Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer (raw, json)
Hash identifier: EPTvz6Bif1zau60LoTF7aikSxUHvoM2u+bRHcNppLv0=
Subject key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424454C1E5F5DC487A68F92EF53D3146C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198068
AS: 199867
IP: 5.45.112.0/20
IP: 5.101.112.0/20
IP: 5.101.176.0/20
IP: 5.188.16.0 -- 5.188.27.255
IP: 45.67.128.0/22
IP: 46.36.216.0/21
IP: 159.253.16.0/21
IP: 181.114.240.0/20
IP: 185.4.72.0/22
IP: 2a03:f480::/32
IP: 2a09:8240::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4c:1e:5f:5d:c4:87:a6:8f:92:ef:53:d3:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:9d:84:72:b4:fb:43:bf:cf:4c:6d:1b:b6:
22:6c:6a:d0:1d:11:a0:6c:a1:19:ce:75:09:1e:db:
6e:17:3b:cc:65:cb:89:06:97:14:4c:ac:0a:f1:0f:
97:70:a9:64:2a:7c:a9:f7:84:64:e5:0e:c6:47:26:
cd:99:c6:5f:e4:ec:d6:da:a4:7f:63:fc:ee:1d:d7:
16:3e:59:0a:08:fc:45:8f:5f:31:61:26:33:5a:60:
18:27:a1:01:6e:e9:a6:9b:07:db:25:3f:84:9b:3f:
5d:5e:d1:ac:e9:11:00:38:4f:b2:8a:20:2e:9a:7a:
c2:92:37:8d:96:a9:4c:c0:e0:2d:64:84:c9:7e:fe:
87:d0:6f:97:bf:20:26:c1:77:92:d7:63:ba:f0:ff:
24:38:15:6f:ef:e4:05:04:46:0d:15:e5:0e:ff:5c:
da:c9:8d:9a:94:0e:2e:ac:f0:45:5d:26:56:c4:9f:
a1:f7:cd:87:17:5b:84:05:e7:5b:a9:3d:8e:7e:eb:
81:0d:1c:94:d7:f2:f7:87:2b:06:75:9b:c4:12:29:
84:f5:e3:e3:80:a8:70:e7:ac:6c:9f:80:4e:0b:b4:
83:7f:c9:c8:af:96:b6:4f:62:ff:f2:b3:2a:f1:ae:
50:e3:13:37:93:77:ff:46:32:8e:c0:23:11:00:a4:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.112.0/20
5.101.112.0/20
5.101.176.0/20
5.188.16.0-5.188.27.255
45.67.128.0/22
46.36.216.0/21
159.253.16.0/21
181.114.240.0/20
185.4.72.0/22
IPv6:
2a03:f480::/32
2a09:8240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198068
199867
Signature Algorithm: sha256WithRSAEncryption
2c:20:33:08:9e:dd:b5:9b:c4:b2:b8:53:0d:fe:e9:3b:2e:bb:
01:38:f9:0c:03:5e:5f:bc:7a:e0:68:25:f6:11:f9:d3:0d:18:
6c:66:cf:2d:61:fb:07:41:2c:08:e3:50:59:c0:1e:18:2f:8c:
2e:c6:ce:1b:8b:0d:19:23:cb:ff:9a:94:a2:ee:a0:a1:c7:ec:
a1:73:63:96:d2:59:5f:a9:a9:4a:21:2a:ae:5d:44:ca:1d:03:
ee:9b:4b:d2:9a:dc:13:f1:85:cb:34:35:eb:2a:81:14:11:dd:
ee:cb:6c:1f:75:62:f0:6d:24:90:6c:ac:52:c4:8d:29:05:95:
91:32:98:14:69:57:54:4e:6e:06:4d:00:37:74:81:fd:a1:1a:
73:35:a8:3c:18:17:31:16:01:08:76:d3:82:22:c7:24:74:43:
a6:72:29:1d:91:d5:64:b4:3a:13:47:91:ac:dd:dc:0a:a3:91:
6b:a4:49:d2:3d:74:b7:c7:c6:5a:6a:86:37:94:73:9c:6f:68:
53:0a:e1:37:70:32:ba:72:75:1e:68:d1:3e:a7:6d:b1:8e:e3:
e6:96:7c:cd:a6:74:5d:51:89:07:00:fe:85:c1:99:8d:02:98:
74:fd:a8:ce:cf:a1:b1:c2:ae:8d:a9:67:17:91:39:86:7e:2f:
cb:27:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:06 2025 by rpki-client on console.sobornost.net