Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
File: VEBNpgLasGJb5yI9CTILHNeq_O0.cer (raw, json)
Hash identifier: RgWpBi1vXRH0cwHJiHlrBXB5dM63bJa95v1bJ59QuGY=
Subject key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144636BCDBE4B8DAB6631A67E3813A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205247
IP: 45.152.76.0/22
IP: 185.224.108.0/22
IP: 2a0d:1400::/30
IP: 2a0f:4b00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:63:6b:cd:be:4b:8d:ab:66:31:a6:7e:38:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54404da602dab0625be7223d09320b1cd7aafced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:6f:ed:89:f6:52:55:dc:ee:26:b4:fb:8d:
ce:20:f3:c3:e1:fd:a2:6f:41:38:23:59:ba:69:37:
59:b1:3a:47:46:96:82:7f:54:58:cd:08:30:33:5f:
e5:ec:91:dd:fc:df:e5:e1:c3:0a:87:59:08:b8:4a:
b0:b1:f7:68:1e:4f:1b:85:64:a5:15:d8:e6:33:80:
fc:e7:b1:39:f2:f8:ec:db:a4:c9:67:fd:77:7a:bb:
42:be:5b:8b:3c:fd:53:1b:d1:c1:8c:27:24:1b:92:
61:df:42:bd:1c:08:7f:d7:c6:97:0f:e2:25:ef:d1:
21:c3:b6:77:8a:2a:59:20:c4:b8:6c:2e:fe:44:4d:
cc:09:99:12:ff:5c:f6:42:79:5e:e4:75:2a:af:bd:
96:78:45:b7:e7:a3:2c:65:6f:fb:ed:ca:10:7f:0d:
6a:b8:29:f5:04:9b:34:27:ff:e8:61:94:5b:af:a8:
a6:5c:c2:89:ea:90:ce:e5:78:f2:56:1f:34:e0:ac:
8e:10:79:bb:77:dc:97:db:c5:ca:85:2c:90:9f:34:
5a:0b:cf:23:8b:29:be:92:a4:19:5d:18:6f:2e:14:
dd:79:04:11:89:3a:21:25:20:94:5c:a1:cc:78:91:
db:16:f5:3a:2b:de:52:0f:cb:da:de:be:fa:de:1a:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.76.0/22
185.224.108.0/22
IPv6:
2a0d:1400::/30
2a0f:4b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205247
Signature Algorithm: sha256WithRSAEncryption
89:a3:17:c2:92:6c:0d:5c:c8:6e:75:ef:c3:60:18:43:92:99:
51:63:4f:05:25:ef:d7:fa:7f:b9:41:51:d0:3b:a2:83:d1:a6:
8d:8f:59:00:ad:4d:8c:a3:32:6d:20:28:1d:17:20:76:c1:64:
9c:4b:6a:2f:1b:cb:0b:e2:0f:33:33:34:df:cb:78:cd:ca:01:
0b:ad:41:ac:a8:b0:b2:4e:f6:66:e9:ec:b1:11:f9:47:5a:71:
fd:4c:ee:80:9e:b2:88:96:03:10:fc:8d:1b:6b:42:a0:7a:5a:
5b:c6:2e:0f:a9:18:6f:83:9a:b2:3c:6d:f8:84:9f:80:f3:3b:
d5:6a:64:dc:48:13:06:8b:d6:90:b5:8e:43:3c:db:2a:c6:0b:
6d:2a:68:dc:ea:2f:7e:07:3d:73:39:91:0c:39:74:2d:2c:d8:
fe:9b:8e:71:50:11:a6:42:5b:b1:03:7f:48:91:83:1d:0e:2e:
67:35:37:0b:4e:cd:95:98:85:eb:51:03:5c:b1:76:e4:4a:4c:
67:fc:a8:58:16:b9:02:37:cf:a6:91:67:8b:9c:1f:20:70:19:
bd:44:4d:0c:97:44:1d:21:8e:7e:f1:63:8c:e7:0c:54:40:6e:
4c:29:87:0c:30:60:6d:3a:7d:57:b5:11:ec:22:e3:10:17:a3:
9f:d1:42:1c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQhRGNrzb5LjatmMaZ+OBOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQwNGRhNjAyZGFiMDYyNWJlNzIyM2QwOTMyMGIxY2Q3YWFmY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphv7Yn2UlXc7ia0+43OIPPD4f2i
b0E4I1m6aTdZsTpHRpaCf1RYzQgwM1/l7JHd/N/l4cMKh1kIuEqwsfdoHk8bhWSl
FdjmM4D857E58vjs26TJZ/13ertCvluLPP1TG9HBjCckG5Jh30K9HAh/18aXD+Il
79Ehw7Z3iipZIMS4bC7+RE3MCZkS/1z2Qnle5HUqr72WeEW356MsZW/77coQfw1q
uCn1BJs0J//oYZRbr6imXMKJ6pDO5XjyVh804KyOEHm7d9yX28XKhSyQnzRaC88j
iym+kqQZXRhvLhTdeQQRiTohJSCUXKHMeJHbFvU6K95SD8va3r763ho2rQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFFRATaYC2rBiW+ciPQkyCxzXqvztMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzdkMmNi
NS1iZGRmLTQyMDEtYmFmOC0xYjI0NDg0ZTU1ZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvN2QyY2I1
LWJkZGYtNDIwMS1iYWY4LTFiMjQ0ODRlNTVlYy8xL1ZFQk5wZ0xhc0dKYjV5STlD
VElMSE5lcV9PMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCLZhMAwQCueBsMBQEAgACMA4DBQIqDRQAAwUD
Kg9LADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIb8wDQYJKoZIhvcNAQELBQAD
ggEBAImjF8KSbA1cyG5178NgGEOSmVFjTwUl79f6f7lBUdA7ooPRpo2PWQCtTYyj
Mm0gKB0XIHbBZJxLai8bywviDzMzNN/LeM3KAQutQayosLJO9mbp7LER+Udacf1M
7oCesoiWAxD8jRtrQqB6WlvGLg+pGG+DmrI8bfiEn4DzO9VqZNxIEwaL1pC1jkM8
2yrGC20qaNzqL34HPXM5kQw5dC0s2P6bjnFQEaZCW7EDf0iRgx0OLmc1NwtOzZWY
hetRA1yxduRKTGf8qFgWuQI3z6aRZ4ucHyBwGb1ETQyXRB0hjn7xY4znDFRAbkwp
hwwwYG06fVe1Eewi4xAXo5/RQhw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:57 2025 by rpki-client