Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer (raw, json)
Hash identifier: XuK29JW5fcXa2vc9Dyjl38RZPL1Xg4zxYuqExNwCbkE=
Subject key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444A04F635AF174B049007A11789384
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47815
IP: 94.125.64.0/21
IP: 188.92.200.0/21
IP: 194.30.185.0/24
IP: 2a03:4080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a0:4f:63:5a:f1:74:b0:49:00:7a:11:78:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:c7:70:a1:0f:1d:16:65:ef:43:06:20:77:
c6:b0:c0:d8:4e:8a:23:d5:d1:cc:6f:bd:e4:dc:14:
e8:95:98:40:c9:0c:92:76:65:6a:9a:de:8c:ac:3b:
ea:fe:af:a8:db:bf:39:f3:d2:e8:de:3e:5d:61:c4:
0f:35:91:1a:84:0b:c3:77:e7:98:57:16:b8:81:6f:
06:78:54:ac:e1:15:35:c2:c0:94:85:ae:5a:62:81:
43:1d:53:01:a9:95:d8:28:8b:24:7c:f5:80:4c:bd:
74:6d:11:c0:a5:64:40:84:e1:c0:ca:83:ec:c9:79:
d5:be:f0:74:9f:5f:07:bc:fe:93:f0:44:91:a6:5e:
66:24:31:5d:50:dc:7a:28:4e:05:b1:59:8f:e5:92:
09:98:97:ff:79:23:01:fe:8d:77:6b:95:a2:ed:a1:
21:2a:3a:a8:8c:b7:1e:b1:b6:ea:e5:a0:13:b0:0b:
ce:fe:88:2b:64:4a:e1:a0:b0:a7:2d:df:89:b9:b0:
3c:52:b3:e0:53:fd:ab:af:2a:00:44:13:c8:74:e3:
1d:b8:5c:7d:3d:fc:d1:9f:a7:b2:22:f3:c8:31:8a:
a5:52:90:ad:fb:6a:70:3f:6a:06:bf:1a:13:72:f9:
5e:17:7b:d3:f7:9a:c6:be:8b:10:ee:27:ff:82:58:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.64.0/21
188.92.200.0/21
194.30.185.0/24
IPv6:
2a03:4080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47815
Signature Algorithm: sha256WithRSAEncryption
08:22:6d:0c:9a:f9:25:01:a5:31:61:3f:9b:9c:70:ac:ef:d3:
57:5a:5d:30:55:46:0e:6e:3a:ee:2c:eb:b8:00:f8:10:12:a8:
85:da:e3:a2:b8:e3:d1:30:16:2d:f7:18:7e:71:5e:4f:1d:09:
e2:6e:8d:e9:5a:b7:e5:6a:6d:9f:e7:42:8c:00:48:39:4b:68:
1f:33:99:71:82:7e:89:8f:f9:f1:dd:06:1d:b5:93:8b:6d:a0:
44:09:2e:c5:e0:09:7a:47:9a:38:69:bf:a6:c1:d9:b6:c4:b8:
f0:05:3e:95:26:7e:39:ae:58:0a:30:98:d6:52:dd:c4:09:6e:
95:c0:c4:04:3f:9a:51:1c:cf:c6:d9:cc:0c:cc:b2:2a:a9:4c:
d8:bc:5a:fd:ff:3c:81:40:1d:82:c3:21:65:d7:83:f1:5e:13:
f6:f1:84:82:17:32:3a:fd:08:ef:fe:0e:01:6e:1d:3b:9f:30:
84:06:c9:05:f6:48:ef:0c:50:8f:72:e7:6d:7c:a1:e7:4a:3a:
15:44:3a:5c:06:5c:40:af:0d:2d:0d:a8:a7:b3:43:5e:90:2c:
9b:5c:76:93:22:c2:24:e5:40:76:bd:15:fd:db:98:92:84:a5:
2c:82:ee:d0:0e:8f:6f:d2:c0:aa:d3:24:c5:bd:01:8e:8d:51:
38:28:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:58 2025 by rpki-client