Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
File: vMBbyedz38ikm7QwgluXRt1BxPE.cer (raw, json)
Hash identifier: qO82bhbVW+2VEuEREBumABKC17YvgDB63p9cOGC2Nsc=
Subject key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C57C83FE13EAD8DE9AC823024496F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31264
AS: 197519
AS: 198931
IP: 85.208.88.0/22
IP: 95.128.104.0/21
IP: 109.68.176.0/21
IP: 176.221.88.0/21
IP: 185.7.136.0/22
IP: 185.11.0.0/22
IP: 185.51.232.0/22
IP: 185.80.60.0/22
IP: 185.120.100.0/22
IP: 185.220.208.0/22
IP: 217.173.240.0/20
IP: 2001:67c:2a08::/48
IP: 2a00:1f18::/29
IP: 2a02:2838::/32
IP: 2a03:43c0::/32
IP: 2a05:7b00::/29
IP: 2a06:9900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:57:c8:3f:e1:3e:ad:8d:e9:ac:82:30:24:49:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:1d:2c:41:bc:07:a4:b5:b3:51:67:bd:a7:
bb:71:ab:78:07:cc:16:23:0e:e0:35:fc:35:65:fb:
e1:59:1b:5a:80:00:9b:eb:9c:1c:c0:9b:3b:ab:46:
f5:46:8e:1c:6a:6a:d8:53:03:00:de:fa:95:53:43:
72:62:62:1d:16:76:e0:63:fe:3d:39:2b:91:2a:21:
42:04:e2:ca:a5:ea:e4:70:80:a4:cd:81:ef:d0:a1:
bb:7e:fd:88:bd:8b:44:03:1e:d0:82:f6:71:f0:67:
1c:00:ef:a7:57:bc:20:eb:dd:16:e2:f6:40:ec:b7:
a6:af:ac:53:29:8b:7c:5d:4a:4c:07:3f:3f:d2:02:
87:5b:6b:a2:95:b3:dd:89:a2:f0:2b:8f:77:6a:37:
f9:30:ac:c1:12:6f:07:f3:ff:96:1b:98:91:0d:8f:
7e:9b:58:c7:dc:d5:2a:1a:0d:19:d5:cf:bc:4e:73:
dd:f8:46:06:fc:5e:7e:56:6b:37:9c:de:79:bb:a0:
08:74:e0:b8:2f:3c:dc:4f:06:75:24:f1:33:71:0d:
e6:05:e4:cb:06:b3:9e:d7:36:74:8b:05:31:fb:ef:
b9:f2:06:4e:65:72:c6:de:06:02:29:6a:a9:d5:3d:
56:38:95:93:6a:5e:2f:2d:b7:d4:28:10:25:11:0d:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.88.0/22
95.128.104.0/21
109.68.176.0/21
176.221.88.0/21
185.7.136.0/22
185.11.0.0/22
185.51.232.0/22
185.80.60.0/22
185.120.100.0/22
185.220.208.0/22
217.173.240.0/20
IPv6:
2001:67c:2a08::/48
2a00:1f18::/29
2a02:2838::/32
2a03:43c0::/32
2a05:7b00::/29
2a06:9900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31264
197519
198931
Signature Algorithm: sha256WithRSAEncryption
a3:47:3d:f9:6c:78:9f:c8:6a:17:f4:12:11:de:4b:5d:58:e5:
e0:3f:9e:db:ed:3b:1c:c6:99:76:b0:53:d9:35:e1:e4:a8:60:
a7:5e:f4:c2:6b:92:15:f8:94:73:55:0f:04:83:33:24:8d:94:
22:a8:f3:54:6b:5f:a2:e3:a2:91:78:89:03:61:74:3a:07:55:
