Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
File: RUDapMJFpHJfOAQUAra__e0V6ng.cer (raw, json)
Hash identifier: 6KH5DF2giKzlwC5a6hYvoo0QxmHusxEFva1g2g8z51o=
Subject key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D30E8AE7E3668F6209A029635D5B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201746
IP: 178.236.125.0/24
IP: 185.49.168.0/22
IP: 185.70.139.0/24
IP: 193.5.150.0/24
IP: 217.61.224.0/22
IP: 2a01:9f20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:30:e8:ae:7e:36:68:f6:20:9a:02:96:35:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4540daa4c245a4725f38041402b6bffded15ea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:82:e3:c5:9c:df:a5:2d:04:8a:95:6c:81:
c3:44:cc:4a:21:f9:86:b6:f3:5e:c3:73:0e:a4:6a:
44:3e:c5:ae:5c:f6:df:c2:f2:05:f8:2c:31:c7:37:
83:78:82:23:09:52:51:a2:d3:79:9c:5f:53:5a:74:
60:6b:4c:52:ff:d8:c6:35:a8:ab:6a:19:ff:a5:95:
2c:98:04:9f:a4:93:75:db:b7:e1:b8:1c:6b:9b:6b:
b2:2b:b9:02:95:c6:ac:a8:d5:4d:b0:f3:a3:30:18:
a2:bf:05:05:1d:a7:49:18:4e:b0:f2:07:89:3d:c0:
a0:e6:8b:e8:7a:14:3b:74:80:c1:eb:f4:1b:02:11:
1c:6b:aa:41:f3:2c:c9:80:73:c9:84:7c:8b:27:bb:
59:d1:71:a8:f9:db:bb:98:fd:92:25:4a:61:48:63:
c5:f2:ed:7f:01:7c:f4:02:ca:80:48:14:73:48:9c:
de:cf:64:97:5f:48:cf:55:8f:b6:99:1b:18:76:4d:
c5:de:d4:df:f7:9b:68:ed:da:77:b7:b2:91:e1:fc:
7b:65:94:06:cb:cd:cc:5b:d3:c5:07:bd:14:07:70:
07:b1:fb:68:84:27:e2:f7:dc:0f:5c:39:4d:29:90:
49:f8:5d:07:62:5f:f1:96:83:2b:6a:ba:32:52:b6:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.125.0/24
185.49.168.0/22
185.70.139.0/24
193.5.150.0/24
217.61.224.0/22
IPv6:
2a01:9f20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201746
Signature Algorithm: sha256WithRSAEncryption
93:94:a6:c5:50:61:a2:9a:1e:fe:73:d8:a7:bf:83:54:82:bb:
24:42:c2:62:f7:c7:c5:93:9e:e7:72:8c:2e:fe:e3:1a:d8:89:
0a:f9:4e:3f:1a:bb:2e:fc:83:9e:fe:eb:ce:f3:5e:ce:e5:87:
74:05:c6:b0:4f:f2:d0:4f:0b:ba:e0:64:e0:30:10:49:97:22:
55:f1:75:2b:d4:ed:fc:8b:9d:87:32:b1:83:a1:8a:ea:2c:82:
06:c1:54:a4:ea:21:e6:a6:5b:88:0f:4e:ce:91:4f:d9:42:c3:
aa:28:d0:59:57:19:9b:36:99:63:43:75:d9:2d:72:71:ad:a3:
e3:15:f5:29:c9:0b:d3:06:e8:cc:c2:9c:ac:f7:ee:9a:a6:01:
4e:eb:48:2d:b7:f4:c3:9d:8f:8b:c6:d3:b1:3c:7b:fb:16:4d:
64:e5:dd:90:ec:c2:8b:93:69:43:8e:7b:1f:49:b2:e1:03:8d:
a4:9c:a4:bb:15:b4:91:ef:f6:d9:bf:19:7d:62:b7:98:a8:5b:
24:93:e4:b7:46:3e:dc:83:5e:02:2f:97:c0:d2:92:0a:bf:6c:
50:cd:25:bd:8c:6c:c7:a4:4d:64:b6:4f:27:b7:76:ec:8e:1a:
1a:1c:43:69:55:9a:69:d3:3f:d9:a1:f5:5c:1e:8f:3c:f6:11:
85:40:57:6e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQijTDorn42aPYgmgKWNdWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQwZGFhNGMyNDVhNDcyNWYzODA0MTQwMmI2YmZmZGVkMTVlYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0OC48Wc36UtBIqVbIHDRMxKIfmG
tvNew3MOpGpEPsWuXPbfwvIF+CwxxzeDeIIjCVJRotN5nF9TWnRga0xS/9jGNair
ahn/pZUsmASfpJN127fhuBxrm2uyK7kClcasqNVNsPOjMBiivwUFHadJGE6w8geJ
PcCg5ovoehQ7dIDB6/QbAhEca6pB8yzJgHPJhHyLJ7tZ0XGo+du7mP2SJUphSGPF
8u1/AXz0AsqASBRzSJzez2SXX0jPVY+2mRsYdk3F3tTf95to7dp3t7KR4fx7ZZQG
y83MW9PFB70UB3AHsftohCfi99wPXDlNKZBJ+F0HYl/xloMraroyUrbwbwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFEVA2qTCRaRyXzgEFAK2v/3tFep4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2MwYmE2
Zi1kZjZmLTQxNDgtOGZjYS1kMjVhYWE4MDQxNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYzBiYTZm
LWRmNmYtNDE0OC04ZmNhLWQyNWFhYTgwNDE0NS8xL1JVRGFwTUpGcEhKZk9BUVVB
cmFfX2UwVjZuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQAsux9AwQCuTGoAwQAuUaLAwQAwQWWAwQC2T3g
MA0EAgACMAcDBQAqAZ8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUEjANBgkq
hkiG9w0BAQsFAAOCAQEAk5SmxVBhopoe/nPYp7+DVIK7JELCYvfHxZOe53KMLv7j
GtiJCvlOPxq7LvyDnv7rzvNezuWHdAXGsE/y0E8LuuBk4DAQSZciVfF1K9Tt/Iud
hzKxg6GK6iyCBsFUpOoh5qZbiA9OzpFP2ULDqijQWVcZmzaZY0N12S1yca2j4xX1
KckL0wbozMKcrPfumqYBTutILbf0w52Pi8bTsTx7+xZNZOXdkOzCi5NpQ457H0my
4QONpJykuxW0ke/22b8ZfWK3mKhbJJPkt0Y+3INeAi+XwNKSCr9sUM0lvYxsx6RN
ZLZPJ7d27I4aGhxDaVWaadM/2aH1XB6PPPYRhUBXbg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:00 2025 by rpki-client