Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
File: rQYYvADZEaXV7r-cWJakG_KJjss.cer (raw, json)
Hash identifier: AvLcKvWRRDpEVmZlgFhEIb9vL3ay6qtUOaMM0KT3X2M=
Subject key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B26D2793D5C0E9827FB518A7A5DE2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199361
IP: 185.20.76.0/22
IP: 185.77.232.0/22
IP: 2a00:49e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:27:93:d5:c0:e9:82:7f:b5:18:a7:a5:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:80:d9:d8:fc:56:2f:be:fc:7d:b3:91:8a:
b7:8a:27:39:10:11:8d:a6:06:15:7c:63:15:a3:e0:
f9:19:46:62:ea:9e:29:70:e1:c8:30:12:1e:29:66:
1f:c1:bd:d1:68:b2:42:13:6b:36:92:48:fb:d0:d0:
02:b4:4c:5a:59:55:1b:1e:72:a0:82:84:b4:e3:7c:
c1:22:45:66:a5:18:fa:4d:ac:cb:f5:14:fd:11:54:
85:a3:b3:2e:f7:cd:a3:72:e6:56:03:43:74:42:fb:
c8:fb:ce:8b:1f:ae:f6:2a:a0:a1:7e:c2:4b:b8:43:
56:14:8b:e0:73:b3:ae:f7:56:1e:64:42:b4:e9:62:
89:0c:c9:76:a4:0a:29:71:9a:05:77:15:9c:35:42:
1f:11:9a:7b:02:f6:a7:dc:87:f6:03:f3:6a:bb:56:
e7:39:fc:40:58:b9:65:9d:ab:b9:17:50:91:6f:0d:
00:26:77:7c:fe:17:1d:3a:db:50:0c:35:be:53:d4:
56:92:96:e4:17:f9:cf:c3:95:5b:08:40:46:a8:89:
26:f9:d7:8b:20:c0:46:9f:94:a0:2e:9b:75:e4:d5:
44:59:a9:3d:55:a8:33:6c:92:2d:e7:d3:81:9e:8b:
1f:9d:db:ac:a1:80:2f:c3:e1:8b:f5:33:12:fa:d8:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.76.0/22
185.77.232.0/22
IPv6:
2a00:49e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199361
Signature Algorithm: sha256WithRSAEncryption
ae:d6:aa:0b:d6:32:09:42:7d:ac:62:a5:89:ec:51:ac:e0:b7:
c9:15:38:06:c9:51:b1:51:3d:92:24:8e:6a:d2:ed:27:cd:9e:
d5:1d:e7:4d:e7:8f:2e:2e:75:d1:f9:4c:9f:c0:a5:53:ec:48:
de:43:f0:cc:02:e1:27:51:32:65:25:10:df:ab:12:50:29:ff:
9d:01:dd:af:f4:b9:b8:64:95:f0:08:0a:29:63:3d:b8:d7:ba:
b3:25:00:1a:66:5d:37:f7:5b:66:97:4d:c1:d8:ab:85:5e:26:
20:4a:c1:81:c4:8d:37:cf:75:44:d8:c5:30:8d:6b:dc:e6:25:
cc:13:76:59:8d:18:9b:01:f7:71:a1:23:96:3a:8c:a5:61:73:
65:9b:c4:ae:2f:f6:c7:f7:b4:ff:db:b8:bb:ae:2d:74:0c:c4:
b0:15:e3:d5:f4:4d:b1:27:1e:dc:a3:8d:4b:e3:0b:35:53:66:
25:56:d9:f3:6a:1b:e9:65:53:dc:3a:c8:38:1c:40:57:a0:ed:
ef:16:a6:17:f1:ee:17:3e:df:88:e2:03:08:45:a0:21:c4:83:
21:64:2d:47:89:8b:a0:c2:7f:74:14:71:19:e3:d7:0f:5f:02:
7a:51:d8:4f:3b:08:1b:6a:15:e4:a1:0d:b8:43:2a:ba:75:9e:
25:dd:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:33 2025 by rpki-client