Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
File: yqgF26w2R0m5sRVZCrbvD5cM29g.cer (raw, json)
Hash identifier: ftplcJi7g6ZaLPtNvon9zOdZR6OLWo5ikxm5vIZtC4Q=
Subject key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F2C9C27CA71DD183093F2B83CEF9C74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
caRepository: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
Notify URL: https://chloe.sobornost.net/rpki/news.xml
Certificate not before: Wed 01 Jan 2025 00:03:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15562
IP: 45.138.228.0/22
IP: 2001:67c:208c::/48
IP: 2a0e:b240::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:2c:9c:27:ca:71:dd:18:30:93:f2:b8:3c:ef:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:37:54:f1:00:1f:36:76:21:08:7a:39:6b:
82:18:34:33:3c:c1:0f:2b:f4:5a:9c:96:e5:de:b1:
b4:82:a7:7b:40:19:ef:bc:91:c5:64:77:db:b7:33:
3d:df:2e:84:cf:c9:33:d3:75:3e:84:53:9b:ed:a7:
04:32:26:e9:a9:3d:96:61:dd:ad:86:c2:de:a4:3a:
d7:4c:f5:95:82:48:d5:0e:91:c5:7b:6a:04:74:cb:
2e:9a:1a:1f:e1:74:af:c0:6d:16:de:ab:a2:17:b6:
a1:93:e3:8a:65:d1:e2:b3:93:a2:b7:24:e8:f6:92:
cd:82:0d:bf:ca:1c:a7:cb:a7:36:39:b3:a0:dd:21:
a1:6f:a6:85:c7:7a:be:19:af:b4:d8:f7:cd:e1:71:
07:c2:03:45:dd:5b:b7:52:dc:b6:75:3f:e5:36:70:
b0:a6:2b:73:15:dc:15:77:12:a4:71:33:93:6e:e0:
48:3c:36:0b:b2:dc:4e:45:a5:27:a5:06:9b:e2:64:
26:6c:08:11:ff:a2:c4:25:00:83:bf:13:f0:94:0a:
22:c2:46:75:34:0b:51:f1:f0:8f:39:35:73:ef:2f:
f1:56:7a:eb:56:53:64:4c:a1:e4:1d:1d:f1:d8:35:
6c:81:ff:6d:c8:9f:bd:22:91:ed:4d:67:22:bb:c4:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
IPv6:
2001:67c:208c::/48
2a0e:b240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Signature Algorithm: sha256WithRSAEncryption
66:fe:bb:d5:de:74:5f:ec:64:d2:5d:16:6c:02:80:3c:7c:31:
5e:63:8e:7b:a9:5b:58:b4:21:eb:2e:04:fd:47:27:33:d0:a4:
d2:65:64:4e:ed:ed:f4:4c:a4:8b:8e:50:37:d3:08:fc:bb:0f:
55:4c:f4:9d:ee:3d:12:6a:0f:4e:50:21:fa:c4:0e:5b:f0:24:
89:ff:76:91:57:ad:a8:37:90:73:45:5d:c1:39:11:4f:2a:58:
8e:f8:46:99:8a:37:37:5e:43:c6:4c:cd:d1:1f:df:69:47:17:
b6:71:6e:8d:16:bd:0e:3b:56:5c:74:60:5a:94:b8:dc:69:08:
eb:f5:17:1c:bc:d3:04:98:fc:f2:36:ed:e1:9d:4c:c4:8e:d4:
d0:5b:c0:92:a8:03:6c:d7:be:2e:71:d8:d5:c6:dc:5f:ce:21:
ee:61:2b:4c:1b:b1:1d:55:62:14:52:4f:47:b7:71:b3:17:f4:
0b:44:f3:a1:b8:8b:c6:b3:cd:9e:e5:c9:11:e7:81:97:4e:ea:
69:81:54:3a:c0:90:c2:86:cf:75:4d:63:e1:9c:63:df:d8:f9:
8d:85:33:7d:f8:ff:89:92:29:64:03:a4:45:ae:7d:6d:92:1b:
7f:ff:76:97:e8:20:23:a8:ca:02:fa:1b:97:9d:0f:11:15:a9:
dd:2a:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:51:21 2025 by rpki-client