Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
File: UvYp80zQg7xoBUBpscxe55cfi7s.cer (raw, json)
Hash identifier: b0NFBCeeRHuU/uMTvZt/cnKZoq/PN3oTG5fm/K4lHpo=
Subject key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5BFFFD01E7E9BCA9ECEAB394A2F2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200432
IP: 185.107.60.0/22
IP: 2a06:4340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bf:ff:d0:1e:7e:9b:ca:9e:ce:ab:39:4a:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:d7:19:8c:dd:b8:d7:81:d0:dd:86:e8:f8:
9c:78:da:98:88:9b:d2:34:f0:b3:42:04:bb:71:a7:
87:f9:ad:d7:e8:7b:34:bb:12:d6:4b:e5:5a:37:d1:
1f:c5:c4:c5:c4:aa:dc:8a:82:54:20:13:d3:3b:cd:
a8:c5:bc:d1:da:dd:28:96:2d:25:48:94:bd:58:0c:
07:e9:91:e6:f4:2d:a1:f5:36:58:33:51:03:f0:31:
99:fe:cc:85:7c:7a:c7:5f:2b:fe:9d:fb:0b:0c:90:
59:1b:36:bc:34:09:e1:61:07:e1:e1:e5:85:a3:19:
dc:19:d2:bb:70:5a:40:e1:6f:f2:64:04:17:bd:92:
34:70:ac:83:df:30:a7:22:7e:eb:c3:69:5e:f5:66:
db:21:92:0c:ca:67:fb:8d:03:07:9b:98:bb:1d:c7:
95:54:43:92:32:62:17:ad:88:b8:fc:03:a1:c9:6c:
3a:e6:99:fc:07:76:17:18:b2:e8:de:b2:bb:10:a2:
87:1b:2d:cf:52:6e:65:70:65:e1:f8:4a:f0:49:7e:
ab:2e:4f:b1:d4:b5:92:eb:61:0f:75:7a:a1:4e:59:
b0:7b:f1:71:e8:06:8a:22:e9:94:c9:a7:bc:bd:8f:
24:98:e1:5e:93:76:25:d3:b2:1a:f9:d2:f0:78:38:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
IPv6:
2a06:4340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200432
Signature Algorithm: sha256WithRSAEncryption
53:bc:66:55:48:65:7f:de:9e:91:e5:5c:a5:9a:8a:f3:54:38:
f8:73:ae:bf:e7:52:00:ca:cc:b7:be:34:45:5b:52:78:49:16:
da:8f:77:ca:e1:8c:5d:d8:ad:e1:db:0b:e5:76:e4:f8:e5:24:
25:05:cc:0d:12:01:24:13:3a:e6:5f:86:c3:7f:ce:6a:7f:fe:
4c:85:6f:a4:92:18:54:55:35:4b:11:9a:1d:5f:ae:73:8d:e3:
fe:6f:9e:d5:1d:36:ad:0b:e9:fa:d6:47:87:26:0f:12:96:f3:
0e:fe:75:b0:6f:be:c3:7b:df:ad:e3:de:72:b2:28:ea:76:a8:
77:7d:9a:1a:ce:00:99:73:20:cd:93:98:2a:8d:fa:86:97:cd:
32:8a:7d:44:29:6f:b2:62:91:3d:ad:54:49:ab:38:2a:f6:a6:
a7:0a:3b:18:37:22:2c:7c:32:92:3a:01:a5:4a:8e:df:b5:96:
f0:e2:ff:96:41:b2:3a:1d:87:af:06:9f:11:af:33:ad:d4:87:
af:d0:a4:c9:05:d4:a3:7d:ca:12:21:b1:b5:40:f6:46:d2:4b:
40:45:4a:b0:5c:6b:2b:98:1b:f3:e4:66:62:de:b6:d1:ca:ae:
ca:4d:51:8e:6e:ec:3d:57:90:60:66:61:07:ef:4c:09:f6:36:
f5:b9:9d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:44 2025 by rpki-client