94:ea:33:8c:a8:37:ef:97:61:cd:52:79:5c:ac:f6:03:b9:e8:
04:08:0c:67:f8:96:88:3f:75:1e:a3:4c:44:04:42:1b:48:b8:
77:59:a4:9f:49:70:36:2d:fb:9c:cc:fd:46:b3:66:16:38:55:
89:13:29:1e:61:54:7f:6d:f9:eb:b2:c4:be:24:e7:90:26:a3:
5a:e8:25:24:7e:12:eb:c7:00:55:86:44:60:20:27:aa:b0:da:
90:9e:9b:59:cb:c2:55:88:09:70:36:c9:2a:f7:e3:90:b4:71:
73:3e:9d:48:21:dc:74:a6:a8:ab:c8:f4:16:63:8e:24:3f:1a:
c6:49:13:6b:f6:52:2c:16:f6:f5:6f:92:32:fb:8c:ce:28:f2:
18:41:9f:c5:2e:ca:5a:51:16:19:64:6f:6e:f4:7e:1c:d1:2e:
ce:35:0a:ab:88:59:a1:43:d6:04:fe:e8:2f:d9:a2:a0:be:68:
f8:c8:34:60
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAZQfjFfIP+E+rY3prIIwJElvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2MwNWJjOWU3NzNkZmM4YTQ5YmI0MzA4MjViOTc0NmRkNDFjNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTwdLEG8B6S1s1Fnvae7cat4B8wW
Iw7gNfw1ZfvhWRtagACb65wcwJs7q0b1Ro4camrYUwMA3vqVU0NyYmIdFnbgY/49
OSuRKiFCBOLKperkcICkzYHv0KG7fv2IvYtEAx7QgvZx8GccAO+nV7wg690W4vZA
7Lemr6xTKYt8XUpMBz8/0gKHW2uilbPdiaLwK493ajf5MKzBEm8H8/+WG5iRDY9+
m1jH3NUqGg0Z1c+8TnPd+EYG/F5+Vms3nN55u6AIdOC4LzzcTwZ1JPEzcQ3mBeTL
BrOe1zZ0iwUx+++58gZOZXLG3gYCKWqp1T1WOJWTal4vLbfUKBAlEQ2qqwIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFLzAW8nnc9/IpJu0MIJbl0bdQcTxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2RhN2Yy
NC00MGQwLTRhNGMtODkwMS03MjJlMmRlMzdmMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZGE3ZjI0
LTQwZDAtNGE0Yy04OTAxLTcyMmUyZGUzN2YwNi8xL3ZNQmJ5ZWR6Mzhpa203UXdn
bHVYUnQxQnhQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGQBggrBgEF
BQcBBwEB/wSBgDB+MEgEAgABMEIDBAJV0FgDBANfgGgDBANtRLADBAOw3VgDBAK5
B4gDBAK5CwADBAK5M+gDBAK5UDwDBAK5eGQDBAK53NADBATZrfAwMgQCAAIwLAMH
ACABBnwqCAMFAyoAHxgDBQAqAig4AwUAKgNDwAMFAyoFewADBQMqBpkAMCMGCCsG
AQUFBwEIAQH/BBQwEqAQMA4CAnogAgMDA48CAwMJEzANBgkqhkiG9w0BAQsFAAOC
AQEAo0c9+Wx4n8hqF/QSEd5LXVjl4D+e2+07HMaZdrBT2TXh5Khgp170wmuSFfiU
c1UPBIMzJI2UIqjzVGtfouOikXiJA2F0OgdVlOozjKg375dhzVJ5XKz2A7noBAgM
Z/iWiD91HqNMRARCG0i4d1mkn0lwNi37nMz9RrNmFjhViRMpHmFUf23567LEviTn
kCajWuglJH4S68cAVYZEYCAnqrDakJ6bWcvCVYgJcDbJKvfjkLRxcz6dSCHcdKao
q8j0FmOOJD8axkkTa/ZSLBb29W+SMvuMzijyGEGfxS7KWlEWGWRvbvR+HNEuzjUK
q4hZoUPWBP7oL9mioL5o+Mg0YA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:10 2025 by rpki-client on console.sobornost.net