Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
File: UCcYumg5OXxsV-ztbVCVcers7d8.cer (raw, json)
Hash identifier: YbekzcHrCrAFrV3oKvw3PPDn0lZmJeudHko3gPLg/h8=
Subject key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9BE06E5A10F137443513B604BACD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206132
IP: 185.195.164.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:be:06:e5:a1:0f:13:74:43:51:3b:60:4b:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=502718ba6839397c6c57eced6d509571eaeceddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:7a:39:a6:8a:8b:c8:79:39:d9:ac:14:3c:
99:5d:be:51:67:a7:92:b4:8c:b1:a5:54:76:f3:00:
1e:ae:8a:6c:e3:0d:42:19:d3:6a:84:8b:5d:d5:ee:
64:fc:3c:91:df:a7:d6:83:d5:35:2b:e6:37:a2:5d:
96:cd:b5:f4:aa:b3:54:f1:ab:36:c3:01:13:0a:f1:
1b:1d:78:7b:38:7f:32:d4:b8:29:c1:31:09:b0:cb:
2e:48:ff:d3:7a:22:30:86:58:33:c5:5b:ee:89:00:
cc:fc:f1:8f:0d:fd:4a:c4:6c:6f:93:45:f7:d4:0b:
ea:72:8a:4b:ee:dd:69:6f:86:a2:84:6a:43:fc:44:
b5:7f:7e:54:a6:36:08:ee:73:6b:1b:a8:f3:bb:13:
2e:3b:18:e9:b2:9e:bd:52:dd:31:4a:68:27:26:db:
f9:26:f7:0c:b1:5a:ab:60:72:20:39:d1:42:6b:94:
05:dd:01:a7:0d:18:58:4a:17:a6:8b:d5:47:c7:af:
0a:96:59:8c:cb:d8:fd:0f:17:0b:34:f9:20:c7:a0:
84:4e:53:ab:45:6f:6f:c1:09:cb:e0:2f:09:ba:af:
c0:c9:bd:65:a9:b9:86:73:09:53:a7:75:1a:a9:45:
44:22:28:c6:69:0e:98:7a:36:6e:e0:46:d8:c4:e2:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206132
Signature Algorithm: sha256WithRSAEncryption
7c:89:d2:9a:e9:aa:fa:19:22:11:96:65:a5:75:97:62:f1:f0:
61:c6:34:bf:bf:93:22:af:b7:3f:a3:8e:52:df:bc:84:8d:38:
d2:d3:17:47:c0:b1:5f:46:ab:98:b8:bf:95:9a:55:c3:17:2b:
68:97:4c:03:43:bd:c2:24:bd:1e:00:26:f3:86:f0:dc:89:80:
5c:5b:96:15:d2:f0:45:47:e1:17:e4:fe:97:e0:c4:4d:99:e4:
68:63:bc:d7:a1:16:34:f4:51:f0:34:1e:01:6c:83:34:a9:d8:
c2:8d:88:ee:85:d2:48:70:03:10:4a:3e:29:91:6b:33:dc:aa:
29:21:1e:df:7b:75:6a:34:90:2b:43:b2:9f:e3:c0:29:1d:75:
dd:96:d8:fc:85:2b:4f:34:eb:d2:d4:4d:57:86:3b:1f:1b:71:
e2:4f:59:81:e8:35:ea:87:e4:3b:ad:38:6f:e9:d8:86:a6:1a:
33:43:18:15:33:7d:85:48:85:e9:b9:41:ff:d2:9b:c4:c6:f0:
5d:fc:8c:81:0f:58:ef:3e:38:76:49:87:34:a4:98:5d:e8:6c:
56:87:79:29:a2:ee:00:1b:e5:a1:ab:e1:5f:49:a0:ff:25:f0:
a7:63:b8:b7:6e:57:c8:29:7a:e9:d4:72:79:82:90:d7:23:cb:
69:10:7d:25
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2b4G5aEPE3RDUTtgS6zZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDI3MThiYTY4MzkzOTdjNmM1N2VjZWQ2ZDUwOTU3MWVhZWNlZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArux6OaaKi8h5OdmsFDyZXb5RZ6eS
tIyxpVR28wAerops4w1CGdNqhItd1e5k/DyR36fWg9U1K+Y3ol2WzbX0qrNU8as2
wwETCvEbHXh7OH8y1LgpwTEJsMsuSP/TeiIwhlgzxVvuiQDM/PGPDf1KxGxvk0X3
1AvqcopL7t1pb4aihGpD/ES1f35UpjYI7nNrG6jzuxMuOxjpsp69Ut0xSmgnJtv5
JvcMsVqrYHIgOdFCa5QF3QGnDRhYShemi9VHx68KllmMy9j9DxcLNPkgx6CETlOr
RW9vwQnL4C8Juq/Ayb1lqbmGcwlTp3UaqUVEIijGaQ6YejZu4EbYxOKYkwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFAnGLpoOTl8bFfs7W1QlXHq7O3fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzAwMDVi
Mi1kMjhiLTRiZjktOWJjZS1jZDgxZmM1ODBmNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMDAwNWIy
LWQyOGItNGJmOS05YmNlLWNkODFmYzU4MGY0Ny8xL1VDY1l1bWc1T1h4c1YtenRi
VkNWY2VyczdkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCucOkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMlNDANBgkqhkiG9w0BAQsFAAOCAQEAfInSmumq+hkiEZZlpXWXYvHwYcY0v7+T
Iq+3P6OOUt+8hI040tMXR8CxX0armLi/lZpVwxcraJdMA0O9wiS9HgAm84bw3ImA
XFuWFdLwRUfhF+T+l+DETZnkaGO816EWNPRR8DQeAWyDNKnYwo2I7oXSSHADEEo+
KZFrM9yqKSEe33t1ajSQK0Oyn+PAKR113ZbY/IUrTzTr0tRNV4Y7Hxtx4k9Zgeg1
6ofkO604b+nYhqYaM0MYFTN9hUiF6blB/9KbxMbwXfyMgQ9Y7z44dkmHNKSYXehs
Vod5KaLuABvloavhX0mg/yXwp2O4t25XyCl66dRyeYKQ1yPLaRB9JQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:17 2025 by rpki-client