Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
File: YAG5U8a-H5GDHWilwBFcIODNf5o.cer (raw, json)
Hash identifier: zjS/AcajgstQ7Um8JFerVVKay36WsslEoxXmkm4PKE8=
Subject key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EA0B5112DE6E2B35C8C63047AFF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42220
IP: 185.214.176.0/22
IP: 217.18.160.0/20
IP: 2a03:9520::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ea:0b:51:12:de:6e:2b:35:c8:c6:30:47:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:b8:fa:4e:83:74:96:0c:36:07:ce:55:28:
fb:b5:5f:86:4a:a1:99:54:1d:45:27:65:98:ef:42:
d7:ac:45:3b:3d:9e:5d:ce:af:e8:58:a6:c9:b6:f1:
f6:dc:6f:55:b0:df:2f:e7:c8:c7:08:30:5c:d1:e2:
ec:f5:80:2a:a6:da:96:5d:d6:6f:04:08:ad:88:89:
0d:fd:85:13:99:b1:2a:d6:02:20:03:c2:17:2a:cb:
ea:a2:8a:4b:88:28:6a:35:60:bc:6d:d6:d6:8b:83:
2f:9a:53:3a:6f:18:1f:17:78:14:3b:0a:7c:f6:d1:
e3:58:ef:76:5b:e8:27:b1:9b:65:bd:95:cb:be:1e:
bb:43:25:aa:2e:69:4b:fe:7a:df:a9:4f:fc:e9:9f:
27:5b:9e:d0:bb:34:4c:b1:66:d1:79:3d:71:18:5e:
20:16:2a:94:a7:e5:f0:c7:44:66:11:c3:5b:22:a2:
a7:c0:e5:00:f8:78:dc:11:ca:bf:55:e3:b4:33:f3:
de:81:32:fc:14:36:02:3b:dc:47:f6:10:ed:98:23:
06:54:5c:35:1d:99:49:78:54:f9:72:b7:67:b9:fa:
68:bc:70:b6:c5:fc:8f:95:c4:ce:5f:bd:69:dc:93:
58:d3:4e:64:a5:48:f1:24:5a:26:71:64:a2:17:1d:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.176.0/22
217.18.160.0/20
IPv6:
2a03:9520::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42220
Signature Algorithm: sha256WithRSAEncryption
9c:a3:3b:a9:50:bb:01:4a:6c:30:b5:95:39:9c:9f:ea:76:ff:
7c:d0:d0:f6:ff:b2:8d:f4:08:49:ed:fe:4b:1b:e1:ef:1e:d6:
41:5c:c3:28:41:29:36:cb:94:16:4e:dc:7d:dd:f6:66:12:de:
6d:81:85:7a:4e:ec:7a:a8:44:9d:09:53:8f:1d:20:6e:51:ea:
be:52:0d:f4:8f:fe:90:6a:fb:f8:21:f0:7c:83:a7:6a:38:76:
8d:e6:65:af:c4:2d:0a:7a:ce:5c:62:64:2d:e1:c9:21:2b:fb:
fe:b7:67:df:71:14:66:50:24:47:a8:37:78:87:04:15:9b:81:
a5:e0:2c:3c:ff:4b:01:72:a7:92:46:6d:51:06:03:60:35:db:
05:c0:68:aa:92:f9:40:1f:e7:b4:4a:a8:cb:4f:34:20:ae:da:
77:bc:60:46:f6:a2:6c:4c:eb:a2:00:cf:7e:73:39:0b:07:08:
80:f6:48:6a:9e:3d:44:0a:3b:92:a2:b6:cf:72:fb:61:25:c6:
d3:34:7b:b7:ed:a5:75:19:0f:7b:74:3f:92:bd:49:e1:fb:9d:
1a:d0:b3:02:a5:68:6d:c4:08:a3:15:03:19:19:48:3f:57:c9:
78:06:0c:2b:50:ca:be:f3:3e:a1:91:74:fa:4f:5d:1c:62:c0:
c6:13:85:02
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQks+oLURLebis1yMYwR6/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDAxYjk1M2M2YmUxZjkxODMxZDY4YTVjMDExNWMyMGUwY2Q3ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJa4+k6DdJYMNgfOVSj7tV+GSqGZ
VB1FJ2WY70LXrEU7PZ5dzq/oWKbJtvH23G9VsN8v58jHCDBc0eLs9YAqptqWXdZv
BAitiIkN/YUTmbEq1gIgA8IXKsvqoopLiChqNWC8bdbWi4MvmlM6bxgfF3gUOwp8
9tHjWO92W+gnsZtlvZXLvh67QyWqLmlL/nrfqU/86Z8nW57QuzRMsWbReT1xGF4g
FiqUp+Xwx0RmEcNbIqKnwOUA+HjcEcq/VeO0M/PegTL8FDYCO9xH9hDtmCMGVFw1
HZlJeFT5crdnufpovHC2xfyPlcTOX71p3JNY005kpUjxJFomcWSiFx1ClQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFGABuVPGvh+Rgx1opcARXCDgzX+aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzIxM2Jl
Ni1lY2I5LTQzMDAtODM0Ni1hNjQ3Njc1ZjQ2YjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMjEzYmU2
LWVjYjktNDMwMC04MzQ2LWE2NDc2NzVmNDZiNi8xL1lBRzVVOGEtSDVHREhXaWx3
QkZjSU9ETmY1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCudawAwQE2RKgMA0EAgACMAcDBQAqA5UgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCk7DANBgkqhkiG9w0BAQsFAAOCAQEAnKM7
qVC7AUpsMLWVOZyf6nb/fNDQ9v+yjfQISe3+Sxvh7x7WQVzDKEEpNsuUFk7cfd32
ZhLebYGFek7seqhEnQlTjx0gblHqvlIN9I/+kGr7+CHwfIOnajh2jeZlr8QtCnrO
XGJkLeHJISv7/rdn33EUZlAkR6g3eIcEFZuBpeAsPP9LAXKnkkZtUQYDYDXbBcBo
qpL5QB/ntEqoy080IK7ad7xgRvaibEzrogDPfnM5CwcIgPZIap49RAo7kqK2z3L7
YSXG0zR7t+2ldRkPe3Q/kr1J4fudGtCzAqVobcQIoxUDGRlIP1fJeAYMK1DKvvM+
oZF0+k9dHGLAxhOFAg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:35 2025 by rpki-client