Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.cer (raw, json)
Hash identifier: 4mD+Lol2CS+M1vAdHIZNjqwCE6KqU9GEveHRgHX8kNo=
Subject key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521D53784DEE6F1F55DC6093B56DD13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13238
AS: 44534
AS: 215109
IP: 5.45.192.0/18
IP: 5.255.192.0/18
IP: 37.9.64.0/18
IP: 37.140.128.0/18
IP: 51.250.128.0/17
IP: 77.88.0.0/18
IP: 84.252.160.0/19
IP: 87.250.224.0/19
IP: 89.169.192.0/18
IP: 90.156.176.0/20
IP: 92.255.112.0/20
IP: 93.158.128.0/18
IP: 95.108.128.0/17
IP: 141.8.128.0/18
IP: 178.154.128.0/18
IP: 185.32.186.0/23
IP: 213.180.192.0/19
IP: 2a02:6b8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d5:37:84:de:e6:f1:f5:5d:c6:09:3b:56:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:80:4b:79:e8:e3:ec:1e:a3:68:bf:9e:da:
9b:54:ba:aa:96:49:07:0e:37:74:86:63:8c:0c:0b:
26:0f:4b:00:c1:ee:b6:5c:1c:01:33:7d:80:54:10:
6f:aa:0e:a7:e6:6c:9b:2f:e7:f4:b7:a3:1b:2b:a2:
8f:47:56:97:2b:3e:be:b2:f5:94:ae:ef:bd:46:a5:
4d:1f:57:47:8a:8d:67:9c:17:d8:6e:5c:0c:18:5e:
c3:2b:c3:05:52:4b:6f:a5:5d:52:4b:33:21:4e:e0:
2a:5b:e2:27:c5:82:ec:a6:08:e4:b8:7c:52:f4:bc:
a3:b5:49:fd:a3:69:ab:db:11:dd:94:37:8a:1d:9e:
86:fc:5c:1c:0f:e1:f8:6b:c0:78:9e:1c:85:d4:51:
b1:8f:9e:3d:0a:05:bd:f8:73:6a:3a:e6:c9:df:95:
3a:fa:bc:0d:b9:33:31:58:a1:b6:49:7e:78:b1:48:
e2:a4:ed:53:24:40:fb:98:c8:30:dd:b4:39:a0:dc:
7a:97:76:58:f1:07:81:ce:23:52:1a:fe:e0:7c:fa:
a2:97:e1:fa:e5:68:ec:7d:4c:a5:a9:68:55:c6:10:
c0:e8:72:60:a6:b8:23:e6:fa:e8:24:a4:99:16:1e:
17:85:17:0f:36:7d:81:8e:1e:a5:db:0a:b6:20:85:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
51.250.128.0/17
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
89.169.192.0/18
90.156.176.0/20
92.255.112.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.186.0/23
213.180.192.0/19
IPv6:
2a02:6b8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13238
44534
215109
Signature Algorithm: sha256WithRSAEncryption
1f:a9:b7:ba:27:f9:be:15:d7:f1:d9:31:9a:30:f3:96:7f:ac:
23:17:d3:42:29:98:c6:76:f3:27:c6:e1:b4:11:c9:07:95:44:
ec:9f:1b:ba:9d:50:e7:46:53:4d:df:6c:ae:dd:6e:a6:05:eb:
da:58:ab:74:46:f6:95:68:f7:7d:48:cd:6a:9f:5b:52:cf:7a:
d6:87:b8:1e:ea:aa:fa:80:a5:f2:d2:41:90:29:d5:a6:65:66:
09:b9:cc:5f:80:9d:1a:ab:bb:eb:83:eb:4e:68:4b:1e:24:e2:
54:ed:fb:86:b3:ac:0b:fb:9d:cf:a3:a2:c6:9d:a0:d8:1f:3b:
f9:a2:1a:8c:90:25:67:99:3a:49:4b:99:fd:7a:f8:a2:8f:f9:
7e:16:21:7e:88:fe:91:82:65:ee:cd:83:52:56:20:1f:b7:bf:
f3:a7:73:9a:00:91:a4:3e:25:13:a3:43:b7:fc:f9:73:4b:60:
1b:af:92:03:e9:00:ba:58:f6:72:9f:08:28:04:b5:8f:a8:9e:
f7:f5:4a:2d:1f:d9:88:ef:54:02:a2:7d:61:d9:88:b4:c0:db:
58:25:9c:e9:fe:30:6f:d4:02:00:bd:7d:ef:92:92:be:09:25:
0b:68:8e:d9:8b:b4:ca:a2:02:5c:a0:3c:c2:48:28:12:4e:ad:
b7:3c:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:50 2025 by rpki-client