Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer (raw, json)
Hash identifier: flYbvu9O2U8LzqLcbw9dZ5hh4J0BkVH/nFNLB9ZBdTU=
Subject key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7371ECE21635E7DA92226BC8EAE67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207876
IP: 192.109.210.0/24
IP: 192.109.217.0/24
IP: 192.109.219.0 -- 192.109.220.255
IP: 2a0a:7480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:1e:ce:21:63:5e:7d:a9:22:26:bc:8e:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:9d:6d:9f:60:2c:28:47:8f:d7:27:7a:d7:
1f:18:67:05:70:29:64:3a:a5:51:47:e7:0e:d0:05:
2c:2d:f0:6e:fe:5e:03:c4:be:31:28:ec:7b:25:6c:
7c:48:cb:e5:a9:f0:55:4b:56:2e:7f:1e:88:1c:f3:
bd:9b:1f:18:5c:e7:21:4c:a8:96:f0:6b:1e:9d:58:
69:e3:b8:e1:ac:6d:50:fc:c2:ee:57:f3:0c:6a:e0:
63:f7:14:09:a0:20:0b:38:90:55:ae:d5:e5:8f:69:
b4:bc:4f:be:95:95:57:cf:7d:db:2e:96:e0:46:d1:
21:72:10:8d:3b:c0:62:73:41:9c:3e:63:9c:f6:f2:
da:b5:99:5e:94:0a:7f:f1:04:9e:c1:41:46:0b:0a:
bb:8d:51:57:d7:0e:5d:f8:cf:6f:8e:dd:71:b5:cc:
69:aa:d7:7d:45:bd:4b:19:4b:83:85:40:06:18:48:
f0:5e:e9:83:13:1d:d4:ad:f9:21:c9:02:81:c5:63:
1d:ef:0a:17:c2:88:1a:19:27:2d:89:83:e9:e1:c0:
55:92:11:ce:62:f4:20:da:d5:dc:48:29:0d:d4:fe:
b0:35:b8:12:6b:9c:3b:b1:a0:e4:de:50:30:47:23:
6c:88:f2:d6:11:73:11:4f:28:75:62:5b:b5:8b:ba:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.210.0/24
192.109.217.0/24
192.109.219.0-192.109.220.255
IPv6:
2a0a:7480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207876
Signature Algorithm: sha256WithRSAEncryption
ab:cb:59:d0:70:87:3a:a2:61:77:18:51:62:83:7f:07:73:55:
86:d8:b9:eb:40:58:b2:0a:a8:0e:c0:bd:0d:92:0a:77:50:9c:
75:29:f9:2b:aa:a3:ee:a5:a6:d0:0d:8d:2d:f6:de:7e:93:06:
1e:20:dd:81:e4:98:14:8c:a3:55:c1:36:57:e4:13:0f:1a:83:
69:b3:81:20:e6:cf:c4:3c:83:b2:2a:b6:67:61:c9:1c:88:d0:
f0:2b:77:06:ee:57:67:e7:4f:83:95:7c:a1:6a:f1:01:57:7e:
25:99:6b:c7:2b:15:18:ac:61:64:ad:7a:0d:de:7e:c6:97:ad:
db:1e:1f:6b:d0:99:e6:a1:1a:70:2c:ae:5b:d6:d0:9a:eb:cd:
0d:3b:23:83:b4:ed:06:a5:1d:3b:82:69:c2:23:3b:5c:d6:67:
3f:d7:37:58:86:da:f4:3b:17:d4:aa:5f:60:2d:84:d3:bb:54:
60:2f:12:ed:e7:5b:17:6f:cb:b4:67:ca:24:85:78:d8:09:38:
29:36:d8:41:58:d2:0c:d3:24:c1:7c:6c:71:33:d1:bf:60:25:
a7:90:37:9a:a1:80:f8:94:1f:84:24:4f:02:c4:d9:e7:95:ce:
3a:67:e8:50:29:bf:af:f1:ac:e2:8f:34:0d:da:ca:65:67:47:
f8:14:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:53 2025 by rpki-client