:15:05 2025 by rpki-client