Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
File: 1-10-EU-84s8PkgQxxWp8c9_aWn4.cer (raw, json)
Hash identifier: ccaAkRDRwy9CHvUeSuzcnEg0R1KseCsvLutzexaDVWw=
Subject key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FEDF437B0FCC2BE3A336A4A20D30E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57032
IP: 2.57.239.0/24
IP: 185.119.192.0/22
IP: 2a12:9bc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:f4:37:b0:fc:c2:be:3a:33:6a:4a:20:d3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:56:50:81:67:b5:3c:08:aa:f5:87:16:95:
c5:a3:d9:8d:97:5c:bf:6e:7a:8c:70:a3:2d:4b:a8:
ba:c7:83:0a:28:1c:da:4a:24:f5:14:69:9e:f2:3e:
65:a4:81:89:cd:19:93:d9:20:a9:02:33:83:46:b1:
10:d1:31:95:08:ce:da:4f:14:fc:75:49:43:0c:14:
5e:dd:6b:be:97:d2:28:ab:ac:07:40:09:eb:c9:a5:
0f:43:c0:6e:84:1d:06:9c:57:8f:1e:d8:21:37:a6:
02:df:7f:9a:59:ee:1c:e6:ef:45:d6:f3:2b:3c:e7:
e3:64:60:82:99:88:65:e8:fa:81:67:5f:a0:c4:25:
71:ea:be:7f:82:0a:ec:ed:3e:64:7a:19:08:b3:7b:
c2:02:54:7f:5a:28:89:83:3c:23:b3:a9:27:09:1e:
77:e2:d5:a8:2c:56:c3:00:c5:33:4e:06:17:84:c1:
c5:71:b5:5a:1b:7b:12:71:ae:fd:91:55:fd:2c:5f:
98:d5:41:37:d0:89:04:29:d8:81:cf:40:6c:d9:d4:
09:c9:f8:0e:51:45:e7:7a:34:2e:bd:02:80:02:72:
d4:0e:48:d3:0b:76:c9:68:c0:6d:fa:87:7a:3a:17:
17:ed:00:4b:11:3e:db:4b:a9:f6:13:fd:e5:39:e8:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.239.0/24
185.119.192.0/22
IPv6:
2a12:9bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57032
Signature Algorithm: sha256WithRSAEncryption
94:12:9c:10:31:68:3e:62:31:3a:ed:aa:9e:5f:66:f3:db:af:
b0:9a:31:52:e5:ed:2b:aa:e9:aa:8c:ae:69:73:ff:ac:5c:9b:
c7:4c:15:86:b9:03:6f:6e:2d:8a:a1:3a:ad:7d:e2:a2:2b:f8:
ee:0c:d9:37:ce:9a:7f:66:a5:c4:5c:96:bc:1d:9e:89:2e:42:
a2:2e:ef:df:20:18:3a:c9:ab:88:fb:0d:fd:e1:d5:f9:7c:09:
31:2b:7d:5f:e5:2a:30:d5:64:02:6b:10:13:f3:47:e8:7c:9b:
8f:a3:f1:fd:eb:18:a6:fd:8d:eb:d7:e2:26:a6:96:74:67:32:
7c:95:df:a2:15:5b:e2:aa:f4:8c:10:33:61:38:be:6c:56:47:
c8:f9:53:42:dc:fe:e8:d8:a6:48:c7:5a:86:44:78:16:84:05:
cc:61:16:7e:96:34:5f:dc:d9:f9:43:bb:ab:b3:b1:4c:6d:dd:
52:db:b6:eb:62:b3:89:10:da:3c:37:a0:d4:cb:23:eb:ee:b2:
2f:dc:12:1b:7a:1a:a6:8d:da:e9:ff:f4:be:6d:58:6d:0e:f0:
83:2d:d8:52:4e:b4:94:68:86:98:47:0f:f3:67:5b:25:1a:f1:
fc:d4:88:27:40:76:a5:86:92:74:cf:bc:45:72:a2:6f:a6:3d:
ae:4f:06:f0
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZQiH+30N7D8wr46M2pKINMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjVkM2UxMTRmYmNlMmNmMGY5MjA0MzFjNTZhN2M3M2RmZGE1YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fpWUIFntTwIqvWHFpXFo9mNl1y/
bnqMcKMtS6i6x4MKKBzaSiT1FGme8j5lpIGJzRmT2SCpAjODRrEQ0TGVCM7aTxT8
dUlDDBRe3Wu+l9Ioq6wHQAnryaUPQ8BuhB0GnFePHtghN6YC33+aWe4c5u9F1vMr
POfjZGCCmYhl6PqBZ1+gxCVx6r5/ggrs7T5kehkIs3vCAlR/WiiJgzwjs6knCR53
4tWoLFbDAMUzTgYXhMHFcbVaG3sSca79kVX9LF+Y1UE30IkEKdiBz0Bs2dQJyfgO
UUXnejQuvQKAAnLUDkjTC3bJaMBt+od6OhcX7QBLET7bS6n2E/3lOegLqQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPtdPhFPvOLPD5IEMcVqfHPf2lp+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2U3MGQ5
OC00MjZlLTQ2ZmUtYWZhZi04MjEzOWYzYjQzM2MvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvZTcwZDk4
LTQyNmUtNDZmZS1hZmFmLTgyMTM5ZjNiNDMzYy8xLzEtMTAtRVUtODRzOFBrZ1F4
eFdwOGM5X2FXbjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF
BQcBBwEB/wQlMCMwEgQCAAEwDAMEAAI57wMEArl3wDANBAIAAjAHAwUDKhKbwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3sgwDQYJKoZIhvcNAQELBQADggEBAJQS
nBAxaD5iMTrtqp5fZvPbr7CaMVLl7Suq6aqMrmlz/6xcm8dMFYa5A29uLYqhOq19
4qIr+O4M2TfOmn9mpcRclrwdnokuQqIu798gGDrJq4j7Df3h1fl8CTErfV/lKjDV
ZAJrEBPzR+h8m4+j8f3rGKb9jevX4iamlnRnMnyV36IVW+Kq9IwQM2E4vmxWR8j5
U0Lc/ujYpkjHWoZEeBaEBcxhFn6WNF/c2flDu6uzsUxt3VLbtutis4kQ2jw3oNTL
I+vusi/cEht6GqaN2un/9L5tWG0O8IMt2FJOtJRohphHD/NnWyUa8fzUiCdAdqWG
knTPvEVyom+mPa5PBvA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:31 2025 by rpki-client