Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
File: Su_P7VH_FY--aMzWC3s5vl8-riA.cer (raw, json)
Hash identifier: w+iiBzAIMpqeq177Q57F0DZKchpZkQtQmpAe+KBNtOk=
Subject key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D77758CB7B17ED3A919C28B4DFB4C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39202
IP: 81.20.48.0/20
IP: 2a01:6000::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:77:58:cb:7b:17:ed:3a:91:9c:28:b4:df:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:a3:d4:1e:18:e6:05:77:45:16:c3:e3:2b:
5b:52:a7:fb:c0:67:bf:c5:98:99:9a:b5:08:71:ea:
14:64:ad:48:d3:81:0a:a5:11:50:f5:d6:9f:67:6e:
d1:9c:3d:7a:70:44:fc:17:63:03:c5:da:be:4c:3c:
65:78:96:15:15:4b:a3:fc:6c:19:ca:29:ba:3f:df:
07:ec:30:90:61:f4:87:96:63:b6:74:55:7e:05:7a:
a4:b9:c6:8f:b9:59:61:50:ea:7b:d3:77:03:29:dd:
11:91:36:35:47:e5:68:52:47:53:f1:05:2c:c4:2d:
b5:d5:a8:d1:27:35:36:34:9d:96:6b:eb:ff:d9:4f:
df:29:f7:2e:e8:e7:20:85:8b:fa:e0:60:02:28:1e:
66:5a:b1:c8:13:b8:6e:24:a3:8b:41:fb:61:a4:21:
47:2f:f9:43:4c:41:55:16:79:19:d0:69:0e:96:0b:
ff:4e:70:35:f4:0c:80:65:6b:49:5a:28:ea:e0:2d:
c3:1f:98:82:34:94:ea:0f:bb:f5:84:22:d2:20:e0:
cb:0e:14:d8:9c:08:b8:f8:03:65:06:b7:4c:9f:b1:
82:5f:ae:87:a6:24:db:05:8e:c0:65:e0:39:a2:a4:
4d:44:90:3c:86:a8:03:34:3f:f7:bc:a1:ba:9d:80:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.48.0/20
IPv6:
2a01:6000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39202
Signature Algorithm: sha256WithRSAEncryption
3e:0b:b0:85:5d:b4:2f:d3:0a:a0:df:18:a8:b0:f3:fd:dc:e5:
51:d4:f6:ad:61:6a:ce:65:9a:85:df:10:ee:1c:bc:5d:43:c9:
04:29:9b:a7:0d:e3:fb:98:80:18:5f:64:19:44:d1:0b:ba:e1:
66:a3:3a:1e:3e:69:f6:4d:74:53:12:19:d9:8d:40:d6:33:07:
3b:f7:73:c3:5d:d7:b6:76:60:1f:5c:5d:b0:31:8a:85:35:b9:
e7:a6:b6:f4:83:5a:16:d3:23:e5:9b:90:c4:ac:bb:9d:77:df:
e4:12:18:bd:11:ea:82:e9:8c:1f:1c:c9:0f:de:09:cd:8c:d6:
a9:a9:9d:9e:e4:5f:39:66:ea:60:cd:06:24:a1:74:56:f4:5c:
ec:5e:7f:01:df:db:14:cb:01:04:cd:9e:ad:26:0e:e0:3a:58:
02:a1:94:71:d4:f3:9c:ca:59:f1:90:61:bc:3a:34:9f:37:c9:
3d:c4:76:41:94:a0:c7:ab:eb:14:04:7c:0f:ce:df:40:41:61:
87:8f:a4:03:bd:35:57:fa:fe:99:c4:e8:90:a4:93:ba:cc:3e:
e4:d7:ff:50:52:8f:09:21:0b:b4:c0:cb:06:cc:e6:90:98:db:
bc:00:25:00:71:3b:b8:de:47:3f:77:e4:ce:63:ba:f0:4b:06:
58:0e:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:47 2025 by rpki-client