Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer (raw, json)
Hash identifier: t5clOlftilGk3syDEiofn9QEaHYXZVhh+5bKpa/kv5k=
Subject key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2195D231FA686A0B40CFA7705AC5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211477
IP: 195.189.241.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:5d:23:1f:a6:86:a0:b4:0c:fa:77:05:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:90:a5:d0:41:25:0c:06:fd:3a:6a:e1:d6:
84:0a:a9:2d:e9:e7:3a:55:90:3c:1c:e0:61:aa:7b:
fc:69:dc:a7:cc:3d:38:40:6c:09:b6:36:c5:dd:bf:
5a:85:1c:df:15:ce:b5:0c:be:9d:d6:b1:93:ea:d3:
9f:58:86:3d:a9:d0:83:1b:80:d7:e0:26:19:19:9b:
c3:8d:32:74:eb:1d:3c:93:08:80:15:44:e1:d5:5a:
c0:4b:3c:38:e7:f5:3c:08:7d:bb:51:3e:05:09:b4:
d8:83:87:5e:5b:9e:90:69:8a:3a:2f:04:28:f8:69:
d7:31:65:57:77:40:a2:88:55:40:c8:86:46:28:ba:
f4:63:2e:e8:89:82:1f:a8:f7:fd:a0:0e:5f:30:7c:
09:c0:80:cf:dc:2b:5d:58:22:a3:9b:4d:ae:c8:8f:
4f:86:17:5e:a1:9d:ab:4c:ea:6d:d5:7b:99:6b:f2:
a6:ac:c8:05:5e:1a:7e:48:a0:ca:62:e2:1d:db:c7:
ac:2f:49:82:eb:d1:cb:b2:e1:40:0c:c6:99:7d:dc:
ba:e8:28:ce:04:91:53:09:6a:06:97:09:eb:86:bd:
8d:b7:2f:8c:a5:48:f2:33:d4:a0:78:a3:cd:d9:cd:
ed:0d:72:a8:92:25:bc:d8:fe:be:bf:a5:3b:9f:63:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.241.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211477
Signature Algorithm: sha256WithRSAEncryption
62:d8:b3:45:0c:60:d1:60:21:de:6a:1a:56:f9:c7:da:52:1d:
82:18:17:97:a7:40:39:9e:c8:90:50:6a:6d:86:74:e4:37:26:
48:ee:49:d2:49:47:4d:f2:69:90:1f:42:da:e3:69:a1:0d:b3:
93:0c:f9:13:bf:99:90:5b:ae:64:fc:bc:aa:63:ca:d1:d0:77:
51:f8:e4:61:a2:b9:d2:d8:ee:67:57:9e:36:34:d3:b5:a6:d3:
92:c1:c8:c8:7b:e8:87:62:24:e4:b3:78:60:79:d6:14:41:c5:
7c:ad:fc:04:e0:0f:a0:87:d7:6d:b2:3e:82:ee:9f:0c:d8:dc:
77:12:40:e7:88:81:b4:d4:1f:6f:26:d4:a8:a1:41:ac:9d:32:
52:40:29:38:ca:03:87:b2:52:a7:50:5b:8c:5f:6a:b9:67:5e:
83:b1:32:9b:2d:ac:9a:9f:ad:2a:e7:ae:82:95:37:2e:b2:4f:
1e:76:3a:53:67:66:5f:5f:0f:94:49:7e:9d:0a:9a:dc:78:27:
17:e6:97:0f:69:91:fa:30:6f:9b:42:71:75:95:b4:7a:07:28:
13:d0:12:57:85:8f:cb:5b:c0:46:fb:b5:4a:e9:ed:a6:47:e5:
04:42:b1:f4:ef:2e:91:30:8c:9c:07:b8:d0:a8:ba:6c:9d:32:
36:9c:24:48
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhshldIx+mhqC0DPp3BaxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTAxZmMxZjkxODE4ZTQ4ZDZmZDEwZWQ2ZjljNTM5YTg4ODU0YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte2QpdBBJQwG/Tpq4daECqkt6ec6
VZA8HOBhqnv8adynzD04QGwJtjbF3b9ahRzfFc61DL6d1rGT6tOfWIY9qdCDG4DX
4CYZGZvDjTJ06x08kwiAFUTh1VrASzw45/U8CH27UT4FCbTYg4deW56QaYo6LwQo
+GnXMWVXd0CiiFVAyIZGKLr0Yy7oiYIfqPf9oA5fMHwJwIDP3CtdWCKjm02uyI9P
hhdeoZ2rTOpt1XuZa/KmrMgFXhp+SKDKYuId28esL0mC69HLsuFADMaZfdy66CjO
BJFTCWoGlwnrhr2Nty+MpUjyM9SgeKPN2c3tDXKokiW82P6+v6U7n2O+aQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzZmOTgz
Yi0zZTU2LTRjODItOWYzOC01ZjFkODU2MmI1MmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNmY5ODNi
LTNlNTYtNGM4Mi05ZjM4LTVmMWQ4NTYyYjUyZi8xL3lRSDhINUdCamtqV19SRHRi
NXhUbW9pRlN3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw73xMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM6FTANBgkqhkiG9w0BAQsFAAOCAQEAYtizRQxg0WAh3moaVvnH2lIdghgXl6dA
OZ7IkFBqbYZ05DcmSO5J0klHTfJpkB9C2uNpoQ2zkwz5E7+ZkFuuZPy8qmPK0dB3
UfjkYaK50tjuZ1eeNjTTtabTksHIyHvoh2Ik5LN4YHnWFEHFfK38BOAPoIfXbbI+
gu6fDNjcdxJA54iBtNQfbybUqKFBrJ0yUkApOMoDh7JSp1BbjF9quWdeg7Eymy2s
mp+tKueugpU3LrJPHnY6U2dmX18PlEl+nQqa3HgnF+aXD2mR+jBvm0JxdZW0egco
E9ASV4WPy1vARvu1SuntpkflBEKx9O8ukTCMnAe40Ki6bJ0yNpwkSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:48 2025 by rpki-client