
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
File: VUrbcrguz6_FcF4l_ryrXILXbuY.cer (raw, json)
Hash identifier: IES5AiOnyH/FxsCAAOoocVyyJsbkBmOEJarMEA+ULGM=
Subject key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B2A9653CA71E0D010AB0EDE74B1AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16210
AS: 16297
AS: 200542
IP: 185.100.236.0/22
IP: 217.18.96.0/19
IP: 217.118.0.0/20
IP: 2001:8d0::/29
IP: 2a00:aa20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2a:96:53:ca:71:e0:d0:10:ab:0e:de:74:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:4d:cf:37:26:de:22:09:46:9f:b7:93:b5:
03:1a:a2:d6:fc:0f:cd:6a:96:e3:12:0d:ad:c6:0c:
4c:f3:39:7e:4a:a7:ff:b5:75:2d:8a:4f:b2:5b:95:
1b:77:01:07:d6:81:8c:5a:d6:bb:9e:00:67:fa:c1:
95:7f:1e:c3:5d:cb:90:28:f3:51:70:83:6a:c2:b5:
7c:01:f5:5d:84:07:1c:91:d1:68:e7:86:09:eb:85:
e7:1e:aa:02:44:1b:92:bd:a8:cf:8d:70:0b:60:da:
26:32:61:2c:23:07:eb:94:18:52:a8:4b:00:0b:83:
e0:3c:3a:5f:83:53:2e:75:03:53:7a:3d:96:a0:e9:
4d:5b:9f:83:88:ed:84:1d:3b:f6:f0:16:5e:3f:94:
d8:17:fb:69:dd:bb:1d:50:fe:ff:5a:bc:7b:0f:05:
a0:77:8e:29:44:c0:59:63:70:85:64:b1:00:98:2c:
c3:bc:e3:5a:12:fb:52:d2:57:1b:2b:14:f8:79:c8:
2f:29:80:e0:9d:58:92:69:71:35:ab:95:96:57:61:
ef:b8:9c:c0:63:1d:2c:ef:25:9a:89:86:10:d9:b9:
91:ee:91:19:f5:46:fc:54:36:bf:63:88:7b:e3:15:
2f:29:d4:cc:95:21:7c:3c:87:d5:37:ee:39:2d:dd:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.236.0/22
217.18.96.0/19
217.118.0.0/20
IPv6:
2001:8d0::/29
2a00:aa20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16210
16297
200542
Signature Algorithm: sha256WithRSAEncryption
5e:e6:da:68:e9:dd:15:9a:3d:45:f1:ac:c2:41:5a:86:3b:99:
ea:19:ca:da:93:e3:38:42:c5:ef:f9:26:f8:0a:76:52:51:dc:
2e:d0:67:3c:10:4f:c4:32:e6:ab:2e:50:3d:55:5e:27:32:b3:
a1:7c:2b:e6:2d:d6:d3:ec:1d:3e:54:0e:dc:05:63:f0:32:60:
a5:4c:a8:7e:65:17:82:2e:a8:2c:25:f4:f8:a9:28:7d:f3:de:
ca:f4:33:b9:83:52:cd:27:6a:8a:96:8c:e0:8a:6c:2e:9d:73:
7a:0c:33:7f:5b:b6:0b:35:a3:71:48:15:ab:b1:cd:67:8c:de:
6a:53:3f:05:af:bd:a4:8b:b8:db:14:30:7c:42:b9:81:4c:51:
04:5a:66:d1:f0:6b:b0:45:bc:33:01:63:7a:6e:98:5d:7b:e6:
25:8f:82:79:91:dd:14:86:6f:d1:95:1e:4d:22:83:df:89:1b:
38:93:2e:7b:cc:ca:43:56:d6:10:9d:a6:10:ed:c0:44:06:af:
70:07:10:f7:b0:02:38:6b:36:d1:5c:25:74:73:60:95:6c:a6:
bb:50:4b:8c:ba:e6:5d:ac:89:52:71:ab:8e:55:47:ce:42:da:
44:e5:d6:7e:94:62:fb:58:d0:b9:67:6d:73:88:6e:ea:34:64:
91:10:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:56 2025 by rpki-client