Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer (raw, json)
Hash identifier: xgkbw6lrFACmdkBD6PU0lIYOll+VbTHBley2nmlaBGI=
Subject key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019482F4E16BA6174D9B6E20A84136E5F317
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 09:04:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20552
AS: 44896
AS: 50606
AS: 57665
AS: 204700
IP: 31.222.16.0/21
IP: 91.199.97.0/24
IP: 91.216.30.0/24
IP: 109.232.24.0/21
IP: 164.40.240.0/21
IP: 185.1.4.0/22
IP: 185.13.168.0/22
IP: 185.24.200.0/22
IP: 185.52.168.0/22
IP: 185.56.172.0/22
IP: 185.101.232.0/22
IP: 185.119.12.0/22
IP: 185.174.120.0/22
IP: 185.188.164.0/22
IP: 185.215.72.0/23
IP: 185.226.44.0/22
IP: 185.241.104.0/22
IP: 193.42.154.0/24
IP: 194.126.233.0/24
IP: 194.126.245.0/24
IP: 194.126.251.0/24
IP: 194.127.97.0/24
IP: 213.92.128.0/17
IP: 213.156.96.0/19
IP: 217.168.128.0/20
IP: 2001:7f8:4b::/48
IP: 2a00:9660::/32
IP: 2a02:d88::/32
IP: 2a02:54e0::/29
IP: 2a02:6640::/32
IP: 2a0b:a6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:f4:e1:6b:a6:17:4d:9b:6e:20:a8:41:36:e5:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 09:04:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:d0:ea:e7:96:7d:69:b3:5c:de:24:9b:82:
31:d5:47:e5:18:10:22:57:18:2d:6a:6d:e2:e1:ac:
cd:86:da:f6:09:ae:67:d8:ff:7a:39:14:b3:92:5a:
8b:97:2a:56:aa:74:19:15:14:dd:20:ac:ea:de:59:
f1:ae:cc:df:1e:3c:2d:db:b7:56:c8:a9:4b:fa:fa:
a0:c3:94:a1:be:fb:33:3c:ec:81:4a:70:36:c8:1c:
ef:98:c5:a7:63:ee:e7:53:35:50:7c:a9:58:cc:51:
04:69:aa:eb:ea:b0:43:4d:a4:ae:f6:fe:be:44:ee:
d4:69:91:2c:27:6f:2c:e9:57:0b:fc:2a:d4:97:6c:
7d:0b:23:91:fa:08:2e:2d:6e:18:95:b4:d9:06:65:
2b:e6:16:8d:52:2c:dd:fc:67:99:1a:8b:ce:02:90:
71:e6:af:61:b9:91:55:cb:a3:cf:18:29:b2:aa:8c:
94:3a:8d:25:88:0a:f3:98:1c:3b:28:83:02:37:23:
54:8c:09:77:3f:aa:e0:19:b2:42:12:5b:57:af:60:
b7:76:32:f5:a2:29:ae:af:7d:01:b0:98:ac:3f:15:
60:ab:28:47:23:0d:06:5c:86:07:7e:19:a5:b4:d9:
e1:64:58:db:64:4c:ca:2e:6a:18:98:8f:dc:fe:20:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.16.0/21
91.199.97.0/24
91.216.30.0/24
109.232.24.0/21
164.40.240.0/21
185.1.4.0/22
185.13.168.0/22
185.24.200.0/22
185.52.168.0/22
185.56.172.0/22
185.101.232.0/22
185.119.12.0/22
185.174.120.0/22
185.188.164.0/22
185.215.72.0/23
185.226.44.0/22
185.241.104.0/22
193.42.154.0/24
194.126.233.0/24
194.126.245.0/24
194.126.251.0/24
194.127.97.0/24
213.92.128.0/17
213.156.96.0/19
217.168.128.0/20
IPv6:
2001:7f8:4b::/48
2a00:9660::/32
2a02:d88::/32
2a02:54e0::/29
2a02:6640::/32
2a0b:a6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20552
44896
50606
57665
204700
Signature Algorithm: sha256WithRSAEncryption
76:85:c1:44:5e:1b:94:d7:ca:73:8d:fe:53:4c:17:79:10:a5:
c6:5f:52:64:56:79:b3:07:30:eb:cf:3a:65:dc:94:1b:bd:68:
97:da:b7:4d:51:a9:ab:03:2d:05:2a:b0:15:af:67:71:87:45:
5e:25:93:30:eb:95:75:97:86:07:33:8f:fe:7e:3b:f2:72:24:
e3:0a:89:fc:e6:40:69:02:41:ec:45:4c:0f:41:1c:9d:30:fd:
32:8d:de:12:a5:12:fa:3a:36:57:58:ef:86:98:76:04:2a:a2:
df:d3:28:15:e8:78:08:97:e8:fb:2e:1f:7f:d8:0a:57:28:83:
ef:5d:b4:d6:37:15:1b:9f:0b:8d:8e:e7:e3:7b:4d:34:ae:49:
1c:3d:52:dd:05:73:47:ae:93:2d:46:e8:d7:23:26:40:eb:72:
b7:8e:65:51:dc:fe:a8:17:d1:20:ad:b9:d0:5e:6c:19:52:79:
58:2f:c5:96:e1:5f:ac:e0:00:81:80:32:84:e9:09:4c:cc:25:
a5:e2:b8:e5:43:46:0f:a3:80:65:f3:1a:cf:b7:dd:a0:35:06:
30:71:c0:a1:5a:c0:ee:14:72:cc:20:04:01:e7:dd:b2:51:86:
9d:7d:5c:d7:b6:d8:12:24:57:e1:09:f9:ad:14:97:70:cb:2b:
56:0e:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:40 2025 by rpki-client