Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
File: TVg7b1bPCSco3lk62VKuoZzjGIY.cer (raw, json)
Hash identifier: Vo1cRbrpKvv6pXysMSLd7aTs84F0Lq1mM1QQ74z8XeU=
Subject key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD7DB10EC8F5D8494E450DA4F475E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210298
IP: 37.9.184.0/21
IP: 88.214.12.0/22
IP: 95.156.197.0/24
IP: 95.156.200.0 -- 95.156.202.255
IP: 95.156.214.0/23
IP: 109.230.201.0 -- 109.230.202.255
IP: 185.119.32.0/22
IP: 2a02:2dc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7d:b1:0e:c8:f5:d8:49:4e:45:0d:a4:f4:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d583b6f56cf092728de593ad952aea19ce31886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:ab:c4:16:b4:19:e7:9b:d5:7d:b7:9a:74:
5b:00:1e:3d:70:7d:60:34:eb:b2:8f:41:e9:5d:f2:
15:9a:75:b0:f2:3f:db:25:e4:5b:54:30:d6:77:9d:
26:d6:8e:8f:6c:26:35:65:44:19:73:4e:e1:3b:95:
7f:a5:a4:17:35:a5:f0:d2:da:f5:bb:2f:33:67:a9:
44:e7:87:5b:7b:ae:8e:f2:0c:7c:74:3f:eb:b7:52:
4e:29:86:da:36:8c:f6:76:e9:02:d6:39:ba:6f:9c:
5e:e1:f2:0b:31:97:3a:04:d2:0b:30:18:67:98:c6:
88:41:aa:1f:fa:26:0d:12:24:f1:30:31:ef:72:99:
51:8c:8d:8f:86:db:59:a8:70:2f:77:7b:70:2e:d4:
7f:a6:01:3b:fc:80:62:32:d4:1f:13:a2:1e:f5:de:
cb:21:51:b1:d5:44:3d:ba:f0:f9:08:c1:e6:54:3e:
da:81:ec:3c:8b:23:67:12:dc:9e:1b:4b:3c:54:f2:
aa:c2:c5:c5:f6:7a:74:6f:f8:d8:3d:ba:95:ec:d8:
77:ba:3d:e4:3d:99:6c:c3:e2:2c:69:db:4d:c1:36:
91:67:dd:48:d3:91:b1:d9:42:09:a4:56:00:bf:47:
d8:5d:7a:fd:0b:af:73:2e:36:62:7d:34:69:d6:6f:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.184.0/21
88.214.12.0/22
95.156.197.0/24
95.156.200.0-95.156.202.255
95.156.214.0/23
109.230.201.0-109.230.202.255
185.119.32.0/22
IPv6:
2a02:2dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210298
Signature Algorithm: sha256WithRSAEncryption
35:38:f6:4f:4e:6c:54:be:5e:f4:98:bc:06:68:fd:5d:18:9b:
86:71:32:43:69:92:46:53:f9:2b:6f:b6:da:81:ff:99:f6:dc:
bd:3b:1b:92:a4:eb:eb:8f:bb:ca:d3:f0:43:98:4b:59:0b:45:
0f:96:a1:7d:77:f7:be:36:6b:67:f3:8a:a5:15:21:ee:ed:c1:
8d:94:27:87:15:29:45:b1:8a:aa:dc:76:e4:d6:97:32:53:4e:
1c:c2:84:36:ca:20:ae:de:7e:68:e4:d7:6d:81:b7:f0:50:01:
c7:2f:8a:f7:45:ee:3d:1d:9c:ce:b8:04:1f:e5:f7:e6:1e:4e:
97:11:8b:6f:b8:ae:56:64:62:e7:85:40:fd:71:40:03:81:d5:
4d:9e:e0:1b:54:27:fc:dc:17:76:97:7a:71:8e:4c:74:45:53:
f3:75:4b:ec:e0:28:66:60:9c:d9:70:98:1a:9d:30:b8:91:2b:
b5:3d:8f:29:b5:a7:76:cc:ed:93:e2:bb:ad:95:3a:be:19:36:
3e:1e:80:d1:3f:e8:f5:27:2f:cd:cf:dc:8c:30:25:9d:79:bd:
51:35:8a:18:a3:d6:a0:e9:6c:7b:7a:62:e5:da:fc:52:4a:a3:
8c:1e:43:60:f4:4e:a9:6c:6f:21:93:0c:7b:6d:d5:80:5b:9b:
fd:f7:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:54 2025 by rpki-client