Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.cer (raw, json)
Hash identifier: zIZHP6JoKAwJbmZcribpRMPbOlM9u/HU32+F3+OLcGI=
Subject key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B385D2474C62CA879810C27930CC85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213338
IP: 185.167.183.0/24
IP: 2a0b:9c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:85:d2:47:4c:62:ca:87:98:10:c2:79:30:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:b6:ba:f5:21:e2:64:a5:57:2e:2e:37:e9:
10:b9:63:10:55:63:71:67:01:81:69:8a:fe:d4:04:
07:b3:1e:04:4b:ae:e4:77:08:2d:81:1d:48:37:86:
f3:03:59:1a:ea:19:59:e8:8e:ce:93:a9:8d:6a:e1:
61:a2:22:b6:0a:20:e3:5d:80:44:f1:79:d6:ef:ea:
5f:1f:b7:ca:53:14:e4:8a:57:5f:ae:e4:71:ec:8f:
14:e1:3c:bf:90:ff:9b:27:74:e2:c5:90:04:9f:91:
ab:2c:b2:77:ea:53:60:48:79:b3:ab:ac:87:64:f3:
f6:32:0a:e2:dc:7f:c0:dc:6a:43:08:f0:c4:af:45:
42:fc:e7:45:30:52:1e:6b:b6:b2:f0:4d:80:23:56:
66:d1:91:a6:8a:26:b0:77:ca:42:44:32:66:7c:9d:
6e:ad:62:ac:80:9c:dd:21:a3:d3:3e:0a:c1:88:c7:
6f:16:17:d2:71:9b:19:09:14:65:cf:71:27:e7:9b:
4f:eb:7a:5e:b4:b6:f9:90:bc:98:eb:e6:8c:32:24:
ad:06:dc:9f:42:08:5a:5c:15:fe:b6:9a:cd:cb:68:
aa:b2:ee:c8:1c:23:d4:b2:f9:49:a7:05:25:d9:13:
92:60:2f:7c:72:cb:d9:41:aa:e5:6c:49:23:04:6f:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.183.0/24
IPv6:
2a0b:9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213338
Signature Algorithm: sha256WithRSAEncryption
96:18:cb:9f:2b:0c:85:f9:6d:51:72:ce:ef:78:75:85:f4:d8:
11:43:04:1e:e3:d5:d8:15:97:03:93:d2:cc:18:91:95:aa:9b:
d6:e6:27:cb:e2:8c:5f:c2:4d:39:26:56:42:42:8d:29:23:dc:
4e:44:86:27:a5:e6:cf:86:35:53:58:93:ce:ba:42:22:56:42:
7b:fd:28:37:6e:14:1b:11:ec:95:3e:9e:55:25:c4:a0:24:34:
8a:c7:67:f4:c1:3e:88:7f:77:54:d8:87:ed:1d:ee:1e:a7:b1:
be:77:82:72:cf:b3:61:24:93:00:d1:93:fd:20:69:3a:4a:aa:
8c:14:bd:9e:49:c5:0a:3f:eb:4b:b0:81:ce:a0:ed:59:45:18:
50:0c:2f:99:3d:59:4b:d8:14:cc:db:73:75:18:7d:62:f5:f2:
ab:08:b1:87:c8:35:61:6d:b8:e2:7c:b9:01:b1:1b:93:ae:db:
35:a9:7e:59:e5:45:ad:ef:7d:9a:ab:84:78:b8:8f:22:51:aa:
c3:f5:d2:dd:81:3c:9b:f0:0b:26:0e:8a:1a:fe:94:cd:aa:25:
fa:24:ab:68:50:0a:51:98:2c:75:cc:23:24:c8:df:14:90:9b:
c6:be:94:59:16:49:f2:c4:4d:0b:83:ea:d0:b4:12:8c:98:74:
7b:d9:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:31 2025 by rpki-client