Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer (raw, json)
Hash identifier: 9Evzz8dP3a7fAUtihkqY4XKsOIxwM2FGZpc6p6BBxus=
Subject key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823600F374CA2904B9F8EAC38B5742C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.170.208.0/22
IP: 2a0a:68c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:60:0f:37:4c:a2:90:4b:9f:8e:ac:38:b5:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bafed139df0fad6fde0d82869144104d204b92b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:70:a5:fc:64:a1:f0:f0:fd:6a:cc:43:ab:
34:d5:1f:ec:a0:cb:5d:de:8d:1c:ab:b6:26:a0:1c:
74:bd:85:fe:38:d4:c5:0b:76:05:b3:cf:97:43:23:
99:3b:ab:a7:f8:2b:23:57:9b:fb:a1:4b:d2:8f:b5:
fa:18:da:b0:18:f1:1d:01:58:b4:b3:64:93:13:e2:
d1:4a:b8:77:78:2c:33:1a:a9:b8:98:0f:0d:24:2c:
c4:a9:17:45:c0:1c:e6:49:e3:e6:2b:2d:fb:25:79:
14:1a:dd:41:0d:b7:6d:1a:60:9c:45:e2:cb:9f:90:
77:1b:9c:b7:30:ef:4c:be:a7:ca:fe:27:23:3b:64:
c8:e2:40:d1:a7:50:33:d5:3a:07:4f:48:92:3f:4b:
df:61:b6:1f:df:a9:a6:b6:21:29:f9:80:19:65:c9:
f1:e2:72:4b:89:7b:0a:27:52:99:e5:f0:44:fa:1b:
8c:9e:8c:e9:32:eb:a7:bd:94:8c:b8:c5:a6:33:8f:
c4:d3:a6:62:3a:41:8a:c5:39:67:40:49:14:45:10:
8b:73:c5:7a:5e:b8:27:60:d0:f9:e9:85:81:e8:9f:
80:e6:5f:db:b0:82:5e:ad:fa:1e:70:2e:eb:dd:12:
3b:d3:a2:2c:9c:6f:f2:fd:63:c0:f1:7b:48:9f:15:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.208.0/22
IPv6:
2a0a:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:aa:31:72:d0:23:57:9a:a0:2d:bf:b3:e3:7c:ca:bb:f8:5a:
72:59:ed:55:1a:f8:e8:ca:64:81:c9:81:5e:41:c8:87:ab:4e:
bd:5c:70:eb:0d:22:1a:ef:fb:de:20:58:e4:04:99:71:9d:5e:
c0:85:a7:1a:fc:34:0d:a0:3a:3d:bc:01:3f:6e:71:bc:7c:4f:
fb:ea:f4:3b:83:72:15:9b:39:2c:c1:32:15:d5:aa:40:64:51:
93:d8:26:d9:fa:34:11:bc:f5:2e:b8:52:c6:2f:6f:37:91:a8:
46:a3:b2:e0:85:47:12:8d:17:b1:b6:fb:54:39:75:fb:74:ad:
cf:1a:a4:7c:2a:9e:66:46:7c:68:97:9b:d1:8b:1b:0b:ee:73:
fc:8f:69:e1:66:70:f8:89:fb:74:37:82:08:09:e1:ad:bc:c6:
b2:5a:e9:2b:e2:15:7e:2b:54:0e:ee:92:20:89:cf:53:a8:77:
18:3b:33:65:0a:22:d6:17:25:1c:6d:3a:73:25:c6:7b:46:86:
9f:98:29:2d:54:8d:69:a4:7c:9a:88:aa:f3:a3:62:58:96:29:
b8:f1:52:03:8c:d7:a9:04:6a:1c:03:b5:f6:fb:eb:66:e7:70:
9a:c8:7b:e0:b3:83:bc:85:be:1a:a4:f7:ba:6b:24:7b:62:67:
c0:e5:41:54
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQoI2APN0yikEufjqw4tXQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWZlZDEzOWRmMGZhZDZmZGUwZDgyODY5MTQ0MTA0ZDIwNGI5MmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDlwpfxkofDw/WrMQ6s01R/soMtd
3o0cq7YmoBx0vYX+ONTFC3YFs8+XQyOZO6un+CsjV5v7oUvSj7X6GNqwGPEdAVi0
s2STE+LRSrh3eCwzGqm4mA8NJCzEqRdFwBzmSePmKy37JXkUGt1BDbdtGmCcReLL
n5B3G5y3MO9MvqfK/icjO2TI4kDRp1Az1ToHT0iSP0vfYbYf36mmtiEp+YAZZcnx
4nJLiXsKJ1KZ5fBE+huMnozpMuunvZSMuMWmM4/E06ZiOkGKxTlnQEkURRCLc8V6
XrgnYND56YWB6J+A5l/bsIJerfoecC7r3RI706IsnG/y/WPA8XtInxVQ5QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLr+0TnfD61v3g2ChpFEEE0gS5K1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2M1ODEx
ZC0xZGEwLTRjMzItOWM0Yy1kODJhOTBlMzRjMmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYzU4MTFk
LTFkYTAtNGMzMi05YzRjLWQ4MmE5MGUzNGMyZC8xL3V2N1JPZDhQcldfZURZS0dr
VVFRVFNCTGtyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuarQMA0EAgACMAcDBQAqCmjAMA0GCSqGSIb3
DQEBCwUAA4IBAQA1qjFy0CNXmqAtv7PjfMq7+FpyWe1VGvjoymSByYFeQciHq069
XHDrDSIa7/veIFjkBJlxnV7Ahaca/DQNoDo9vAE/bnG8fE/76vQ7g3IVmzkswTIV
1apAZFGT2CbZ+jQRvPUuuFLGL283kahGo7LghUcSjRextvtUOXX7dK3PGqR8Kp5m
Rnxol5vRixsL7nP8j2nhZnD4ift0N4IICeGtvMayWukr4hV+K1QO7pIgic9TqHcY
OzNlCiLWFyUcbTpzJcZ7RoafmCktVI1ppHyaiKrzo2JYlim48VIDjNepBGocA7X2
++tm53CayHvgs4O8hb4apPe6ayR7YmfA5UFU
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:44 2025 by rpki-client