Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer (raw, json)
Hash identifier: bjqsXybh2goYsSYNbBpT6SDMRjoWZJWdsxoX7KdJ1wQ=
Subject key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823044F34AF8CDFA2B3134E81D206F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197064
IP: 151.248.56.0/21
IP: 178.23.104.0/21
IP: 185.24.196.0/22
IP: 2a02:2408::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:04:4f:34:af:8c:df:a2:b3:13:4e:81:d2:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:bd:8b:23:58:e7:5b:2c:aa:5c:c5:f1:1d:
d7:93:15:d3:fa:bb:1e:6a:1b:61:8d:a2:28:49:6c:
2b:1c:5b:43:96:ac:03:5c:d0:ea:b6:3a:2d:cc:ee:
f5:1f:f7:88:2c:08:fb:a2:40:b3:dc:78:d1:1d:e2:
7f:ad:ef:6e:cc:14:67:95:a1:8a:b1:6e:f6:2b:f7:
0a:77:67:8f:1a:e9:f1:58:e7:f1:5c:ec:f3:bb:cb:
03:1b:4c:d0:1f:8c:59:56:c2:e4:65:4d:f4:b8:d7:
29:4f:76:85:f5:e1:c9:37:86:31:23:51:d0:3d:86:
76:3c:19:db:49:14:8c:0f:18:26:c4:c7:37:11:1f:
c6:64:c5:fa:cb:00:50:58:d7:f4:89:60:a7:b9:6a:
4f:73:66:7f:1f:d0:03:4e:22:0e:cf:cf:66:ad:e3:
fa:d7:68:83:6a:f3:9e:bb:d3:8b:b4:5b:94:45:13:
cf:4d:ce:43:b4:62:32:8a:23:43:27:e3:da:0e:07:
73:68:3d:90:a5:a8:f9:df:70:01:67:ed:3c:e7:25:
6f:4b:8c:52:7e:e1:c5:ef:49:61:75:69:19:f3:61:
0b:ac:11:7a:48:bd:82:37:f1:47:5b:58:97:90:0b:
3b:01:ad:dc:cd:11:01:91:84:4e:99:b0:7d:60:02:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.56.0/21
178.23.104.0/21
185.24.196.0/22
IPv6:
2a02:2408::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197064
Signature Algorithm: sha256WithRSAEncryption
29:44:9e:7e:25:ce:61:5b:ef:2c:eb:c7:e3:90:44:66:45:88:
34:ee:f0:27:02:d1:ec:f2:f7:8e:d8:71:63:b4:d7:ad:4e:be:
7b:2b:03:4e:89:9e:8f:55:25:7d:d4:7c:b9:fc:0f:2e:af:23:
ad:6b:dd:7c:63:0a:02:92:f4:df:7c:69:b9:f9:d8:f0:f5:df:
32:6e:9f:da:2e:b9:76:b2:b4:70:56:1e:75:c6:57:ec:28:1d:
62:89:f5:30:a3:6c:79:85:61:71:3d:58:bd:84:90:9e:33:9e:
3a:9f:85:72:63:b3:90:a0:63:cc:90:31:86:fa:6a:13:09:47:
b8:b8:73:e9:b9:db:5e:d3:6e:db:29:94:31:40:3c:9e:e1:74:
38:d7:f2:f0:eb:80:bc:63:89:7c:29:96:33:da:90:70:e9:b0:
8c:55:c6:72:71:9e:db:36:76:e4:96:8c:d9:42:51:58:05:47:
c7:7b:af:9d:d0:8a:22:ac:8e:2e:d3:ec:4e:27:50:5c:ab:51:
64:5a:f5:38:5d:93:de:25:4b:7e:7e:ea:cf:fc:d0:ea:09:6d:
93:d4:74:4f:8c:49:66:d7:ce:d8:59:9d:df:6a:a0:7d:72:4f:
cf:e5:24:32:56:a4:13:b9:14:d0:6c:b7:c6:a3:1e:d7:1c:1e:
59:b6:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:12 2025 by rpki-client