Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.cer (raw, json)
Hash identifier: VCMSpYBXmM7aCw0MmSEWDobBqpJ6ooYaMdFHMshwJ70=
Subject key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F5E25D9217EF7A015051AC38A80F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43927
IP: 45.131.128.0/22
IP: 46.102.240.0/21
IP: 77.81.240.0/21
IP: 89.32.144.0/21
IP: 89.33.197.0/24
IP: 89.45.248.0/21
IP: 91.188.224.0/22
IP: 92.114.98.0/24
IP: 93.113.174.0/24
IP: 185.105.32.0/22
IP: 185.125.108.0/22
IP: 185.199.172.0/22
IP: 185.250.104.0/22
IP: 188.240.47.0/24
IP: 188.241.112.0/21
IP: 2a06:cd40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:e2:5d:92:17:ef:7a:01:50:51:ac:38:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5336107179715609dca422bc07a098468c529452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:06:1c:be:e5:67:88:01:bc:63:a8:d8:de:
75:4c:9a:14:af:8f:7c:92:67:fa:2c:64:d8:3f:f0:
7e:bb:8c:c3:1e:15:63:ad:b8:26:30:61:84:a3:09:
70:40:59:ec:0e:ac:ce:a0:94:00:7b:88:ac:6b:92:
5c:54:a2:b1:5b:d4:6e:03:e8:5c:5f:35:7a:d5:84:
f8:56:fd:cd:68:88:f2:f2:4b:a1:40:a8:32:ab:3b:
11:43:93:22:a3:d2:aa:7e:0e:e8:a1:0c:85:fd:04:
2e:a6:2f:cb:17:d3:41:d6:84:5f:f9:9a:4d:86:b7:
05:3a:0f:52:2f:58:8a:0f:b0:53:5b:70:02:23:0a:
28:83:c2:43:f8:f3:a4:5d:d9:16:36:61:d7:bd:8f:
e7:b9:e1:8e:98:ad:19:6d:eb:ec:fc:2e:39:3a:de:
4a:99:92:fd:de:6a:6f:86:64:a3:e7:8e:3d:22:43:
91:a2:b2:77:67:56:a0:6b:a1:39:0e:e1:d8:f6:39:
41:23:64:95:1d:1d:df:a2:30:04:65:e9:ad:9e:9d:
f8:02:b0:1c:61:d6:58:95:87:48:64:a4:c3:3c:8a:
21:19:79:92:76:7d:19:7e:de:8f:3b:73:7f:60:a5:
56:09:a7:71:9f:1c:36:7f:86:16:10:5c:9a:ea:88:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.128.0/22
46.102.240.0/21
77.81.240.0/21
89.32.144.0/21
89.33.197.0/24
89.45.248.0/21
91.188.224.0/22
92.114.98.0/24
93.113.174.0/24
185.105.32.0/22
185.125.108.0/22
185.199.172.0/22
185.250.104.0/22
188.240.47.0/24
188.241.112.0/21
IPv6:
2a06:cd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43927
Signature Algorithm: sha256WithRSAEncryption
9f:f9:92:5b:c9:9e:d3:15:79:9e:91:0a:df:0b:82:dc:79:a8:
a5:90:79:78:cb:e6:00:29:cd:79:ae:8d:1d:7e:00:1e:37:7d:
fc:a8:f3:71:32:c5:f0:bd:01:6a:3d:e0:90:c1:5a:86:f6:b5:
cd:5b:ce:56:af:cd:57:94:8e:bc:fb:33:35:b2:46:8b:93:bd:
7d:75:ba:e2:af:f3:f8:df:89:df:f8:9d:25:3b:ec:61:ec:a3:
7b:42:be:28:83:ce:09:cb:a9:4c:00:72:88:74:93:c7:d7:de:
92:a5:7f:e4:49:51:96:ba:f2:7d:a5:3e:e5:09:a8:cf:3b:51:
da:68:50:cc:65:c2:90:6d:1d:a5:ad:7d:c8:4f:9c:39:02:4c:
5d:01:92:94:9b:a2:92:a6:74:91:77:3a:c4:92:11:fd:5c:28:
c1:8e:42:fb:46:30:01:e0:77:97:e1:b3:07:98:69:3c:b1:a7:
03:fd:0c:f9:18:05:fc:8a:6e:24:3e:51:df:32:c8:f5:12:90:
6a:56:1f:cb:94:50:e5:e7:1a:4c:f0:27:db:f8:76:ee:a2:92:
c5:53:86:4c:f2:d5:dd:a3:11:bb:7a:a1:32:69:1f:c8:ac:0a:
8d:a1:0c:4a:0c:b3:cf:23:87:95:bd:6a:71:eb:c6:c5:f8:e5:
8d:0d:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:57:19 2025 by rpki-client