Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.cer (raw, json)
Hash identifier: ycIFKgzKxhlN/KYUQmKKNmI+WnPMxbmdgalcU7eUfP8=
Subject key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EA2E11121FACCABAFAA6A37FD9BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12715
IP: 37.11.0.0/16
IP: 37.14.0.0/15
IP: 37.35.128.0/17
IP: 37.97.124.0/22
IP: 37.132.0.0/14
IP: 62.14.0.0/15
IP: 87.216.0.0/13
IP: 95.16.0.0/13
IP: 146.158.128.0/17
IP: 185.4.188.0/22
IP: 188.76.0.0/14
IP: 212.9.64.0/19
IP: 212.106.192.0/18
IP: 213.179.96.0/19
IP: 2a02:2e00::/27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ea:2e:11:12:1f:ac:ca:ba:fa:a6:a3:7f:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7208a8b85bcb807cad64138543263acb204448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:16:74:8c:96:50:08:52:7b:fe:b5:b9:d0:
c2:4e:07:6a:3c:3d:d9:37:87:03:09:f8:15:fc:d9:
1c:74:9e:88:3f:96:76:96:11:3b:b2:b1:73:75:e0:
43:04:8f:07:fc:63:10:68:4c:9a:29:7d:44:8f:16:
04:4f:03:53:02:6e:d5:1e:3a:34:19:11:f2:db:b6:
09:3d:6b:90:40:e0:d3:aa:c9:1b:a8:10:56:8a:9d:
bd:ef:02:73:c1:0b:d7:97:f8:d6:d7:37:bc:ab:27:
a7:0e:47:60:13:59:61:a2:d1:58:27:31:43:42:c4:
15:7a:2d:8f:73:43:fa:eb:bd:ce:18:89:d5:07:51:
72:cd:6b:0e:20:ab:fc:6b:78:b3:f7:17:b9:12:1c:
3f:b7:a0:30:14:ec:59:df:5b:2f:a7:0d:d0:ef:64:
a4:9d:76:b4:4f:c9:7f:92:4c:bc:b6:78:8f:a6:23:
cb:97:bc:e2:8b:35:50:f0:9b:c2:09:16:a0:bf:67:
fd:df:8e:ef:ab:20:75:6a:80:b0:de:76:5f:7f:d4:
c7:98:48:f2:9c:43:3a:13:3a:c8:76:ba:da:83:03:
f6:f0:63:84:aa:f2:14:ed:b0:f7:1b:b9:56:ed:72:
29:9b:9c:dc:05:f4:1c:93:d7:33:91:ba:8f:73:7b:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.11.0.0/16
37.14.0.0/15
37.35.128.0/17
37.97.124.0/22
37.132.0.0/14
62.14.0.0/15
87.216.0.0/13
95.16.0.0/13
146.158.128.0/17
185.4.188.0/22
188.76.0.0/14
212.9.64.0/19
212.106.192.0/18
213.179.96.0/19
IPv6:
2a02:2e00::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12715
Signature Algorithm: sha256WithRSAEncryption
a1:85:d8:45:5c:0e:f1:c9:b4:a7:d9:a2:c1:72:16:d7:c8:d4:
11:a7:75:fd:64:b5:a3:d3:84:c5:9d:27:e3:5c:ce:a8:68:c0:
6a:dc:2a:8a:c7:e1:14:df:97:32:32:0e:ae:3e:a3:d9:40:eb:
6f:e4:c1:88:15:a6:86:73:ac:28:ce:1b:13:0c:e1:8c:d7:23:
c1:7a:c0:a5:f9:08:f5:78:c2:e3:f8:96:4f:50:0d:ce:3a:2b:
17:b0:2e:98:5e:68:98:9e:8c:f3:1b:da:33:1d:43:3a:2f:bb:
36:51:91:5e:90:30:c9:17:3a:37:ae:dd:00:b5:42:0e:49:a2:
8d:82:4c:8c:f8:f8:8a:2e:9d:36:fd:05:a7:95:d2:7e:ff:a9:
45:c7:52:ba:a3:db:5f:b3:77:0c:a3:7d:f4:e1:75:ee:d0:6a:
93:4f:d6:07:fa:11:89:38:cb:73:e4:48:97:86:c4:a7:2f:21:
83:fc:4d:3f:5e:08:0e:cd:ef:c3:2c:65:dd:b9:22:b5:c7:25:
39:7f:0a:3c:4d:7b:23:fa:a2:0e:0a:c3:98:51:b0:5d:0a:a5:
6c:ce:f4:14:60:03:9b:f2:4d:e2:26:7b:83:e0:bb:7b:ac:e8:
90:be:8f:f7:2d:c6:3d:2d:29:e0:1f:6a:bf:48:ca:3b:f6:ad:
20:84:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:17 2025 by rpki-client on console.sobornost.net