Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
File: UusD0hGZbpmknjw_nOSz8qFXI8U.cer (raw, json)
Hash identifier: 6aTp1qhihm3h3Yjz8ej/saivDHd2/PVyM7T8GCVK+d4=
Subject key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD967BE1386BAFF8E98DA19B4AFEA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47267
IP: 91.199.17.0/24
IP: 185.182.160.0/22
IP: 2001:67c:69c::/48
IP: 2a0f:eb80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:96:7b:e1:38:6b:af:f8:e9:8d:a1:9b:4a:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:e6:60:ef:97:34:e0:c9:bb:51:30:2c:d8:
bb:24:df:c2:0a:24:50:5c:52:28:58:ca:7b:03:dd:
1c:7f:ac:84:77:32:ca:c7:92:a2:7f:e5:41:7a:69:
28:42:bd:12:3a:15:a0:cd:c0:27:62:d2:e8:78:73:
6a:dc:f4:45:06:fc:bb:84:c1:43:1e:46:f4:97:40:
54:be:fd:ed:f9:bb:c3:c6:4b:e2:b5:56:10:90:d8:
7c:6c:86:c9:39:15:54:b8:97:b8:ac:94:92:a9:b8:
7a:6a:cb:88:e8:c7:dc:47:d0:7e:72:b1:dc:04:9f:
2b:9f:0f:f4:a5:f6:11:66:95:2a:db:d8:69:3d:2f:
80:99:eb:9f:c5:c0:0b:cd:44:e2:b6:34:31:3e:8e:
f0:e0:f9:1a:ad:3e:00:3f:fd:34:f6:b8:d2:5d:c5:
ac:28:62:c0:82:fd:c3:ae:0c:2b:50:ba:8d:f9:89:
10:65:78:a2:af:41:21:bf:70:19:11:74:80:f0:8d:
67:ed:15:0d:a2:5d:46:c4:0a:32:f0:dc:00:2a:d3:
41:6d:5c:6b:1f:dd:f0:0c:6d:d7:15:30:07:b2:c5:
4f:82:d9:3f:53:d2:0c:25:45:e0:4d:de:84:c7:41:
dd:48:c3:e9:36:6d:5c:4d:9e:70:96:1d:6d:0b:17:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.17.0/24
185.182.160.0/22
IPv6:
2001:67c:69c::/48
2a0f:eb80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47267
Signature Algorithm: sha256WithRSAEncryption
29:83:ef:31:b7:ad:b1:6a:70:f0:18:2a:8a:57:16:b4:40:4d:
c0:c7:91:2a:a6:0c:72:27:f7:d9:93:97:28:c6:df:57:37:e6:
cd:25:8f:be:27:8f:37:b1:aa:38:f2:3c:ec:46:c1:0a:50:ce:
6e:56:9b:62:03:3b:8a:29:73:76:14:62:0d:a1:e4:64:a6:16:
8e:fb:96:14:1d:79:0e:51:55:98:b1:e5:ba:a5:05:b9:8c:98:
a1:58:fb:ad:92:7c:f6:5c:84:d4:32:be:8d:61:f2:1c:ec:2b:
bb:1b:9f:91:48:6d:28:5e:a6:9f:7b:47:a1:7b:61:f9:49:70:
2a:d8:85:8c:09:67:48:43:d7:a7:e6:62:e6:e6:11:52:7e:e6:
a8:fe:53:04:85:13:9d:46:e0:9e:04:93:e0:f3:79:06:2b:cc:
d1:0d:f7:a6:21:57:34:42:e1:6d:b6:d2:c5:b6:98:d8:18:e5:
52:8f:78:b7:63:67:64:ad:2e:ca:20:83:3a:d8:81:ab:e0:19:
54:62:16:5e:f8:c2:b1:bf:ab:a7:ea:ed:ac:fd:06:6e:89:1e:
4e:9a:b6:d9:e6:f8:a4:c6:89:18:65:03:c5:5c:99:5b:03:c7:
6c:d2:0a:0a:b2:f9:c1:2b:4c:43:c0:58:c8:10:7c:f6:5d:c3:
45:87:e2:05
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZQl/ZZ74Thrr/jpjaGbSv6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmViMDNkMjExOTk2ZTk5YTQ5ZTNjM2Y5Y2U0YjNmMmExNTcyM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb7mYO+XNODJu1EwLNi7JN/CCiRQ
XFIoWMp7A90cf6yEdzLKx5Kif+VBemkoQr0SOhWgzcAnYtLoeHNq3PRFBvy7hMFD
Hkb0l0BUvv3t+bvDxkvitVYQkNh8bIbJORVUuJe4rJSSqbh6asuI6MfcR9B+crHc
BJ8rnw/0pfYRZpUq29hpPS+AmeufxcALzUTitjQxPo7w4PkarT4AP/009rjSXcWs
KGLAgv3DrgwrULqN+YkQZXiir0Ehv3AZEXSA8I1n7RUNol1GxAoy8NwAKtNBbVxr
H93wDG3XFTAHssVPgtk/U9IMJUXgTd6Ex0HdSMPpNm1cTZ5wlh1tCxdcpwIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFFLrA9IRmW6ZpJ48P5zks/KhVyPFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzY2Njc2
YS0zYmFjLTRiNmQtYTYzOC05NmNkNDJmMGY5NWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNjY2NzZh
LTNiYWMtNGI2ZC1hNjM4LTk2Y2Q0MmYwZjk1Yi8xL1V1c0QwaEdaYnBta25qd19u
T1N6OHFGWEk4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF
BwEHAQH/BC4wLDASBAIAATAMAwQAW8cRAwQCubagMBYEAgACMBADBwAgAQZ8BpwD
BQMqD+uAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4ozANBgkqhkiG9w0BAQsF
AAOCAQEAKYPvMbetsWpw8BgqilcWtEBNwMeRKqYMcif32ZOXKMbfVzfmzSWPvieP
N7GqOPI87EbBClDOblabYgM7iilzdhRiDaHkZKYWjvuWFB15DlFVmLHluqUFuYyY
oVj7rZJ89lyE1DK+jWHyHOwruxufkUhtKF6mn3tHoXth+UlwKtiFjAlnSEPXp+Zi
5uYRUn7mqP5TBIUTnUbgngST4PN5BivM0Q33piFXNELhbbbSxbaY2BjlUo94t2Nn
ZK0uyiCDOtiBq+AZVGIWXvjCsb+rp+rtrP0GbokeTpq22eb4pMaJGGUDxVyZWwPH
bNIKCrL5wStMQ8BYyBB89l3DRYfiBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:05 2025 by rpki-client on console.sobornost.net