Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
File: 0mjZoqZF18wv0lOzZwQIBV5W__k.cer (raw, json)
Hash identifier: c1anLZnAFTqZzacOYJz36L5nda+Tp89vqCcYBd8qBvo=
Subject key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C924613B31B9DD053CC1FDA19B80F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35480
IP: 193.192.48.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:46:13:b3:1b:9d:d0:53:cc:1f:da:19:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:c4:72:ca:dd:37:be:3a:41:13:52:5f:df:
49:41:bd:84:a1:35:92:cb:15:85:72:ca:22:88:8e:
aa:21:00:0a:76:38:0d:58:51:98:ec:0c:12:d3:42:
2c:5f:28:ec:68:da:87:d6:08:a6:b0:48:5a:00:58:
9f:e7:55:2e:ea:cd:e2:60:03:10:82:96:0b:74:6a:
87:a6:73:5e:26:8a:00:be:a6:ad:91:86:c5:34:ac:
41:14:54:36:a1:7a:82:2b:26:e8:96:6a:27:da:2e:
f0:dc:47:75:64:78:de:c8:e7:8a:ac:6d:de:a8:ee:
0f:36:26:67:04:68:b7:e1:37:87:5c:77:df:cc:2b:
d6:0d:f2:d0:e6:08:a0:2e:43:29:82:e5:de:dc:3f:
ab:81:d2:0a:58:37:85:4f:88:00:94:2d:0c:bc:1e:
81:8e:69:ef:f7:6d:40:e3:36:94:10:ec:6b:f0:e4:
ea:2a:4a:50:af:d5:6b:21:72:ed:2c:14:3a:54:fe:
8f:c7:ab:23:f4:6a:17:96:5c:e4:b5:f8:eb:a0:89:
3d:81:4e:76:72:48:69:02:77:37:a8:60:af:9d:09:
b1:53:af:86:09:89:5d:c6:6f:f5:73:8c:1f:bc:2c:
ff:75:60:40:34:42:a4:b0:b8:45:99:5f:68:d8:d0:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.48.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35480
Signature Algorithm: sha256WithRSAEncryption
2b:a0:5d:c6:41:96:fd:85:a8:11:73:c6:10:f6:d1:e9:2b:56:
e3:bd:a8:67:f6:d9:8c:0e:56:ff:9b:01:c8:e6:ac:b4:ba:1b:
59:50:36:18:37:51:af:6a:09:79:3e:ef:b5:10:a9:d6:72:c9:
3d:28:e6:55:49:26:06:58:61:c2:a4:93:21:e6:8f:85:9f:3e:
8a:2e:9e:0b:79:38:0e:b9:76:aa:c4:5c:70:5e:bf:9c:e1:ac:
38:08:ee:9f:cc:0f:f4:ae:0c:64:22:02:77:d4:1a:94:24:0e:
97:46:2a:15:3a:0e:6e:9e:d2:63:01:f5:ae:45:5a:4b:bf:34:
53:28:d4:8a:4f:8f:1a:6c:f7:fe:ac:c9:0d:57:c2:ed:ef:1f:
0d:8a:e3:1d:57:7f:0f:dd:6a:83:5c:53:73:2b:69:fe:f5:de:
4d:7c:07:62:69:3e:5c:5d:d3:2e:bd:db:bf:9c:3d:be:15:ef:
ce:c0:4d:30:57:06:13:29:0b:e6:40:75:46:90:6f:de:57:97:
48:d1:fc:a5:11:5b:f0:52:9b:c5:9d:75:20:87:62:e8:aa:50:
44:93:4f:e1:8b:40:ba:69:75:3b:10:7e:21:c2:ed:11:35:ab:
0f:2d:7c:c5:fc:c0:24:89:e8:bd:1d:80:1c:f0:60:28:36:c4:
99:3d:b3:c9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjJJGE7MbndBTzB/aGbgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjY4ZDlhMmE2NDVkN2NjMmZkMjUzYjM2NzA0MDgwNTVlNTZmZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXzEcsrdN746QRNSX99JQb2EoTWS
yxWFcsoiiI6qIQAKdjgNWFGY7AwS00IsXyjsaNqH1gimsEhaAFif51Uu6s3iYAMQ
gpYLdGqHpnNeJooAvqatkYbFNKxBFFQ2oXqCKybolmon2i7w3Ed1ZHjeyOeKrG3e
qO4PNiZnBGi34TeHXHffzCvWDfLQ5gigLkMpguXe3D+rgdIKWDeFT4gAlC0MvB6B
jmnv921A4zaUEOxr8OTqKkpQr9VrIXLtLBQ6VP6Px6sj9GoXllzktfjroIk9gU52
ckhpAnc3qGCvnQmxU6+GCYldxm/1c4wfvCz/dWBANEKksLhFmV9o2NBV2QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNJo2aKmRdfML9JTs2cECAVeVv/5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzQ0MDM4
Yi04MDMxLTQ0ZTAtOTFjNC1jYzU2NzZjN2RlOWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNDQwMzhi
LTgwMzEtNDRlMC05MWM0LWNjNTY3NmM3ZGU5Zi8xLzBtalpvcVpGMTh3djBsT3pa
d1FJQlY1V19fay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwcAwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCKmDANBgkqhkiG9w0BAQsFAAOCAQEAK6BdxkGW/YWoEXPGEPbR6StW472oZ/bZ
jA5W/5sByOastLobWVA2GDdRr2oJeT7vtRCp1nLJPSjmVUkmBlhhwqSTIeaPhZ8+
ii6eC3k4Drl2qsRccF6/nOGsOAjun8wP9K4MZCICd9QalCQOl0YqFToObp7SYwH1
rkVaS780UyjUik+PGmz3/qzJDVfC7e8fDYrjHVd/D91qg1xTcytp/vXeTXwHYmk+
XF3TLr3bv5w9vhXvzsBNMFcGEykL5kB1RpBv3leXSNH8pRFb8FKbxZ11IIdi6KpQ
RJNP4YtAuml1OxB+IcLtETWrDy18xfzAJInovR2AHPBgKDbEmT2zyQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:00 2025 by rpki-client