Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer (raw, json)
Hash identifier: aED4V2+26Aau8BmafK0dS3TRXCwSMk6VgUSDxXHBHJI=
Subject key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC2A5BD11F21447E80CEEF58F7909A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29413
IP: 31.187.80.0/22
IP: 31.187.88.0/22
IP: 37.156.80.0/20
IP: 46.31.216.0/21
IP: 88.133.160.0/20
IP: 88.133.224.0/21
IP: 91.217.176.0/24
IP: 185.31.60.0/22
IP: 185.91.48.0/22
IP: 213.149.80.0/20
IP: 213.178.16.0/20
IP: 217.72.208.0/20
IP: 2a02:2488::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2a:5b:d1:1f:21:44:7e:80:ce:ef:58:f7:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:36:d7:87:42:60:71:6a:55:d8:5a:74:fd:
02:51:e0:64:56:89:96:91:cd:be:b8:98:c1:20:e0:
bb:cd:19:02:46:8c:ed:ba:86:db:15:2e:57:49:98:
f5:e0:af:1d:56:d9:c7:33:e6:a1:df:e1:65:45:78:
de:ac:bc:33:80:86:aa:0c:5d:ae:9e:ba:64:4f:56:
7d:c6:25:9d:73:d3:4a:96:3a:2b:df:69:58:a7:66:
df:52:63:20:de:84:eb:ab:fd:50:de:d4:4a:1b:46:
72:95:7a:7d:b8:23:4a:92:d1:22:9a:74:74:02:79:
d6:20:2a:53:6c:3a:5b:30:ed:5a:a9:17:e9:a3:11:
bc:b4:6e:7b:15:1d:0d:c1:5a:02:e4:1a:7b:7e:1b:
c1:5c:42:bd:a1:c2:fb:af:ef:12:e8:79:82:64:3f:
1e:11:03:d4:f5:e0:25:52:c7:c7:75:97:ac:5e:0d:
bd:72:f0:35:7e:da:c7:cf:44:8e:03:59:f5:3c:f6:
5b:bd:0a:ce:b9:37:43:71:4d:93:6f:47:ac:db:a3:
c1:88:7f:fb:fa:b9:76:8b:15:47:0f:cf:98:bb:db:
e3:6c:a9:4f:2b:b7:8c:07:6d:81:4c:9e:15:ac:7d:
35:ae:94:82:cc:9c:ef:f5:9f:b0:3f:bd:a3:ee:3c:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.80.0/22
31.187.88.0/22
37.156.80.0/20
46.31.216.0/21
88.133.160.0/20
88.133.224.0/21
91.217.176.0/24
185.31.60.0/22
185.91.48.0/22
213.149.80.0/20
213.178.16.0/20
217.72.208.0/20
IPv6:
2a02:2488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29413
Signature Algorithm: sha256WithRSAEncryption
73:a1:3b:4b:98:a3:ee:d2:e3:75:33:9d:b2:9b:74:74:59:1e:
65:aa:73:ab:7b:60:5c:b7:6c:4b:8a:6b:96:ef:45:8b:3e:04:
0b:10:0c:1f:b5:a1:7f:85:86:f8:5e:4a:0c:73:fa:7f:1e:f0:
aa:52:8c:96:7f:6e:1f:74:a4:70:41:0d:e0:51:29:6a:26:9a:
6f:41:5d:c7:c9:eb:83:c9:70:48:01:72:25:d8:64:54:7c:5e:
e3:8b:28:6c:b1:3d:93:5a:c6:0f:0c:56:4d:18:21:c0:5e:a8:
14:8c:48:35:5e:df:d5:c5:32:81:ae:d5:67:95:18:3e:ac:28:
94:24:0c:45:b7:cc:46:cb:c1:c9:5b:67:93:18:af:25:41:bc:
bb:c3:74:f1:fa:2f:09:d8:08:38:c8:53:38:b1:bb:1d:46:51:
73:9e:93:9f:90:36:24:da:9d:bb:2b:18:36:19:a9:9b:fe:39:
07:c6:51:7b:29:35:fb:93:78:5a:eb:16:ac:83:d6:b5:1a:81:
3f:49:e0:2c:e7:f4:37:03:72:49:aa:5a:df:d2:e3:0a:62:bf:
92:22:d5:3c:0e:86:5a:00:d7:cf:e8:47:8c:d6:3f:9c:05:d6:
8e:20:f2:c6:00:3d:64:7f:dd:5d:8a:4c:20:43:fd:54:e9:d6:
94:e9:ce:ea
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAZQl/Cpb0R8hRH6Azu9Y95CaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWYwYTM5Y2ZhZGY5MTBmNmIxMzJhZDIyOGU2MDY1NjE4ODdhMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNU214dCYHFqVdhadP0CUeBkVomW
kc2+uJjBIOC7zRkCRoztuobbFS5XSZj14K8dVtnHM+ah3+FlRXjerLwzgIaqDF2u
nrpkT1Z9xiWdc9NKljor32lYp2bfUmMg3oTrq/1Q3tRKG0ZylXp9uCNKktEimnR0
AnnWICpTbDpbMO1aqRfpoxG8tG57FR0NwVoC5Bp7fhvBXEK9ocL7r+8S6HmCZD8e
EQPU9eAlUsfHdZesXg29cvA1ftrHz0SOA1n1PPZbvQrOuTdDcU2Tb0es26PBiH/7
+rl2ixVHD8+Yu9vjbKlPK7eMB22BTJ4VrH01rpSCzJzv9Z+wP72j7jxHxQIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFNrwo5z635EPaxMq0ijmBlYYh6BsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2ZmYTQ1
Ny0zNGM4LTQ4YzItOWViYy05MmIyMDdmNjQxYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZmZhNDU3
LTM0YzgtNDhjMi05ZWJjLTkyYjIwN2Y2NDFiMS8xLzJ2Q2puUHJma1E5ckV5clNL
T1lHVmhpSG9Hdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF
BwEHAQH/BGEwXzBOBAIAATBIAwQCH7tQAwQCH7tYAwQEJZxQAwQDLh/YAwQEWIWg
AwQDWIXgAwQAW9mwAwQCuR88AwQCuVswAwQE1ZVQAwQE1bIQAwQE2UjQMA0EAgAC
MAcDBQAqAiSIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnLlMA0GCSqGSIb3DQEB
CwUAA4IBAQBzoTtLmKPu0uN1M52ym3R0WR5lqnOre2Bct2xLimuW70WLPgQLEAwf
taF/hYb4XkoMc/p/HvCqUoyWf24fdKRwQQ3gUSlqJppvQV3HyeuDyXBIAXIl2GRU
fF7jiyhssT2TWsYPDFZNGCHAXqgUjEg1Xt/VxTKBrtVnlRg+rCiUJAxFt8xGy8HJ
W2eTGK8lQby7w3Tx+i8J2Ag4yFM4sbsdRlFznpOfkDYk2p27Kxg2Gamb/jkHxlF7
KTX7k3ha6xasg9a1GoE/SeAs5/Q3A3JJqlrf0uMKYr+SItU8DoZaANfP6EeM1j+c
BdaOIPLGAD1kf91dikwgQ/1U6daU6c7q
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net