Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.cer (raw, json)
Hash identifier: K1tuvEMGqVL05cdcAC4xCzZrP/bn8O0TGE8kVkjrPng=
Subject key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F2BEF25AA328F46B78C6097A03D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49915
IP: 185.162.252.0/22
IP: 2a0a:1800::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f2:be:f2:5a:a3:28:f4:6b:78:c6:09:7a:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:8a:d8:99:90:31:dc:08:f4:aa:04:df:bc:
f9:0e:8c:82:21:8f:94:32:2c:7a:c4:79:8c:ac:63:
7f:6c:9d:a9:ce:88:b5:2f:02:f5:84:b5:c4:d9:d3:
af:f6:46:e2:79:8c:5f:f2:94:1f:0e:ea:4f:33:60:
05:d1:b1:bc:80:40:44:fd:d8:67:ce:a7:4e:d3:87:
99:c7:29:77:23:1b:43:a8:12:1f:1c:69:3f:82:11:
96:b9:29:ca:bf:c8:d0:c7:a0:4f:6a:3e:60:b9:4d:
5a:e3:ed:f5:ec:6c:77:a3:8c:30:6c:e6:da:07:79:
f4:8f:8f:29:a1:d5:3b:a0:b7:13:ca:7d:3e:da:7c:
eb:a7:73:4d:16:dd:8a:77:15:af:42:83:73:c9:7d:
d6:59:85:88:bb:c7:cf:70:4e:97:1e:de:2c:e2:40:
f2:64:e6:19:1c:7a:d3:3b:a9:0f:cd:48:4c:b0:02:
8f:61:e9:5a:41:23:f8:40:70:66:e4:6e:46:c9:bb:
b7:c7:64:1c:47:6e:f8:9e:16:e6:c5:8a:0e:2e:71:
ea:1f:a8:45:e0:c1:20:e7:85:bb:cb:46:8e:ed:0b:
6f:2c:4a:6a:38:36:3a:7e:50:e8:c3:64:4c:e0:be:
ab:f4:10:e5:60:9d:bd:e2:6e:35:de:ca:ba:1f:ef:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.252.0/22
IPv6:
2a0a:1800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49915
Signature Algorithm: sha256WithRSAEncryption
50:40:de:0f:b6:04:f1:8a:19:51:82:94:b1:6c:6b:3d:f6:af:
49:1e:bd:42:ba:43:fc:6b:34:43:fe:56:9b:47:e5:77:12:36:
1c:31:77:8a:7f:f5:cf:b7:a3:03:c8:03:b6:dc:2d:a0:cc:bb:
23:be:14:c2:b2:bf:b9:ad:da:73:38:76:93:72:8d:34:67:81:
22:32:83:63:08:7d:86:d9:0f:bd:95:2c:7b:b2:a3:a2:bb:42:
82:b2:3f:ef:46:3d:b0:0a:d0:ad:bd:e3:c9:fd:85:17:cd:56:
90:ad:ed:ca:39:5d:50:b7:0f:e9:12:23:07:c6:b9:3f:59:c5:
09:25:82:b3:64:c8:08:f7:3b:79:a7:37:13:60:98:b0:7e:65:
af:be:92:1f:7d:08:be:9b:99:de:00:37:54:2a:ba:c6:93:2e:
3b:8b:4d:5a:ee:5c:8c:21:e5:7e:6a:d8:5b:72:c1:e2:d6:01:
b7:92:49:78:9c:d3:51:1b:b8:62:ba:43:36:29:ff:79:fa:ac:
67:d1:d1:04:3b:f0:24:c8:4a:30:d7:26:d0:1f:78:4d:fe:ee:
a5:cb:4b:89:38:b5:1b:55:63:b0:6e:74:ec:90:0f:b6:25:e1:
4a:54:88:ce:39:66:0f:26:2d:15:e7:42:9e:94:9d:51:3a:ae:
5a:62:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:25:58 2025 by rpki-client