Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.cer (raw, json)
Hash identifier: LbjjZFn1Zp8PUTYUUXz7oueSBqCwRg2dUegEOhRoX38=
Subject key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D954BAA4B3A773D75FE2BBA74F7C8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205107
IP: 185.230.156.0/22
IP: 193.34.198.128/25
IP: 195.88.232.0/23
IP: 2001:678:570::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:54:ba:a4:b3:a7:73:d7:5f:e2:bb:a7:4f:7c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b921277f3e7954a4af5520a99042fb0893af804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:c3:f1:a3:fa:ad:1f:45:71:ec:84:66:d3:
17:18:2d:54:71:d1:2d:6d:3b:de:35:fc:91:81:7a:
bb:50:a9:0d:f3:3f:eb:1b:48:2e:17:17:f6:54:c7:
8c:18:04:fc:2d:98:27:20:ce:61:5e:c9:0e:50:4c:
2b:c5:54:6b:31:b3:35:8a:22:fb:2a:bc:83:1b:cd:
34:c0:60:db:b8:ba:95:32:47:35:83:2e:be:67:3c:
96:db:d1:f6:48:5d:98:1e:98:dc:de:3a:79:0b:2e:
dd:c6:3d:7f:8d:79:59:d6:c5:47:56:17:a3:55:72:
49:2d:56:99:80:6f:dd:2d:c1:69:37:0b:b9:83:cb:
84:7b:20:ac:b1:d9:88:4a:b9:bf:26:a3:44:3e:da:
b2:f0:de:83:12:a0:80:a1:ed:44:11:27:ef:1a:c5:
b0:d7:69:bd:0b:07:0a:2e:dc:31:b5:e9:30:00:39:
4b:63:97:04:66:fc:2c:a6:91:3b:d1:cc:f3:3c:4c:
71:1a:51:d1:a0:48:c9:37:78:e2:bb:c9:3b:77:b8:
1f:70:b2:86:fb:d3:af:42:dd:f7:6c:84:fe:7e:2e:
08:07:b9:bd:12:50:00:37:c2:66:fa:06:b7:ea:e1:
c7:d8:92:01:30:28:11:2e:16:d6:34:ac:88:fb:5c:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.156.0/22
193.34.198.128/25
195.88.232.0/23
IPv6:
2001:678:570::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205107
Signature Algorithm: sha256WithRSAEncryption
2e:d4:b4:d1:2b:6b:50:32:5a:95:b6:e6:5e:7a:ea:32:d8:c7:
7f:88:5c:c0:e5:e8:a7:4f:84:bb:1d:b6:90:68:12:7a:54:be:
a5:a4:ed:61:a1:95:a2:e5:9d:98:b1:1d:82:40:3c:d5:05:56:
66:61:5a:0a:fd:c2:bf:51:8e:ce:31:3b:0b:e1:58:d3:2c:da:
a5:91:01:56:dc:69:5b:e8:4e:0f:48:ee:4b:55:0e:ff:09:8c:
1d:d2:19:58:e9:65:7c:fe:24:09:7a:9d:29:05:11:66:39:e2:
3e:44:2a:17:c2:6e:a6:07:8c:57:6c:0b:96:be:74:98:b4:e1:
fa:0c:bb:01:71:32:87:89:3c:01:8a:41:92:4b:af:45:84:5a:
9d:48:45:a4:bf:72:fb:47:ba:bc:d3:db:3b:89:30:d9:e4:3e:
9e:9a:a6:af:5b:92:74:b0:e2:99:38:22:80:f8:5e:c7:bd:81:
bd:22:54:96:93:f8:02:47:be:01:c3:2a:f1:66:12:ea:eb:aa:
d9:bd:61:fe:8d:8d:3e:01:00:73:a3:10:c4:2b:64:1f:a3:77:
6f:c8:33:fb:7f:45:9a:06:a9:89:c1:54:db:18:d8:fd:0c:d5:
66:93:78:47:7b:17:28:65:21:02:89:73:fd:01:e7:18:c1:a5:
85:32:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:06 2025 by rpki-client