Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
File: A-VjR3yiveae95Q5kflTMwV7PjY.cer (raw, json)
Hash identifier: YcLyFZxNdu6kO58MoRcmV0RJ5wikpl3WspWpgrxnsEI=
Subject key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521FC2EE10236C3B4F872AB9402DECC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214679
IP: 45.88.57.0/24
IP: 2a0d:3480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:2e:e1:02:36:c3:b4:f8:72:ab:94:02:de:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e563477ca2bde69ef7943991f95333057b3e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:3d:c6:a3:dd:15:5f:c5:65:86:3e:fb:41:
bc:0b:b1:56:21:df:da:ab:74:8f:ab:76:38:ef:cf:
20:30:8e:0c:9b:a6:37:14:a8:b5:ce:3f:9a:49:0a:
5f:dc:5d:90:bf:fe:31:5b:ab:a2:43:9d:f5:32:2f:
b8:0f:f2:b3:cd:ef:bc:79:f9:ad:3c:b1:7b:dd:7d:
6c:f7:dd:55:8a:af:88:33:33:f2:ee:21:bb:71:f4:
08:3c:bb:33:ad:89:dc:53:bb:76:f4:b5:b3:fa:0b:
fd:08:a2:14:23:7b:80:70:46:ae:cb:c6:89:87:76:
5a:5f:69:d2:1e:9d:e8:ba:ea:46:c1:66:85:7b:90:
5b:cf:52:79:37:77:0f:f5:ac:60:5f:f6:53:07:11:
9f:27:62:ef:c3:40:89:cc:3b:0b:c0:1e:4f:f9:63:
b9:f5:ff:01:72:c0:92:0a:cd:2f:df:c2:b3:4f:15:
67:48:da:da:6c:b3:51:e4:9c:83:53:da:7e:cf:4e:
db:78:d9:6a:cc:99:85:09:5d:69:27:02:99:dd:df:
ec:3e:af:13:54:1c:04:50:a9:15:c3:72:8c:6e:82:
37:09:b2:5a:5d:8a:bc:60:57:dc:ed:b0:a8:46:35:
57:d3:01:43:05:75:9a:be:e5:d7:d8:4f:5a:02:97:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.57.0/24
IPv6:
2a0d:3480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214679
Signature Algorithm: sha256WithRSAEncryption
67:e9:a4:2d:b0:fa:f3:ed:46:bf:6a:72:2c:17:a8:a8:b8:d6:
eb:db:49:1a:9a:db:63:7b:0a:68:07:5a:5c:89:a8:db:00:73:
65:a7:45:39:e9:9c:d4:81:b2:59:fc:4a:a7:ff:d5:b4:e9:d0:
66:3e:d2:ed:39:08:ac:76:32:37:40:0e:8c:e2:93:ea:f6:14:
db:34:86:7d:77:e8:26:c6:48:d7:fc:58:da:9a:35:ed:65:2b:
26:a5:67:35:64:2f:9d:3d:98:7d:33:af:a9:5e:f9:09:a4:bc:
ef:cf:d1:70:71:43:91:8e:b1:f0:d3:e6:59:9d:8a:f8:f8:ae:
2b:d8:59:4b:8e:cf:cb:c8:a9:5f:e6:02:16:3b:00:80:ef:c9:
b7:1e:09:15:a3:44:cb:63:75:ee:98:8f:82:1f:1d:dc:79:9f:
cc:f3:80:6a:ec:86:cb:45:89:2f:b8:f3:32:24:12:7e:3c:e1:
0a:77:da:bc:e3:51:39:7a:88:42:1e:50:d7:ef:b6:85:28:1e:
4f:b2:46:38:fe:71:b7:ca:24:8c:cc:c6:0d:44:80:48:c9:eb:
86:77:9a:28:3f:52:0a:ce:3b:e7:5e:3d:b8:d4:98:54:13:54:
75:01:e4:70:22:f9:eb:1c:82:5d:17:31:a8:f2:43:bc:16:2d:
9c:28:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:19 2025 by rpki-client