Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
File: rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer (raw, json)
Hash identifier: edTA1HW6vMaAGTd/HZs92UwwVkH7KbLjhFxVpYkGonc=
Subject key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216242A5E62C40B176D60E26E29804
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13103
AS: 20850
AS: 25229
AS: 43010
AS: 43266
IP: 37.46.216.0/21
IP: 45.15.232.0/22
IP: 77.120.0.0 -- 77.120.55.255
IP: 77.120.60.0 -- 77.121.13.255
IP: 77.121.15.0 -- 77.121.31.255
IP: 77.121.64.0/18
IP: 77.123.128.0/18
IP: 77.244.32.0/20
IP: 82.144.192.0/19
IP: 109.201.224.0/19
IP: 141.170.224.0/19
IP: 193.189.96.0/23
IP: 2a00:ac80::/32
IP: 2a02:7e8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:62:42:a5:e6:2c:40:b1:76:d6:0e:26:e2:98:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:5e:70:10:19:83:e5:26:1a:37:c4:fd:8b:
75:03:fe:fa:59:fc:c4:9f:94:99:6c:6c:8d:59:fd:
51:71:56:0b:68:72:cd:11:07:c9:53:5f:c9:37:0a:
0a:2b:f1:a2:64:2b:c0:1b:71:8a:91:02:c8:40:e6:
39:bd:a7:7d:95:3e:0e:bc:82:16:07:0d:35:26:55:
6a:fc:ed:2d:15:26:20:33:69:74:83:c6:c3:be:46:
31:36:4a:2f:b3:f0:0c:93:6e:25:d9:8f:f4:92:8d:
78:d6:4b:8f:e5:5a:fd:3e:29:9b:a2:ee:05:a9:1a:
b7:e3:48:8f:78:04:8e:49:27:6f:13:e7:33:e7:9a:
2b:a9:09:fc:6e:dd:68:ff:b4:73:9c:c6:97:08:b6:
ce:e7:60:65:ae:67:c5:45:b0:d6:14:72:6b:cf:a0:
b5:b7:38:9e:2c:af:b8:62:f2:43:64:44:ff:c4:3f:
4b:0a:cd:b3:e3:07:41:b5:2c:97:8d:28:7d:0b:b3:
40:b0:20:3c:38:64:90:58:44:15:c6:0c:18:fc:34:
29:25:09:4c:d6:28:45:5f:90:74:aa:b2:81:b7:e2:
d1:29:09:c2:22:ef:ba:80:89:80:b5:9f:1f:65:f8:
fa:a2:6a:1d:53:d6:5f:e4:af:ec:5b:18:63:b4:76:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.216.0/21
45.15.232.0/22
77.120.0.0-77.120.55.255
77.120.60.0-77.121.13.255
77.121.15.0-77.121.31.255
77.121.64.0/18
77.123.128.0/18
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/19
193.189.96.0/23
IPv6:
2a00:ac80::/32
2a02:7e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13103
20850
25229
43010
43266
Signature Algorithm: sha256WithRSAEncryption
63:24:c5:07:db:f1:a9:70:7e:f9:b9:e3:08:e9:58:91:7a:e1:
bf:5d:32:68:74:80:c7:5e:49:fd:b8:c5:9c:4d:ed:1b:4d:20:
a8:51:9d:e7:55:a9:14:bc:24:22:43:7b:db:ba:3e:6d:a7:90:
6a:58:22:09:f1:b6:a9:4c:43:4b:5f:9c:83:b0:e8:ab:69:96:
ac:42:2e:40:82:8f:e6:90:66:96:53:11:8a:cc:60:a8:64:a7:
0b:06:79:3c:fe:e7:36:07:d4:95:67:a7:be:6d:a6:8c:01:7d:
a9:83:ea:0f:c3:29:17:92:e4:5e:e7:a5:af:92:58:b9:2c:80:
38:24:0c:b7:c7:da:aa:89:30:0c:93:71:0d:90:ec:7b:43:79:
ee:6d:e7:60:98:57:34:68:49:6f:12:b3:c7:e9:77:3d:81:5e:
86:81:51:7b:e7:8e:a5:cd:64:b2:2e:e2:f7:f2:85:67:61:57:
51:fe:d4:46:c2:93:ce:4a:50:6b:2c:f9:85:91:6c:5c:9d:ba:
49:98:03:63:ac:68:1b:17:15:13:91:74:3a:d8:0e:31:cc:1f:
a0:db:45:11:15:0d:7d:5b:39:b4:59:e9:1f:a5:e4:12:0b:d1:
9f:17:2c:57:63:8a:1a:38:1b:89:32:8d:cf:35:e3:7d:ce:29:
0b:0d:07:07
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAZQlIWJCpeYsQLF21g4m4pgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDVlZGEwYTFlNzQ3OWM0Y2E3OGZlNDFjNThkMTdlOWQxM2I2N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo1ecBAZg+UmGjfE/Yt1A/76WfzE
n5SZbGyNWf1RcVYLaHLNEQfJU1/JNwoKK/GiZCvAG3GKkQLIQOY5vad9lT4OvIIW
Bw01JlVq/O0tFSYgM2l0g8bDvkYxNkovs/AMk24l2Y/0ko141kuP5Vr9Pimbou4F
qRq340iPeASOSSdvE+cz55orqQn8bt1o/7RznMaXCLbO52BlrmfFRbDWFHJrz6C1
tzieLK+4YvJDZET/xD9LCs2z4wdBtSyXjSh9C7NAsCA8OGSQWEQVxgwY/DQpJQlM
1ihFX5B0qrKBt+LRKQnCIu+6gImAtZ8fZfj6omodU9Zf5K/sWxhjtHZPrQIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFK1e2goedHnEynj+QcWNF+nRO2eqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2ZlYmIx
OC1lNzhhLTRkMTItODBhMi05NDRjZTdlZWIxNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZmViYjE4
LWU3OGEtNGQxMi04MGEyLTk0NGNlN2VlYjE1NC8xL3JWN2FDaDUwZWNUS2VQNUJ4
WTBYNmRFN1o2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF
BQcBBwEB/wR/MH0wZQQCAAEwXwMEAyUu2AMEAi0P6DALAwMDTXgDBANNeDAwDAME
Ak14PAMEAU15DDAMAwQATXkPAwQFTXkAAwQGTXlAAwQGTXuAAwQETfQgAwQFUpDA
AwQFbcngAwQFjargAwQBwb1gMBQEAgACMA4DBQAqAKyAAwUAKgIH6DArBggrBgEF
BQcBCAEB/wQcMBqgGDAWAgIzLwICUXICAmKNAgMAqAICAwCpAjANBgkqhkiG9w0B
AQsFAAOCAQEAYyTFB9vxqXB++bnjCOlYkXrhv10yaHSAx15J/bjFnE3tG00gqFGd
51WpFLwkIkN727o+baeQalgiCfG2qUxDS1+cg7Doq2mWrEIuQIKP5pBmllMRisxg
qGSnCwZ5PP7nNgfUlWenvm2mjAF9qYPqD8MpF5LkXuelr5JYuSyAOCQMt8faqokw
DJNxDZDse0N57m3nYJhXNGhJbxKzx+l3PYFehoFRe+eOpc1ksi7i9/KFZ2FXUf7U
RsKTzkpQayz5hZFsXJ26SZgDY6xoGxcVE5F0OtgOMcwfoNtFERUNfVs5tFnpH6Xk
EgvRnxcsV2OKGjgbiTKNzzXjfc4pCw0HBw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:59 2025 by rpki-client on console.sobornost.net