Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.cer (raw, json)
Hash identifier: LMFhybnJnj62jzRDhl7kWnibUbIcUpOB0Vig7LH8A8w=
Subject key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195A4816B537980C0041B69749415CFDFEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Mar 2025 14:28:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15726
AS: 197932
IP: 37.60.200.0/21
IP: 46.231.232.0/21
IP: 213.149.64.0/20
IP: 217.14.160.0/20
IP: 2a00:f88::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:81:6b:53:79:80:c0:04:1b:69:74:94:15:cf:df:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 17 14:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:2a:26:39:87:fe:04:18:00:66:c3:17:f0:
9b:70:f6:32:35:77:29:b9:90:e3:1e:98:e9:04:d8:
42:14:ef:55:7d:f4:1b:1c:92:07:73:3d:a2:1c:11:
f0:3f:2b:ec:85:79:93:e7:1a:c4:a1:2d:51:94:49:
84:6c:28:22:03:7e:ac:cc:6f:cc:a6:c4:db:5a:f1:
ce:80:67:64:3a:0c:e9:56:a0:de:6f:03:84:dc:b5:
a3:ed:6c:a3:db:0a:82:44:fa:62:90:f5:74:ad:0d:
c3:15:3b:37:b9:81:24:5e:a5:01:a3:f6:80:0f:b5:
4a:f4:f0:0d:c5:65:91:b3:cf:92:8e:c9:bb:78:07:
37:7e:d7:b1:cd:42:e1:2d:5c:f3:0b:fc:65:f7:ac:
a1:92:90:2e:22:c3:86:b6:b9:28:5b:7c:58:22:23:
84:7a:52:dd:e1:6c:83:23:6e:1b:18:e8:84:30:fe:
db:e6:ff:56:03:c4:08:5b:a3:e8:39:63:a4:96:2f:
b9:f8:b8:82:ba:05:d9:1b:1c:57:7e:93:e0:e2:95:
c5:ba:83:08:74:14:9c:ef:dc:f0:51:94:ee:15:b0:
3c:e3:37:8b:56:ae:db:54:44:42:1a:df:e5:1f:44:
10:35:a5:3e:94:ec:2b:ba:75:1a:56:32:55:89:3e:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.200.0/21
46.231.232.0/21
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15726
197932
Signature Algorithm: sha256WithRSAEncryption
9e:3a:53:a5:1e:3a:f1:a7:22:02:bc:d8:42:63:45:7a:2d:26:
22:45:0f:2d:84:3b:0c:7d:a4:70:a5:19:20:ff:94:6c:ea:56:
ce:54:67:16:5e:2e:65:35:98:54:05:63:0f:af:09:bf:a2:57:
df:34:d3:71:92:4d:1a:0f:fe:5f:66:86:4b:46:8d:23:21:e8:
b4:85:3e:84:bc:c6:8c:ab:be:43:b1:bf:7d:d3:70:69:7d:8e:
50:e4:24:b5:10:1e:eb:32:8b:72:b8:d4:d6:23:74:ad:34:84:
2f:cb:45:23:1a:91:a6:37:5b:70:f2:39:06:35:9c:08:66:30:
c6:44:e6:db:a3:8e:cc:ce:1f:37:ee:de:2b:c2:6c:47:9d:bf:
38:86:34:a6:f7:b4:fa:0e:d8:f6:0d:e0:c9:ee:ed:ed:76:65:
48:ae:06:5c:60:f0:f4:23:d9:33:3c:54:4d:c8:c3:7d:3c:09:
02:18:79:3c:67:39:21:3a:fd:e6:39:94:7a:6d:a8:8c:2d:29:
50:f3:61:c4:9b:c1:9c:1e:a6:d4:27:a4:c8:d4:0b:2e:08:87:
20:30:f5:87:45:c9:43:97:ee:5e:fc:62:0e:2f:f6:e7:b1:5e:
40:31:a6:92:3f:a0:f2:ae:f8:b6:0d:cf:c2:d2:e7:8e:61:71:
62:91:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net