Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.cer (raw, json)
Hash identifier: asaVJwcEuKXub8UwvUwimNYAktf6bM5Qe1B9sPN3Mgw=
Subject key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3D66ABF8D3E30DCEF8FA236ADA73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210427
IP: 45.149.76.0/22
IP: 158.255.74.0/24
IP: 171.22.24.0/22
IP: 176.97.218.0/24
IP: 178.211.145.0/24
IP: 185.190.39.0/24
IP: 193.105.234.0/24
IP: 212.23.201.0/24
IP: 2a0e:b080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:66:ab:f8:d3:e3:0d:ce:f8:fa:23:6a:da:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:7d:d6:7c:a4:3e:dc:1d:32:7f:cc:b9:0f:
c7:c3:ae:7a:b1:01:fe:8f:85:fc:f3:57:a2:4a:71:
28:5a:7e:d3:da:1d:d5:94:48:64:96:24:45:e1:2f:
10:0d:d1:34:e8:36:15:b6:3f:65:02:d1:30:d9:98:
f8:45:12:9f:89:2c:76:1b:5b:3f:13:ee:57:4c:1a:
e5:a5:0a:56:19:e8:90:db:c7:41:2e:14:ce:ea:e6:
ef:e8:cd:1f:42:5c:23:27:79:c7:b1:1a:2a:c7:84:
cf:6c:3c:d6:6b:a1:b3:a2:ee:94:b6:06:76:5a:79:
77:2f:09:b8:b5:1f:32:8a:70:a1:e9:36:fb:31:2f:
28:2b:c4:e8:d5:43:67:e4:d4:8c:0c:1c:f3:b0:6c:
9d:88:b7:8d:0a:8b:73:62:f0:32:32:f7:aa:f4:88:
24:65:0d:26:9b:b8:ba:ec:6d:33:ec:a8:b0:55:53:
cb:7b:b4:96:eb:89:7f:bf:81:e1:29:70:aa:c2:32:
4b:ba:20:ed:49:52:4c:48:00:b4:6a:99:a6:77:32:
4d:95:67:3c:c4:2c:8a:55:6c:2b:75:54:94:bb:14:
00:fb:25:06:3b:56:8f:3b:3f:dd:59:61:10:db:74:
f0:51:f9:5f:63:f1:3e:06:09:94:29:bd:fc:5e:96:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.76.0/22
158.255.74.0/24
171.22.24.0/22
176.97.218.0/24
178.211.145.0/24
185.190.39.0/24
193.105.234.0/24
212.23.201.0/24
IPv6:
2a0e:b080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210427
Signature Algorithm: sha256WithRSAEncryption
6b:7f:5a:48:68:c9:84:3c:e2:bf:23:82:5a:58:85:66:9e:53:
e9:43:eb:37:5c:a0:87:18:68:ed:0e:40:be:4c:e0:99:88:1e:
33:80:35:a5:a2:5c:e2:ab:60:fe:db:5c:a7:8a:1b:b4:ec:9a:
8e:a2:2a:26:3a:c5:9c:92:8c:05:c0:86:a1:4f:ab:31:d1:c1:
33:72:64:9e:c1:56:bf:33:81:7f:46:73:8e:66:c4:9a:40:be:
60:af:61:ac:47:3f:d0:95:95:67:f8:3a:67:99:6f:54:2b:31:
35:cf:a4:13:9e:01:9b:b9:a0:24:a9:ce:4e:cb:de:ec:a0:d3:
aa:5d:86:13:88:a3:d2:82:bc:1e:cb:4b:d0:a0:84:11:53:7b:
1c:3f:fe:36:61:12:36:d3:e2:07:73:30:f4:e1:99:63:96:d8:
29:f9:bd:99:2c:f1:95:e2:12:28:e6:92:71:1a:66:7b:67:bd:
70:5f:07:67:8e:d9:10:ba:66:4e:52:a3:71:fa:fc:50:17:18:
c1:40:5e:d9:86:8c:f8:31:be:36:7a:3e:86:dc:19:3c:6f:8a:
29:38:41:25:87:54:5f:8f:12:0f:03:40:6b:af:5d:23:0b:57:
0f:48:57:fb:e4:73:2f:2d:09:09:4d:b9:7f:9c:de:7d:fb:da:
d7:d0:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:02 2025 by rpki-client