Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer (raw, json)
Hash identifier: n0Lswn4kt/lvrtyDBUfWDfrxDbWi6slWFy+W33QEDZc=
Subject key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A2E2C11CBA28E7460ED7F67A79BCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.60.176.0/22
IP: 2a02:73e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2e:2c:11:cb:a2:8e:74:60:ed:7f:67:a7:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:c6:3c:ac:cb:d3:2c:28:9b:f0:1d:ed:fe:
61:36:94:8b:42:be:74:13:1d:95:34:1f:fb:fe:cf:
a5:67:dd:fe:4e:01:69:8f:17:74:b3:b1:a3:70:73:
fe:8b:a8:37:ea:19:a6:4c:71:cf:8c:3a:bd:cb:91:
7f:a8:f7:75:25:89:0a:cd:ef:ff:80:a1:65:c8:2e:
fe:de:45:57:74:3b:d5:87:e9:d5:4d:5d:80:9e:c8:
d8:2e:a2:19:7f:2a:cb:09:3c:d9:e7:9f:ca:61:2f:
1e:3e:41:0d:3f:05:2c:0e:e8:74:c9:e3:8b:1d:9e:
02:4b:f6:8c:0c:4a:fa:9e:28:9f:d5:1c:e2:ba:70:
bc:61:fa:a6:e2:96:5a:fd:9d:b8:02:1a:51:d4:7c:
19:4f:23:d4:76:04:45:9e:0a:41:c6:dc:1e:25:93:
fa:6c:06:8a:23:27:27:f8:ca:e8:28:8a:6d:0e:59:
3d:90:a9:ed:5d:5f:8a:22:66:4b:2d:d6:7a:99:b6:
5b:2e:75:a8:ac:cc:fa:16:31:c0:33:84:76:f5:af:
66:ef:dd:21:d1:5d:c6:a0:e9:4b:1a:4d:a8:f9:84:
88:60:56:9a:71:a3:d5:84:ba:2f:80:79:38:5a:b7:
ca:df:51:db:82:90:b9:78:a3:f7:e2:7e:1d:4e:6b:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.176.0/22
IPv6:
2a02:73e0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:c8:05:08:38:c6:2a:2f:85:c8:3d:a3:c8:b4:3a:4d:1f:0d:
0e:13:f1:5d:cf:78:a8:51:fe:e8:8e:f8:4c:d4:e0:17:3e:f9:
84:02:54:80:61:d9:cc:a3:d4:c8:51:30:4d:72:95:e2:bd:e5:
08:9b:4e:1e:d9:74:8d:1a:13:34:e8:6e:b2:71:da:65:8b:37:
8f:54:b9:4f:9b:8a:cf:40:64:41:0c:5f:1a:8d:29:c7:5f:15:
16:35:e2:94:b4:43:7b:8b:08:b7:11:48:c8:80:4e:f2:cd:71:
e2:31:00:b8:27:be:02:16:f8:f6:63:9f:17:b5:e7:7a:c8:8a:
b4:2f:5a:90:2b:ca:ac:d0:cc:7e:4b:cd:2d:1b:a4:d8:64:bb:
a1:60:e5:b1:fa:ff:31:11:76:19:79:d8:7f:72:55:c7:48:08:
c4:60:39:a2:39:9d:9e:88:e3:91:cd:88:fb:a8:20:8b:75:8b:
f2:04:37:3d:1c:c9:c4:fd:82:24:5b:c2:04:5f:cd:d5:51:d7:
6a:ac:05:5b:32:3f:29:54:b5:a9:c4:a4:f0:20:9d:41:cc:54:
3d:c7:01:77:7b:80:57:44:05:aa:c9:ce:87:a7:74:97:1b:74:
00:2d:4f:d1:c4:da:2d:a4:2b:c8:a7:8c:37:4b:e2:74:91:15:
ef:85:0e:38
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQjai4sEcuijnRg7X9np5vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQyYjc2NmVmNTdkNjljZjRmYmRlNGJjYjZmMGFmMDZhM2IyMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzGPKzL0ywom/Ad7f5hNpSLQr50
Ex2VNB/7/s+lZ93+TgFpjxd0s7GjcHP+i6g36hmmTHHPjDq9y5F/qPd1JYkKze//
gKFlyC7+3kVXdDvVh+nVTV2AnsjYLqIZfyrLCTzZ55/KYS8ePkENPwUsDuh0yeOL
HZ4CS/aMDEr6niif1RziunC8Yfqm4pZa/Z24AhpR1HwZTyPUdgRFngpBxtweJZP6
bAaKIycn+MroKIptDlk9kKntXV+KImZLLdZ6mbZbLnWorMz6FjHAM4R29a9m790h
0V3GoOlLGk2o+YSIYFaacaPVhLovgHk4WrfK31HbgpC5eKP34n4dTmv2VwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFVCt2bvV9ac9PveS8tvCvBqOyIGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzQ0NmVi
YS05YzBkLTQ3NjUtYjNkYy03ODMwOGIyZjUyMzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNDQ2ZWJh
LTljMGQtNDc2NS1iM2RjLTc4MzA4YjJmNTIzNC8xL1ZVSzNadTlYMXB6MC05NUx5
MjhLOEdvN0lnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTywMA0EAgACMAcDBQAqAnPgMA0GCSqGSIb3
DQEBCwUAA4IBAQCpyAUIOMYqL4XIPaPItDpNHw0OE/Fdz3ioUf7ojvhM1OAXPvmE
AlSAYdnMo9TIUTBNcpXiveUIm04e2XSNGhM06G6ycdplizePVLlPm4rPQGRBDF8a
jSnHXxUWNeKUtEN7iwi3EUjIgE7yzXHiMQC4J74CFvj2Y58Xted6yIq0L1qQK8qs
0Mx+S80tG6TYZLuhYOWx+v8xEXYZedh/clXHSAjEYDmiOZ2eiOORzYj7qCCLdYvy
BDc9HMnE/YIkW8IEX83VUddqrAVbMj8pVLWpxKTwIJ1BzFQ9xwF3e4BXRAWqyc6H
p3SXG3QALU/RxNotpCvIp4w3S+J0kRXvhQ44
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:46 2025 by rpki-client