Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer (raw, json)
Hash identifier: Kb6LVhyvvE95RLFP4CMYEkF/W5ELo89pEe7DtbpAIOo=
Subject key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F7E865484DD0A23AE1911BF268BA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28847
IP: 80.245.224.0/20
IP: 81.94.64.0/19
IP: 185.145.92.0/22
IP: 2001:1630::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:86:54:84:dd:0a:23:ae:19:11:bf:26:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:68:5e:05:0d:38:db:d5:22:32:b4:02:6e:
1b:24:b6:6f:f4:d2:78:86:51:03:eb:85:3e:71:14:
9c:c7:44:a8:31:75:64:2a:3b:97:12:cc:61:05:82:
a4:32:9d:e2:e5:e3:6d:2d:62:5f:d7:3a:0a:b0:df:
de:68:31:91:ad:6a:f2:8b:47:0e:29:7d:03:0d:b4:
c0:b4:76:b1:f8:a1:1d:66:3e:12:cf:5f:cc:6d:f0:
16:d4:95:17:a8:be:ab:65:13:a7:b6:fa:73:b1:f4:
c9:33:03:f2:64:32:c1:b2:33:8f:20:9a:7c:cc:09:
d6:fe:ec:89:7e:0e:0a:2d:c9:a8:9f:f2:63:b5:a8:
dd:84:3d:91:54:25:65:2a:71:65:20:bc:07:db:9a:
9f:d0:5a:22:0a:0e:eb:ce:a2:91:fa:0a:08:42:1a:
d9:15:0c:6f:88:b5:64:af:bd:c3:c6:47:4e:41:eb:
78:e1:d5:d4:ce:d3:ed:d9:3a:cf:20:cb:0c:45:9d:
d2:a2:4d:7d:0d:e9:08:79:0a:dc:9f:87:6e:60:b8:
9a:e3:3f:53:5f:b2:b1:1f:cb:92:8e:af:e3:3c:b4:
50:43:73:56:08:ca:87:25:0b:58:7f:a1:e5:ad:be:
d9:7c:2d:5e:4b:05:9d:78:54:7c:c1:f3:17:5a:98:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.224.0/20
81.94.64.0/19
185.145.92.0/22
IPv6:
2001:1630::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28847
Signature Algorithm: sha256WithRSAEncryption
0c:19:d7:17:27:7e:41:24:be:95:67:57:ca:eb:4b:73:16:b4:
18:92:3f:96:b1:1f:72:98:9f:df:cb:73:03:e4:b9:26:01:20:
35:34:5b:2b:45:ef:a0:35:f1:b4:af:9a:11:a0:f2:8b:8f:3c:
05:f7:6d:3a:be:fc:3a:45:43:1f:d6:6f:4c:26:32:93:c0:c1:
5a:11:63:c5:58:2c:3d:bb:db:24:28:ea:a0:13:6c:2b:65:0b:
d5:91:c3:10:70:e8:86:4c:93:55:e2:5d:d4:60:54:77:b8:a4:
b2:d0:eb:64:c4:8e:85:ea:d4:8b:15:3c:1d:24:cb:5d:a9:ea:
77:dc:c3:f5:36:58:15:a8:42:67:91:2e:42:7e:a4:8b:64:8c:
61:61:43:ee:36:7e:77:91:25:20:4d:75:98:74:33:3e:f2:8c:
ec:60:d2:2e:76:84:e1:e3:91:7f:6d:6a:9a:4d:f0:6e:68:8c:
fb:f1:ff:b5:a6:b8:3c:e2:91:cd:fc:e2:ad:f9:8a:d1:a0:c0:
f1:ce:4f:51:b3:e3:f6:ba:0f:f5:53:2c:2a:bd:25:ad:be:d7:
b3:05:02:7d:bc:0a:cc:f3:5c:9d:3f:e2:8d:4f:08:17:81:95:
61:ac:ad:64:32:1b:d3:4d:f6:e8:ea:23:2d:63:0d:42:03:c1:
59:d9:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:27 2025 by rpki-client