Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
File: 2vtkXxNPT9raRecLz82TuJfb1yU.cer (raw, json)
Hash identifier: 6eVao9AYZShPNgaVGZWGMl7dbH0zHYbURTS1Ijh0XNo=
Subject key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C1C17F3BF3B21A61AA2F30F7F0BF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51074
AS: 59442
IP: 5.220.0.0/15
IP: 31.184.128.0/18
IP: 37.130.200.0/21
IP: 91.241.20.0/23
IP: 178.252.128.0/18
IP: 185.115.148.0/22
IP: 2a02:2b58::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1c:17:f3:bf:3b:21:a6:1a:a2:f3:0f:7f:0b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:92:30:f3:0a:70:1d:10:92:fe:0a:13:45:
72:84:93:7e:55:87:76:da:2b:2b:1f:f0:27:01:24:
6d:df:3e:58:40:05:3a:34:d2:3b:89:93:cf:6e:df:
01:0f:b8:24:9a:a1:26:1f:c1:ed:52:62:b4:71:d1:
d9:13:89:dc:2f:ec:af:c9:85:49:54:b2:03:d8:8c:
80:93:0d:d1:3e:67:67:63:73:4d:71:05:b9:89:3d:
b2:a6:68:47:96:18:85:f9:8c:52:c9:90:63:e1:ee:
f7:41:c3:d5:c2:44:e9:6b:09:85:59:2e:ea:57:80:
74:49:38:b3:e7:2b:d2:43:5f:8d:cd:d0:f2:78:57:
56:04:1a:b7:b7:42:ef:42:67:24:54:a1:fc:72:c7:
49:74:f0:21:39:8e:19:2c:6c:26:f2:2e:6e:6e:0b:
28:5e:b4:86:44:eb:13:28:17:9b:a7:03:22:e6:0d:
c7:01:f1:f8:a9:c9:fc:97:53:54:9b:3b:0b:f1:6b:
dd:7d:b3:6a:da:1a:67:a5:8b:cb:26:50:8d:d5:88:
98:07:97:f8:79:ea:70:aa:72:85:c5:dc:6e:6f:82:
8d:8c:04:e0:6e:24:07:c9:0e:32:95:f0:49:bd:67:
21:64:ce:ca:6e:17:d9:37:c0:db:15:46:1c:66:25:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.220.0.0/15
31.184.128.0/18
37.130.200.0/21
91.241.20.0/23
178.252.128.0/18
185.115.148.0/22
IPv6:
2a02:2b58::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51074
59442
Signature Algorithm: sha256WithRSAEncryption
9f:68:4c:35:d4:04:23:7d:eb:15:00:d7:79:67:4e:43:34:4f:
35:5b:e0:3d:27:67:16:20:fd:f3:cc:cb:2d:d2:8c:ba:ce:ba:
f2:4c:28:0c:ae:f6:de:e3:bc:9d:28:37:90:ea:d2:de:73:84:
88:cd:c9:54:c8:5a:ec:66:fb:c5:24:0a:70:99:8a:8b:ac:d6:
3a:8a:1e:93:49:3d:91:c3:1f:81:36:dc:16:cc:68:3a:58:4f:
c8:cb:55:cf:a4:fd:ca:74:e0:75:a2:85:7b:8b:a1:10:00:17:
44:1d:e4:25:69:e7:3b:7c:fb:0b:31:96:aa:a9:0c:e7:b4:c4:
f9:2a:44:c6:76:c0:b0:0a:16:3e:d5:ae:a3:d8:cd:7b:22:1a:
fe:99:e3:4f:44:d6:2b:d7:23:4b:8c:69:69:0e:93:15:4a:6e:
6f:2f:a4:48:8c:d7:eb:5a:55:17:4f:76:7a:42:39:63:b3:5a:
85:b0:50:b5:aa:5a:93:33:c6:5b:15:95:94:e5:f5:fd:a2:80:
48:fd:dd:79:ab:81:a1:c4:10:91:76:3c:14:83:ac:db:e3:c9:
47:a0:46:ea:3f:bf:06:57:61:1b:94:fa:70:7d:51:88:3b:5c:
45:e8:3c:02:e7:62:5c:fd:c0:5e:aa:42:f8:43:70:e9:8c:3e:
89:fc:3f:76
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgISAZQmbBwX8787IaYaovMPfwvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWZiNjQ1ZjEzNGY0ZmRhZGE0NWU3MGJjZmNkOTNiODk3ZGJkNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii6SMPMKcB0Qkv4KE0VyhJN+VYd2
2isrH/AnASRt3z5YQAU6NNI7iZPPbt8BD7gkmqEmH8HtUmK0cdHZE4ncL+yvyYVJ
VLID2IyAkw3RPmdnY3NNcQW5iT2ypmhHlhiF+YxSyZBj4e73QcPVwkTpawmFWS7q
V4B0STiz5yvSQ1+NzdDyeFdWBBq3t0LvQmckVKH8csdJdPAhOY4ZLGwm8i5ubgso
XrSGROsTKBebpwMi5g3HAfH4qcn8l1NUmzsL8WvdfbNq2hpnpYvLJlCN1YiYB5f4
eepwqnKFxdxub4KNjATgbiQHyQ4ylfBJvWchZM7KbhfZN8DbFUYcZiVw3wIDAQAB
o4IC0TCCAs0wHQYDVR0OBBYEFNr7ZF8TT0/a2kXnC8/Nk7iX29clMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzdhNDhm
NS1iZDI0LTRkYzQtOGNjYS02YmEwYTBjZTAxZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvN2E0OGY1
LWJkMjQtNGRjNC04Y2NhLTZiYTBhMGNlMDFlZC8xLzJ2dGtYeE5QVDlyYVJlY0x6
ODJUdUpmYjF5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF
BwEHAQH/BDwwOjApBAIAATAjAwMBBdwDBAYfuIADBAMlgsgDBAFb8RQDBAay/IAD
BAK5c5QwDQQCAAIwBwMFAyoCK1gwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMeC
AgMA6DIwDQYJKoZIhvcNAQELBQADggEBAJ9oTDXUBCN96xUA13lnTkM0TzVb4D0n
ZxYg/fPMyy3SjLrOuvJMKAyu9t7jvJ0oN5Dq0t5zhIjNyVTIWuxm+8UkCnCZious
1jqKHpNJPZHDH4E23BbMaDpYT8jLVc+k/cp04HWihXuLoRAAF0Qd5CVp5zt8+wsx
lqqpDOe0xPkqRMZ2wLAKFj7VrqPYzXsiGv6Z409E1ivXI0uMaWkOkxVKbm8vpEiM
1+taVRdPdnpCOWOzWoWwULWqWpMzxlsVlZTl9f2igEj93XmrgaHEEJF2PBSDrNvj
yUegRuo/vwZXYRuU+nB9UYg7XEXoPALnYlz9wF6qQvhDcOmMPon8P3Y=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:37 2025 by rpki-client