Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer (raw, json)
Hash identifier: 90qYi7E5FciEh7xtruamITsdewxQ1hTgqZFP7jJOZZA=
Subject key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97F556A5B801318AB7D4025ECCA02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208897
IP: 45.15.132.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7f:55:6a:5b:80:13:18:ab:7d:40:25:ec:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:30:15:22:87:9c:a5:04:f7:39:22:59:1f:
2d:20:fb:cb:58:11:50:8c:16:60:f4:e1:0b:6a:19:
41:2f:95:fc:be:ae:ab:79:2a:69:64:18:2c:bf:4f:
95:ab:e5:95:d6:3d:38:93:11:97:96:7c:02:a4:7b:
ae:6b:60:cb:d2:90:80:4b:d4:09:87:d7:75:85:21:
40:4b:6c:61:5a:8d:af:f5:2c:9a:6f:94:a7:b4:d8:
35:d2:d3:16:16:19:10:2a:34:60:72:00:88:11:b7:
ce:89:b5:be:33:6b:9b:24:85:0b:40:5c:fa:e6:10:
0b:16:af:bc:ef:c3:ed:0d:41:70:c7:e8:7e:68:cb:
96:9d:39:1a:05:1d:c8:33:d9:48:c1:a8:0f:5f:99:
b1:1d:31:6f:1e:e6:0e:e3:8b:64:a5:42:86:c0:31:
65:51:f3:86:53:e6:0a:7f:77:fb:dd:2c:14:62:24:
2e:d1:8b:72:ea:7b:6c:8d:40:d4:60:f5:90:05:82:
9d:ec:e7:23:f6:c5:2f:c2:ba:c8:29:13:9d:05:54:
9e:d8:24:0a:50:91:89:eb:25:23:9f:ec:39:a4:c1:
21:e0:6b:6d:04:c4:b3:39:6f:68:78:ca:09:25:b1:
6d:88:c9:12:b7:81:a4:13:43:e5:aa:76:93:c7:cd:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208897
Signature Algorithm: sha256WithRSAEncryption
77:c6:51:f6:84:d2:5a:65:2e:4a:09:aa:b1:3c:d6:ff:73:5f:
63:d0:a6:a8:63:c0:45:28:0b:52:d7:ce:ff:ae:d2:61:f0:d3:
95:d1:3b:1a:fe:cb:0a:1c:c1:ab:90:ed:f5:23:df:d9:fc:27:
ce:30:f0:9a:03:9c:f2:82:c6:4e:8e:f0:61:34:15:bf:c4:42:
81:b1:d5:03:77:9f:ee:49:1e:dd:f8:d3:e1:53:44:07:35:64:
b1:a4:3b:e6:b0:25:4e:7d:12:b7:e7:f5:9b:ec:3d:61:39:97:
61:88:6e:0f:3d:00:bb:f6:01:65:3c:61:83:f5:f7:f9:82:ec:
bc:92:45:98:83:3b:85:6f:0f:5f:df:60:c7:a0:da:1f:58:79:
7c:cf:4c:d8:31:7d:88:83:a1:69:b3:85:11:4a:40:8c:1d:a7:
5a:24:ac:b5:b4:3d:4c:f4:2f:60:fd:5c:57:74:22:5b:70:bf:
96:04:a9:a2:93:a1:57:6d:de:4c:08:a8:67:29:69:44:cc:e5:
46:6d:00:62:76:1f:43:81:1d:e5:87:ab:c5:83:ec:c9:65:cb:
05:a6:f6:ba:94:cb:3f:ba:09:21:77:43:fb:be:a8:b4:57:71:
0f:59:57:24:02:c4:ed:b3:77:ab:6c:a8:b6:91:1e:19:20:94:
91:e6:ad:4c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQm2X9ValuAExirfUAl7MoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTEwMzg5M2ZjMzFlOWQ5NGQyNjVhYmE5MGNjN2RkNTdiYzIzNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xYwFSKHnKUE9zkiWR8tIPvLWBFQ
jBZg9OELahlBL5X8vq6reSppZBgsv0+Vq+WV1j04kxGXlnwCpHuua2DL0pCAS9QJ
h9d1hSFAS2xhWo2v9Syab5SntNg10tMWFhkQKjRgcgCIEbfOibW+M2ubJIULQFz6
5hALFq+878PtDUFwx+h+aMuWnTkaBR3IM9lIwagPX5mxHTFvHuYO44tkpUKGwDFl
UfOGU+YKf3f73SwUYiQu0Yty6ntsjUDUYPWQBYKd7Ocj9sUvwrrIKROdBVSe2CQK
UJGJ6yUjn+w5pMEh4GttBMSzOW9oeMoJJbFtiMkSt4GkE0PlqnaTx81YuwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFPkQOJP8MenZTSZaupDMfdV7wjdnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2NkYzk5
NS05YTkxLTRlYzEtYWVkZS1mNmUwZjdkMTc0NDAvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1
LTlhOTEtNGVjMS1hZWRlLWY2ZTBmN2QxNzQ0MC8xLzEtUkE0a193eDZkbE5KbHE2
a014OTFYdkNOMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0PhDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDMAEwDQYJKoZIhvcNAQELBQADggEBAHfGUfaE0lplLkoJqrE81v9zX2PQpqhj
wEUoC1LXzv+u0mHw05XROxr+ywocwauQ7fUj39n8J84w8JoDnPKCxk6O8GE0Fb/E
QoGx1QN3n+5JHt340+FTRAc1ZLGkO+awJU59Erfn9ZvsPWE5l2GIbg89ALv2AWU8
YYP19/mC7LySRZiDO4VvD1/fYMeg2h9YeXzPTNgxfYiDoWmzhRFKQIwdp1okrLW0
PUz0L2D9XFd0Iltwv5YEqaKToVdt3kwIqGcpaUTM5UZtAGJ2H0OBHeWHq8WD7Mll
ywWm9rqUyz+6CSF3Q/u+qLRXcQ9ZVyQCxO2zd6tsqLaRHhkglJHmrUw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:31 2025 by rpki-client