Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
File: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer (raw, json)
Hash identifier: +7L4Lbqq2bsPo8TmEcKTflduzqs8tjD9lUE9P8Lq2bg=
Subject key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488C254FE53CFBD537009460620187
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198031
IP: 91.146.120.0/21
IP: 2a03:a780::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8c:25:4f:e5:3c:fb:d5:37:00:94:60:62:01:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:73:5d:ec:39:c4:23:32:01:03:04:c7:7e:
3a:11:42:1c:f7:df:19:94:14:b1:b3:63:1d:e7:85:
71:ab:9b:36:f9:00:db:f3:8f:08:b7:5c:01:c8:c1:
cd:c9:a4:71:92:57:35:7f:ea:c4:ec:5d:4e:fb:34:
3c:58:cb:65:b5:29:29:16:48:70:7f:62:a6:1c:d3:
ef:fc:a2:87:75:72:51:b0:cb:10:14:38:58:a0:b6:
e7:b4:77:7d:62:32:d0:da:58:39:c0:5d:7b:ed:36:
fc:ba:3a:88:58:31:ac:51:65:ff:99:ba:7e:a5:bb:
a8:2c:2a:34:5f:b8:01:fc:b8:88:89:97:bc:24:cc:
96:9c:c6:bc:b5:e6:53:0e:a2:67:e6:3c:7d:e0:74:
2a:be:f1:65:76:c3:da:19:2e:c9:cf:50:18:48:cc:
12:e9:14:ae:fa:fa:4c:ea:61:09:71:7d:39:db:8d:
cf:1d:56:41:2e:e5:62:af:54:6d:b3:30:e8:8a:57:
e1:56:dc:3f:26:35:88:0a:11:55:f0:b7:94:1e:00:
fc:73:7d:64:49:df:4f:9d:aa:27:f0:2f:7c:8d:af:
3e:34:06:ff:e4:0d:70:6c:6c:9e:2e:91:d4:f9:53:
7d:82:f9:2f:15:b7:24:79:16:34:39:27:d4:a1:ba:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.120.0/21
IPv6:
2a03:a780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198031
Signature Algorithm: sha256WithRSAEncryption
53:a5:6a:8a:e1:f0:16:25:92:dc:f2:aa:1f:c5:f6:8b:c3:cf:
29:2b:ff:3b:a8:16:87:b3:38:7e:7a:c1:77:24:12:78:a0:ba:
34:c1:10:6c:63:48:3e:b0:56:96:d3:9c:c8:66:db:07:9e:98:
02:57:c6:44:67:d0:9d:66:6c:0c:11:bb:6c:cd:0f:42:f3:68:
75:8b:8c:50:8a:2e:e4:37:d4:70:4c:81:7b:12:6b:0a:50:2a:
fe:ac:30:11:58:2e:60:a1:0f:24:93:f5:47:a3:45:f5:26:b5:
c1:0a:fb:52:d1:72:1e:17:09:0b:40:bf:22:30:75:ec:da:4f:
0c:00:3e:b5:7e:c6:6c:32:94:b8:c8:b5:88:fd:85:72:80:fe:
91:43:92:57:d2:aa:f0:64:ec:a4:d3:3b:1b:7b:61:bb:b0:7a:
05:9d:9d:c3:3e:30:54:fe:7e:66:16:78:8d:cf:60:ca:19:2e:
ac:3e:fe:4b:45:2e:3b:2e:ee:c5:e5:20:53:86:04:62:55:c9:
69:7d:21:7b:59:1b:ea:39:10:c5:7d:7b:13:d5:0c:4a:1e:4d:
15:f2:b8:d5:e0:d7:92:18:f4:37:62:81:98:d5:47:9d:fd:ab:
08:7d:ce:9f:54:d2:17:8b:d3:fd:dd:13:df:23:12:27:9d:99:
cc:07:d0:6d
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZQnSIwlT+U8+9U3AJRgYgGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTRmNDRiYTgxNGI4Yzk0YjdhZmUzMDIyZWUwMTQ2MmY1MTNiZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26dzXew5xCMyAQMEx346EUIc998Z
lBSxs2Md54Vxq5s2+QDb848It1wByMHNyaRxklc1f+rE7F1O+zQ8WMtltSkpFkhw
f2KmHNPv/KKHdXJRsMsQFDhYoLbntHd9YjLQ2lg5wF177Tb8ujqIWDGsUWX/mbp+
pbuoLCo0X7gB/LiIiZe8JMyWnMa8teZTDqJn5jx94HQqvvFldsPaGS7Jz1AYSMwS
6RSu+vpM6mEJcX05243PHVZBLuVir1RtszDoilfhVtw/JjWIChFV8LeUHgD8c31k
Sd9Pnaon8C98ja8+NAb/5A1wbGyeLpHU+VN9gvkvFbckeRY0OSfUobqxMwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPpPRLqBS4yUt6/jAi7gFGL1E7/3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzkxMjEx
MC02ZmMyLTQyNGEtYTk1NS1kYTYyMWNkNzU2ZDcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvOTEyMTEw
LTZmYzItNDI0YS1hOTU1LWRhNjIxY2Q3NTZkNy8xLzEtazlFdW9GTGpKUzNyLU1D
THVBVVl2VVR2X2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEA1uSeDANBAIAAjAHAwUAKgOngDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDBY8wDQYJKoZIhvcNAQELBQADggEBAFOlaorh8BYl
ktzyqh/F9ovDzykr/zuoFoezOH56wXckEnigujTBEGxjSD6wVpbTnMhm2weemAJX
xkRn0J1mbAwRu2zND0LzaHWLjFCKLuQ31HBMgXsSawpQKv6sMBFYLmChDyST9Uej
RfUmtcEK+1LRch4XCQtAvyIwdezaTwwAPrV+xmwylLjItYj9hXKA/pFDklfSqvBk
7KTTOxt7YbuwegWdncM+MFT+fmYWeI3PYMoZLqw+/ktFLjsu7sXlIFOGBGJVyWl9
IXtZG+o5EMV9exPVDEoeTRXyuNXg15IY9DdigZjVR539qwh9zp9U0heL0/3dE98j
EiedmcwH0G0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:33 2025 by rpki-client