Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.cer (raw, json)
Hash identifier: LxVtKSZ1G2DMXt66y/Lo+40m9MYk4t+0UvynaAoQ7HA=
Subject key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218721C9B75C24A5F52D6CE5402FF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200585
IP: 185.89.232.0/22
IP: 2a03:8560::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:87:21:c9:b7:5c:24:a5:f5:2d:6c:e5:40:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:d9:7a:dc:8e:4b:1e:4f:65:6a:2a:af:27:
35:42:04:ef:98:5c:a5:1b:63:f8:51:c2:b7:6b:dd:
07:45:11:83:35:c5:65:be:29:44:b7:6f:80:72:bc:
ad:e7:ee:2b:de:a6:73:4b:e0:b2:e8:9f:22:14:3f:
57:07:59:e2:ff:56:58:05:8b:53:48:c1:af:69:33:
dd:3b:65:9c:a1:3c:b1:14:cd:19:16:d2:c1:52:c4:
47:00:55:da:61:8c:c5:20:9c:ad:b8:b1:bd:95:56:
d1:7e:82:9b:1c:35:f1:0b:0a:53:d0:5a:6f:62:19:
f5:fb:f5:9b:45:cf:cc:60:9e:35:f3:71:bf:4c:05:
88:39:98:85:8b:f8:2e:e8:79:d6:c0:4e:f8:0e:3c:
86:ac:48:0c:59:ec:d2:1e:32:0f:ab:a3:f5:52:6b:
04:58:2d:f3:f8:64:16:d6:b7:47:a6:27:4b:2c:b7:
33:39:00:03:15:30:e3:a1:9f:af:3e:2a:c6:b0:6c:
21:39:7a:b0:8d:bc:86:22:5d:5d:dc:00:e5:09:fc:
7a:7b:a3:d0:c9:68:a2:a8:73:d2:9f:88:42:78:17:
93:56:31:97:eb:ff:28:ae:32:31:52:4c:01:93:2a:
27:62:81:06:e1:bf:a8:d4:a1:d6:e7:4b:f0:ab:68:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.232.0/22
IPv6:
2a03:8560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200585
Signature Algorithm: sha256WithRSAEncryption
af:b8:3e:e3:56:2e:a8:af:55:98:85:e8:14:6b:22:44:46:75:
ca:f7:b4:4d:dc:39:2d:11:cd:a3:61:78:ea:60:03:4a:c0:a7:
03:60:71:1d:78:dd:39:e6:4b:d6:84:4e:e4:be:cb:9f:fe:79:
18:4c:7d:d1:9f:da:c3:60:bd:84:44:f5:aa:35:91:c3:01:81:
77:4c:e2:ea:e4:8d:d0:3e:3a:14:9b:bb:2d:16:b4:49:14:7b:
25:40:b0:7b:60:3e:48:f9:a7:b7:3c:87:3f:f1:1e:bf:e4:cf:
67:da:f9:d8:52:7a:04:cd:0f:0f:8d:fe:0a:4d:63:5a:b0:87:
78:54:ce:62:68:3f:5e:54:0d:99:ff:03:64:82:9d:4f:11:52:
e1:3c:82:24:06:0f:72:27:43:15:65:38:ef:eb:16:12:15:e8:
10:73:b5:01:00:05:dd:d1:b2:12:68:67:1e:7a:a7:3a:86:38:
2e:72:f1:c5:d1:33:e2:4b:68:32:2f:23:73:bd:86:fa:77:fa:
2a:d4:67:9c:de:ce:80:ce:fc:77:15:4c:49:8b:ca:2f:0f:77:
47:1f:77:08:ee:df:6c:15:b4:24:56:e7:5e:ba:d1:d4:fd:72:
bb:5a:0f:c2:ca:1e:c7:54:42:56:7b:57:2e:c1:34:67:9d:53:
bb:1f:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:01 2025 by rpki-client