Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer (raw, json)
Hash identifier: N4TYcouvOQp/FTiKPKY+VTJagW3TLAxvWfJuqsgpjCE=
Subject key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423692B36449ECD57F95D7246CC921DD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31433
IP: 185.100.192.0/22
IP: 2a06:1840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2b:36:44:9e:cd:57:f9:5d:72:46:cc:92:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:fa:8b:e7:1d:a5:4a:34:f8:4a:20:1e:88:
68:aa:da:dc:51:55:96:dd:38:64:56:97:4b:2a:10:
2e:8c:22:15:d1:59:b0:85:4e:29:d7:1c:2e:fd:f1:
21:ee:b5:2f:70:15:16:14:41:5c:37:48:5c:bd:2a:
0d:0b:30:2b:a5:b3:b3:2f:d8:db:16:d3:1b:29:3c:
9e:58:ed:92:70:bf:94:0f:89:4c:18:df:96:69:91:
3c:61:70:2c:ff:42:4e:99:04:d0:34:cf:94:e9:83:
8f:07:d6:4a:e8:d9:a1:e5:68:29:29:ef:04:88:48:
7e:ae:0e:07:c9:ca:b4:fc:e8:93:48:52:a2:b1:32:
ea:2c:29:d1:3a:52:a7:49:49:65:8a:7c:05:5a:11:
60:a2:b6:d9:c0:eb:5f:e1:6e:65:3c:a1:71:29:b3:
32:05:05:82:be:01:03:01:7f:c3:cc:b5:ba:7f:42:
3d:b1:6a:1e:c0:67:9d:db:c3:83:b0:a1:bf:3b:0e:
34:2f:44:3b:28:c0:89:dc:68:49:d5:3a:ba:b4:6d:
6d:ee:30:9e:3c:38:07:16:e0:95:3a:e9:1a:c5:d7:
bb:7b:21:53:fd:dd:d3:25:e5:46:d5:bb:16:4a:54:
74:37:29:1f:a4:cb:ca:4a:d1:5e:88:dc:05:3f:77:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.192.0/22
IPv6:
2a06:1840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31433
Signature Algorithm: sha256WithRSAEncryption
75:c8:31:c4:6e:83:48:31:df:79:e0:9a:ad:a9:ce:93:29:01:
16:45:7e:59:62:d6:de:9f:42:cf:ed:15:33:a3:cd:9e:bf:76:
9f:82:7d:ab:b0:3b:ef:0f:43:2e:ec:c6:17:cb:72:b3:8a:bc:
f5:ee:70:a4:73:b7:a8:85:a1:73:11:fc:86:a5:0b:2c:a5:a7:
73:15:aa:1a:54:89:c0:ce:93:f8:b6:bd:63:be:c8:11:73:9a:
72:4d:88:39:71:19:bb:bd:83:25:21:b2:be:52:d0:78:72:3a:
4c:b4:1d:6c:1d:a4:77:92:fb:86:6d:d7:5f:4c:64:78:30:74:
2a:49:39:66:c0:df:0c:69:f7:e6:63:79:6f:64:06:6f:e9:5a:
79:7a:3f:3b:d5:ca:9d:20:a0:ea:05:54:52:f0:1f:1c:28:cb:
9b:c2:ad:de:d8:cb:4d:8e:6d:9e:aa:e8:5f:87:36:be:6d:f1:
34:40:92:39:56:56:2f:68:c4:18:f0:d8:c3:bb:cd:1b:c8:62:
28:d4:ca:b6:7f:8a:87:35:72:1d:3c:2b:67:14:57:12:bc:31:
00:e6:e5:ae:a0:c1:6b:fc:46:a4:a9:89:2c:79:ce:15:08:f0:
15:05:e8:7c:51:46:33:2c:96:2c:32:91:77:1c:14:ba:78:82:
92:de:5c:16
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaSs2RJ7NV/ldckbMkh3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTcwYjQyZDdhZjZhZDc4MjIyYjMwZjA1ZjJiNzkxM2Y4MDYzNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8D6i+cdpUo0+EogHohoqtrcUVWW
3ThkVpdLKhAujCIV0VmwhU4p1xwu/fEh7rUvcBUWFEFcN0hcvSoNCzArpbOzL9jb
FtMbKTyeWO2ScL+UD4lMGN+WaZE8YXAs/0JOmQTQNM+U6YOPB9ZK6Nmh5WgpKe8E
iEh+rg4Hycq0/OiTSFKisTLqLCnROlKnSUllinwFWhFgorbZwOtf4W5lPKFxKbMy
BQWCvgEDAX/DzLW6f0I9sWoewGed28ODsKG/Ow40L0Q7KMCJ3GhJ1Tq6tG1t7jCe
PDgHFuCVOukaxde7eyFT/d3TJeVG1bsWSlR0NykfpMvKStFeiNwFP3eGHQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPpwtC169q14Iisw8F8reRP4BjVwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2QzYmZl
Ni03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4YWQvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2
LTc4YjUtNDM3Yi05OGU5LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3
WHl0NUVfZ0dOWEEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArlkwDANBAIAAjAHAwUDKgYYQDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJ6yTANBgkqhkiG9w0BAQsFAAOCAQEAdcgxxG6DSDHf
eeCaranOkykBFkV+WWLW3p9Cz+0VM6PNnr92n4J9q7A77w9DLuzGF8tys4q89e5w
pHO3qIWhcxH8hqULLKWncxWqGlSJwM6T+La9Y77IEXOack2IOXEZu72DJSGyvlLQ
eHI6TLQdbB2kd5L7hm3XX0xkeDB0Kkk5ZsDfDGn35mN5b2QGb+laeXo/O9XKnSCg
6gVUUvAfHCjLm8Kt3tjLTY5tnqroX4c2vm3xNECSOVZWL2jEGPDYw7vNG8hiKNTK
tn+KhzVyHTwrZxRXErwxAOblrqDBa/xGpKmJLHnOFQjwFQXofFFGMyyWLDKRdxwU
uniCkt5cFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:07 2025 by rpki-client