Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.cer (raw, json)
Hash identifier: WePBzy8+AJMWXrishMlHl+MPip3ePMpi854fwO94GQ0=
Subject key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9525AE2121661DA78D0D3084E8FB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214570
IP: 45.137.16.0/23
IP: 45.137.19.0/24
IP: 185.254.165.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:5a:e2:12:16:61:da:78:d0:d3:08:4e:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:80:76:ab:6a:8e:5d:e7:dd:66:7a:e6:53:
33:58:ff:40:0a:b3:06:2c:5c:ca:bd:37:a3:27:fe:
6a:b6:5e:72:5a:8a:40:b1:9d:89:0a:7d:74:b4:5c:
3b:ae:49:bb:a8:d7:a2:08:84:de:c0:a7:4a:a9:75:
d6:2b:cf:d4:ac:da:4f:a1:1d:e0:53:78:10:3d:19:
cd:70:c9:0e:58:68:a8:10:d0:1a:42:07:17:81:ab:
ce:46:16:29:22:59:5b:ed:9f:ed:a6:a4:11:54:7e:
51:8e:28:7e:0c:b4:57:92:16:8c:3b:95:f6:f1:de:
f7:b8:05:dd:26:db:67:4d:1b:e5:f9:00:a4:eb:6a:
98:60:fd:54:5a:64:0b:ae:c8:ad:4e:bf:ac:7b:f5:
d5:59:93:c6:b4:4b:9e:1a:a4:ad:85:98:c0:ee:59:
6b:ac:c9:de:b7:9d:0f:50:b4:44:16:ed:e5:b2:dc:
f0:04:40:94:67:e0:a3:3a:82:ea:11:d7:8f:b4:e1:
24:a3:38:26:69:96:fc:43:69:53:63:2d:f8:27:04:
38:dd:a5:18:ac:73:e4:bc:e5:07:3c:52:90:f3:34:
1f:44:a2:4d:8c:5d:49:7f:cb:bd:14:c4:54:c5:e3:
42:71:c8:78:d5:57:d3:7a:bd:be:1f:fc:8e:b5:12:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
185.254.165.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214570
Signature Algorithm: sha256WithRSAEncryption
28:21:ff:a6:0a:e2:da:05:fe:7e:03:0f:13:b3:0f:59:68:39:
df:c4:e8:08:9d:3e:96:03:b6:47:7d:c4:4c:c7:86:ad:4c:41:
9f:f9:69:52:c6:b6:e9:75:18:e0:1b:db:f8:59:18:4d:e3:78:
d0:0d:4b:0d:df:46:95:5a:69:d3:91:fc:99:b0:a2:36:b2:07:
c7:1c:ab:b5:55:c2:66:77:62:51:01:89:be:3e:09:da:46:5d:
51:8d:da:b2:f7:9f:7a:e1:b3:07:22:5e:8b:77:cc:01:1d:9c:
67:b1:c3:33:12:c3:c5:83:a5:fb:bf:29:19:4e:9e:11:cc:31:
50:56:2b:b9:fd:76:d4:f0:45:c3:ab:f6:d8:f8:76:3c:b0:a6:
1e:f7:d0:1a:7e:ca:53:12:b7:f4:93:f1:b5:c0:ce:fe:28:d9:
f9:e2:62:df:a7:44:a8:5d:be:83:79:e8:09:4c:0c:cb:34:e1:
62:13:3a:82:a4:aa:36:3c:6e:c4:46:97:aa:15:43:3d:d5:68:
64:31:7c:95:66:65:a9:ab:0d:72:53:9e:5b:76:9c:94:5e:47:
22:19:0b:4d:74:9d:00:ed:7b:7b:29:4f:a8:97:91:4a:6e:18:
8a:2e:65:d3:fc:1c:03:ee:5f:66:74:7b:75:57:bc:6e:99:c9:
e3:fa:7e:74
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZQm2VJa4hIWYdp40NMITo+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWEzYTVlNDExZGVhZjIyODRmZmQwMTUzMGJmYjQxZjgxNmNiYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhqAdqtqjl3n3WZ65lMzWP9ACrMG
LFzKvTejJ/5qtl5yWopAsZ2JCn10tFw7rkm7qNeiCITewKdKqXXWK8/UrNpPoR3g
U3gQPRnNcMkOWGioENAaQgcXgavORhYpIllb7Z/tpqQRVH5Rjih+DLRXkhaMO5X2
8d73uAXdJttnTRvl+QCk62qYYP1UWmQLrsitTr+se/XVWZPGtEueGqSthZjA7llr
rMnet50PULREFu3lstzwBECUZ+CjOoLqEdePtOEkozgmaZb8Q2lTYy34JwQ43aUY
rHPkvOUHPFKQ8zQfRKJNjF1Jf8u9FMRUxeNCcch41VfTer2+H/yOtRL7/QIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFMmjpeQR3q8ihP/QFTC/tB+BbLujMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2I4ZWE4
My00NzY1LTQzYTYtYTU0Zi0yMGQyNDkwMDEzMGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYjhlYTgz
LTQ3NjUtNDNhNi1hNTRmLTIwZDI0OTAwMTMwYS8xL3lhT2w1QkhlcnlLRV85QVZN
TC0wSDRGc3U2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQBLYkQAwQALYkTAwQAuf6lMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwNGKjANBgkqhkiG9w0BAQsFAAOCAQEAKCH/pgri2gX+fgMP
E7MPWWg538ToCJ0+lgO2R33ETMeGrUxBn/lpUsa26XUY4Bvb+FkYTeN40A1LDd9G
lVpp05H8mbCiNrIHxxyrtVXCZndiUQGJvj4J2kZdUY3asvefeuGzByJei3fMAR2c
Z7HDMxLDxYOl+78pGU6eEcwxUFYruf121PBFw6v22Ph2PLCmHvfQGn7KUxK39JPx
tcDO/ijZ+eJi36dEqF2+g3noCUwMyzThYhM6gqSqNjxuxEaXqhVDPdVoZDF8lWZl
qasNclOeW3aclF5HIhkLTXSdAO17eylPqJeRSm4Yii5l0/wcA+5fZnR7dVe8bpnJ
4/p+dA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:20 2025 by rpki-client