Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
File: VC2XGtPC5DjUoxLRod51GBCspOA.cer (raw, json)
Hash identifier: 1LxYe7pYnnu3HvAfqt79v9ySa1JNRnP0wSgoc9as4WI=
Subject key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C44904E5B37B1BA7A9BD06BB64776
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209490
IP: 171.22.56.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:90:4e:5b:37:b1:ba:7a:9b:d0:6b:b6:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:07:b0:44:11:37:3a:6c:c9:c8:4a:92:b3:
7d:72:1f:77:15:7d:86:35:09:d4:ec:51:19:c8:08:
4d:8e:89:18:d5:7a:e8:9e:9d:14:34:dd:4b:e6:cc:
34:a4:5b:fc:f0:2e:11:f2:c5:fc:5a:63:e2:c6:3b:
99:07:7d:d9:7e:bc:a7:1a:ac:9f:0d:3b:f5:8a:3d:
fb:e9:15:24:77:32:b4:85:83:6b:a3:46:88:99:6b:
28:11:fc:49:7c:54:18:8f:f0:d2:4e:ca:b6:d6:6f:
dc:b9:cb:95:4e:d5:84:4e:52:7d:e0:b2:67:a7:b7:
f2:5c:72:1e:63:b4:a5:a1:59:76:de:43:f9:c5:70:
b2:57:a4:bf:d7:0e:0b:b2:57:77:d6:9f:be:18:9f:
54:3b:89:aa:2c:22:25:e8:8d:41:f4:63:8f:f8:a4:
54:28:c1:dc:ab:07:6c:d7:33:71:cc:9d:a0:6c:58:
0c:61:4f:64:a1:76:35:aa:59:e2:ba:1f:99:55:cd:
97:b3:51:6d:9d:9f:ef:06:5b:21:12:24:0d:0d:54:
b4:a3:34:b1:5f:11:2a:c5:66:50:7d:20:12:0b:72:
6f:af:bc:b7:50:f3:71:a3:54:7a:98:92:b3:50:2e:
21:28:5c:10:32:f5:51:55:a3:89:3e:b3:a3:48:10:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209490
Signature Algorithm: sha256WithRSAEncryption
98:71:5b:62:0b:c4:ee:a3:dc:35:17:71:b7:98:90:f3:19:7a:
27:93:cd:8b:ed:c1:73:3f:c6:7c:67:c4:a3:2c:55:21:0b:19:
5a:52:df:fb:f0:2b:4f:dc:19:68:19:31:4c:e7:9c:07:b0:df:
7b:45:5c:1f:0c:06:95:75:fd:1c:a3:0f:a2:b7:a5:d5:3a:f0:
68:06:d4:1e:75:de:9e:92:d4:fd:02:08:64:10:3d:ba:68:48:
24:46:8a:84:ab:da:c0:cf:2e:71:db:2c:09:3d:f5:cc:ee:e9:
b3:c2:f8:db:b0:c2:90:bc:67:55:98:71:78:b0:eb:21:98:44:
e2:5f:c8:5d:59:28:1d:94:e6:da:58:dc:5a:ba:1c:1f:4e:ea:
06:68:33:6b:c2:f8:3a:b9:b3:e5:c1:86:e3:f2:02:52:52:69:
35:ee:0a:28:88:f6:9b:7d:ba:1f:a5:7b:8e:64:71:2e:aa:23:
5d:d6:ff:e1:b0:b0:b0:b8:0a:2f:9d:64:41:a3:bd:34:06:e7:
a9:a9:31:df:b9:e7:3b:34:24:fe:7e:c9:a2:84:75:d4:48:a8:
fd:b3:40:37:e5:db:f6:59:bd:33:ef:c8:15:02:fe:12:43:cc:
7d:26:ff:79:67:6d:f0:bb:74:01:41:f6:b2:53:d2:80:8b:39:
8b:a0:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:05 2025 by rpki-client on console.sobornost.net