Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.cer (raw, json)
Hash identifier: VE1/JhwdvR6vSy9l/vOfPKeMM7xXkgA2iGQQrS4r5Vs=
Subject key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD032032C1EBF3BA91141FCB08A98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25222
IP: 78.40.64.0/21
IP: 89.207.112.0/21
IP: 92.43.8.0/21
IP: 109.232.8.0/21
IP: 185.151.232.0/22
IP: 185.233.60.0/22
IP: 212.165.64.0/18
IP: 2a03:1c80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:32:03:2c:1e:bf:3b:a9:11:41:fc:b0:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:3b:9b:78:0b:d5:4a:54:14:96:70:b4:d3:
e5:ad:89:8d:dc:bb:0d:42:40:62:25:4c:49:33:31:
b3:e7:fe:f6:f7:8b:c9:94:25:88:79:c4:1b:f0:13:
a6:51:c9:c3:46:ee:66:8b:d6:f3:5e:6d:b0:98:b0:
6f:64:fe:57:42:bd:3e:df:66:7b:a9:07:af:69:a3:
48:9c:75:7e:3a:50:2e:a6:dc:70:88:b1:02:e1:9b:
cb:bb:cb:75:13:56:44:f6:ca:52:6f:5e:0e:a0:01:
a5:20:17:b4:10:7f:e4:b1:d6:fc:b3:b8:23:ae:ab:
8e:b3:9c:60:c4:5b:12:91:00:cb:9e:b7:12:80:55:
df:a6:48:9a:79:03:b3:44:7e:37:bb:a2:ae:c2:72:
e1:47:67:ef:c9:45:84:7c:86:ce:9f:ab:c7:7a:aa:
b7:be:a4:3c:27:7e:97:23:1b:26:56:84:c4:d0:8a:
fd:f1:99:08:d8:cf:ee:30:fd:ae:d9:20:08:4a:7c:
41:38:d5:ed:35:c8:0c:16:d8:55:b9:8a:40:74:08:
ea:3b:47:a5:87:da:d7:d1:f9:64:43:88:41:40:b5:
92:cf:51:98:7c:aa:d5:52:06:d9:6b:07:40:be:20:
56:22:89:96:b0:b8:80:0f:76:d4:8c:4a:0e:87:fe:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.64.0/21
89.207.112.0/21
92.43.8.0/21
109.232.8.0/21
185.151.232.0/22
185.233.60.0/22
212.165.64.0/18
IPv6:
2a03:1c80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25222
Signature Algorithm: sha256WithRSAEncryption
12:16:76:43:cb:6b:26:0b:d8:d9:fc:07:f2:e7:5c:ad:c5:45:
00:4c:f0:34:ac:11:c3:e3:06:09:bf:a2:f6:f1:44:e6:79:5d:
f4:f8:0a:0e:51:2a:57:6d:78:a6:65:10:4c:ed:fc:4c:d0:45:
a5:2f:4f:88:a0:d1:9f:49:01:13:3d:bd:4c:da:8d:8a:4a:82:
65:13:9b:53:0d:57:ec:a4:6f:56:31:e0:0b:b9:ed:48:33:69:
f6:29:bc:af:7a:89:3f:67:42:dc:96:78:c4:01:f7:66:5b:37:
9f:79:a9:76:ef:be:1d:e8:80:64:13:a5:c4:50:ad:11:2b:6c:
8e:d1:74:86:cf:97:e7:59:2c:c0:33:16:7d:4e:d8:d9:7d:d3:
1b:d0:3d:9c:e2:ea:1e:2c:8c:7d:7f:76:af:4d:86:8d:d1:ba:
f6:1b:e0:7a:d9:33:aa:98:cf:a4:3a:d8:e8:35:29:16:79:21:
ab:9e:f6:0b:23:ea:87:de:bf:e9:b0:92:4a:2b:7c:5e:96:31:
b2:98:2d:c9:8d:da:21:8a:7e:48:6a:55:ed:e6:30:e3:39:61:
9b:9a:63:19:35:ad:9d:ea:79:18:94:3e:a3:51:f9:f9:dc:3e:
2f:cc:f1:7a:a2:90:90:6d:fc:5d:7f:0f:bb:f0:26:a6:8e:5d:
17:32:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:50 2025 by rpki-client