Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
File: WVt4mYk7niSL5hVd9EX2MK5daHI.cer (raw, json)
Hash identifier: DkKN/9Fj3fFvoWEDQAVdeuJZbpPH3yPuUW0Bza6FRME=
Subject key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B3BA130428DFCE0487824E3E91ED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21369
IP: 157.203.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3b:a1:30:42:8d:fc:e0:48:78:24:e3:e9:1e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595b7899893b9e248be6155df445f630ae5d6872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:10:4d:97:b7:b0:36:26:ba:79:21:fc:95:
d6:05:74:4e:0d:4a:a1:7f:01:f8:2b:2c:1d:9b:a8:
66:69:58:47:18:f6:89:82:d3:bc:5a:b5:b1:ac:2e:
5a:34:b0:a8:3e:50:81:65:95:9c:14:97:41:50:ba:
e2:62:1f:c4:8b:98:19:bb:59:36:bf:c8:cb:de:ab:
11:b2:10:8b:eb:b8:37:3a:e2:6a:cd:ec:72:ef:f7:
30:41:87:23:59:69:df:47:c7:b8:f6:43:dc:6d:b4:
47:46:c9:ee:ca:98:bf:18:bb:fd:f1:76:10:52:08:
44:e9:61:ad:db:99:83:aa:56:e2:71:23:ca:b0:53:
f2:78:a6:1e:6e:44:73:b8:2c:93:77:ef:08:af:7f:
75:70:7a:96:ff:8e:7d:6d:9a:b5:de:48:6a:91:22:
82:46:9d:76:49:8a:40:70:ed:c9:4c:e9:ac:d8:c6:
80:0f:11:d0:6a:42:7b:7f:50:e0:f9:55:d3:b0:02:
ec:6f:3c:00:ef:2f:0a:59:54:d6:35:0d:d8:55:03:
c1:6b:7f:f8:a0:ab:1f:b5:00:74:81:f4:66:3b:01:
24:cf:a9:0a:a3:e0:14:1b:79:c6:7b:9a:4b:95:4b:
97:fd:8b:8c:ec:a4:1c:0b:aa:7e:cc:3e:43:58:11:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.203.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21369
Signature Algorithm: sha256WithRSAEncryption
6b:d8:6e:fd:f0:67:0c:a5:08:c5:37:61:14:ba:bf:7e:c3:05:
7f:50:21:62:66:2b:0f:63:2a:d2:72:34:55:11:6a:e6:09:89:
e5:16:95:2a:d1:a5:f2:e8:4a:63:1d:b5:6a:41:d6:54:69:20:
e1:47:76:bf:11:be:17:d4:84:1e:ad:1a:7b:21:a1:af:30:78:
eb:e9:e1:10:dc:67:ac:de:14:5b:5d:f7:99:a2:93:da:2e:4c:
84:8a:34:8a:09:2c:89:3a:8c:ae:ca:23:a3:f6:0c:5d:01:eb:
b0:0d:c9:ac:e2:82:9b:0a:30:7b:49:a7:b5:45:db:2b:c8:a1:
93:22:bb:c8:ee:c9:98:05:09:78:1e:b1:92:02:f0:bd:fb:a7:
51:aa:2b:e9:b4:1e:01:cd:9d:dc:df:f3:d9:b6:0c:87:82:d2:
cf:25:ef:69:8c:ff:72:96:69:f3:cd:3b:ab:e1:1c:18:00:3d:
23:51:dc:3e:c1:b8:c8:9e:1d:28:6c:82:6f:7d:da:78:09:0e:
0a:21:a6:3a:f1:5e:75:47:b6:aa:a1:3c:f2:11:ea:e8:65:bf:
15:3c:c7:14:bc:fc:9b:78:b9:29:ee:f6:39:a1:ea:18:45:b8:
78:fa:96:a5:a7:f4:38:ef:cc:45:f7:14:85:3b:c5:f4:9a:f3:
65:73:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:41 2025 by rpki-client