Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.cer (raw, json)
Hash identifier: ttYj14ABaZAfeXRt2HFZRiuO2LuH+BQYB+xuEuerHh4=
Subject key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A24DE06B0AADD53D5D969E9E9B069
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15726
IP: 46.231.232.0/21
IP: 213.149.64.0/20
IP: 217.14.160.0/20
IP: 2a00:f88::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:24:de:06:b0:aa:dd:53:d5:d9:69:e9:e9:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:2a:26:39:87:fe:04:18:00:66:c3:17:f0:
9b:70:f6:32:35:77:29:b9:90:e3:1e:98:e9:04:d8:
42:14:ef:55:7d:f4:1b:1c:92:07:73:3d:a2:1c:11:
f0:3f:2b:ec:85:79:93:e7:1a:c4:a1:2d:51:94:49:
84:6c:28:22:03:7e:ac:cc:6f:cc:a6:c4:db:5a:f1:
ce:80:67:64:3a:0c:e9:56:a0:de:6f:03:84:dc:b5:
a3:ed:6c:a3:db:0a:82:44:fa:62:90:f5:74:ad:0d:
c3:15:3b:37:b9:81:24:5e:a5:01:a3:f6:80:0f:b5:
4a:f4:f0:0d:c5:65:91:b3:cf:92:8e:c9:bb:78:07:
37:7e:d7:b1:cd:42:e1:2d:5c:f3:0b:fc:65:f7:ac:
a1:92:90:2e:22:c3:86:b6:b9:28:5b:7c:58:22:23:
84:7a:52:dd:e1:6c:83:23:6e:1b:18:e8:84:30:fe:
db:e6:ff:56:03:c4:08:5b:a3:e8:39:63:a4:96:2f:
b9:f8:b8:82:ba:05:d9:1b:1c:57:7e:93:e0:e2:95:
c5:ba:83:08:74:14:9c:ef:dc:f0:51:94:ee:15:b0:
3c:e3:37:8b:56:ae:db:54:44:42:1a:df:e5:1f:44:
10:35:a5:3e:94:ec:2b:ba:75:1a:56:32:55:89:3e:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.232.0/21
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15726
Signature Algorithm: sha256WithRSAEncryption
37:cd:72:c9:78:aa:a5:ae:de:7f:87:e0:fc:81:91:b6:cf:25:
80:89:7f:e1:34:34:35:b0:de:43:cf:c6:00:1c:63:66:11:5e:
d5:87:84:aa:cd:3b:50:6b:f1:5b:06:53:46:67:b7:a6:c8:35:
c6:fe:4c:c3:cb:54:5e:8a:5c:40:2b:56:6a:84:6d:ac:83:0e:
04:3a:d5:40:0a:b6:ea:29:39:43:15:ea:81:68:8d:8b:f9:0c:
a2:9e:0a:07:7d:2a:52:76:f1:74:6e:0a:bf:94:a6:86:78:ea:
19:57:38:17:e2:a8:4a:15:80:b2:6b:41:f3:08:ea:e8:a8:c5:
7b:aa:2e:ba:45:b1:76:54:d6:7d:c5:73:4d:68:83:35:bf:85:
c4:ef:b8:60:ce:d0:e2:e4:ed:c0:81:85:ed:39:fc:65:d8:b3:
c5:ae:f3:3f:80:47:3a:10:83:8b:b0:a3:99:d7:56:9f:d2:e4:
a8:5d:6f:2f:33:cc:cc:89:16:d8:34:cd:41:f6:5a:c2:97:05:
e0:c6:42:5c:33:3b:f3:a7:3e:33:76:ef:09:9f:43:63:fe:0f:
27:c5:96:6c:74:37:5d:2f:04:50:3d:6c:a0:2c:bd:ee:f7:5b:
e6:cc:2e:b6:3c:97:d4:04:de:cd:01:fe:ed:f4:e0:ab:da:9e:
0e:bd:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:26 2025 by rpki-client