Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
File: YEEHLuGhscBoQS37A1XSdZkyxfU.cer (raw, json)
Hash identifier: CXQMWerpdGiaysZGnLXSGs9P++6M8179AwJHOKxnd5Q=
Subject key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C0D5DE34C619C6C15808F240C49CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29302
IP: 5.63.144.0/21
IP: 37.130.224.0/21
IP: 146.185.16.0/20
IP: 185.2.136.0/22
IP: 2a01:5a80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0d:5d:e3:4c:61:9c:6c:15:80:8f:24:0c:49:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:77:78:bb:86:f5:52:39:3d:9a:02:c4:d5:
5c:51:f1:80:0c:61:56:90:5b:0e:73:37:5d:dd:1d:
e3:fa:3d:36:f1:f5:5d:68:ff:9f:33:a1:ed:2f:a8:
ab:9d:58:0d:8b:9e:e6:e8:38:02:de:2c:d0:2e:dc:
e4:d5:a5:0f:c3:f9:20:67:d8:58:76:08:a6:c2:0d:
31:ad:f9:2f:05:17:47:a1:33:cd:1e:50:76:04:fd:
80:99:99:97:80:86:23:10:88:d8:15:02:67:54:c6:
d7:3e:8d:e1:3e:b6:51:ab:c7:d5:78:98:2b:3f:a3:
3a:b7:cc:a9:9d:f4:aa:20:71:2b:7a:06:df:bc:79:
28:21:6d:a3:51:78:b2:4f:d2:3d:6e:5c:a1:49:e3:
4d:c8:1f:ff:f4:90:a0:47:50:1c:be:9f:f9:72:be:
62:bd:25:97:bf:9a:69:ca:69:0b:88:6b:4f:44:6c:
64:6f:99:64:1e:b1:42:97:ae:69:1a:8e:48:a4:19:
32:b6:c4:da:9c:08:6d:6e:43:3d:c8:8c:29:bc:39:
83:b7:f4:bd:25:a4:50:a8:71:65:47:96:b9:7e:c4:
bd:93:64:a3:66:87:0a:54:9c:9e:14:f7:e9:40:e7:
cc:f1:af:3b:75:2a:b9:c8:62:6e:f6:2a:b3:1e:eb:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.144.0/21
37.130.224.0/21
146.185.16.0/20
185.2.136.0/22
IPv6:
2a01:5a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29302
Signature Algorithm: sha256WithRSAEncryption
58:7a:6e:4b:f1:a8:aa:4a:6b:55:3f:1c:60:d4:27:7a:30:00:
e5:6f:9b:39:2a:8e:d4:c9:21:21:99:8b:01:a4:1d:d7:aa:e9:
6b:65:8f:b3:37:63:3e:b6:0d:46:34:14:31:af:51:bc:4d:67:
81:5d:fa:f6:2b:30:e7:f6:71:cd:31:42:4f:03:41:55:11:85:
fd:3b:09:a5:05:26:b2:c3:ed:3a:38:5f:d6:25:ab:4d:20:cc:
a1:bb:97:d6:03:75:f5:bb:73:cc:bb:05:a9:b5:39:f7:eb:db:
8b:70:24:b2:64:42:03:a3:99:8f:e6:f3:58:0a:34:b5:73:f1:
93:c7:a8:5e:45:6a:95:cd:38:70:01:aa:82:d2:90:19:50:8d:
4e:e8:92:33:92:3b:2a:73:f6:fb:c2:48:60:da:5b:ec:c5:c6:
5a:e1:57:ac:11:8b:69:e0:ca:0f:95:83:d6:8f:c9:c2:da:0b:
eb:98:5e:c2:78:e8:48:da:af:7f:c7:ad:cc:31:e8:e7:d0:2d:
94:56:21:a9:27:5b:78:d7:61:12:15:fa:dc:af:03:ae:3b:d1:
2a:f8:73:1b:7e:89:7c:ed:7d:27:9e:d9:32:90:b8:9b:03:3d:
a5:ca:f2:19:5f:75:9c:14:43:d8:4b:1f:46:e1:e2:64:25:99:
20:ac:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:45 2025 by rpki-client