Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer (raw, json)
Hash identifier: HAEEldNP3KLFcqlc5wsTQMwQZI6Kiu1T2Rv3H9EbyqA=
Subject key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA29ACDD616466D1FB02A10499FD14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29458
IP: 185.102.52.0/22
IP: 2a06:2300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:29:ac:dd:61:64:66:d1:fb:02:a1:04:99:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:ec:d9:ff:95:46:c2:82:91:e4:b1:4b:20:
46:ca:41:bf:b9:5d:11:b0:13:5e:29:60:fa:f3:99:
6f:d9:29:17:76:a0:80:66:fd:6c:c0:9e:0b:d5:2b:
fe:b7:1b:d2:3e:e0:4b:b7:e8:9f:80:fc:c0:1c:12:
f6:96:c5:42:aa:85:f1:1c:e1:a4:bd:9b:1a:19:21:
3c:84:8d:2c:aa:af:e8:e5:b1:f5:2f:dd:aa:eb:98:
d8:ee:86:b2:e2:85:e7:b1:fb:c2:48:be:e8:66:1a:
89:50:52:ee:6a:f4:2e:2c:0f:c1:df:44:d0:e4:03:
0a:05:7e:0d:63:d4:88:e1:05:a8:4c:88:f7:ba:71:
6b:ee:fc:d2:8f:92:ba:50:be:c8:57:46:f5:e2:0c:
9f:53:78:6c:92:b4:bd:33:99:f4:64:59:20:bc:39:
5c:79:51:95:40:c1:23:00:9e:b9:db:70:c7:e6:2a:
cc:1b:65:ae:f6:eb:f1:67:d6:b4:18:d1:21:64:43:
d6:03:ac:c7:6b:cc:cd:23:6a:06:b5:6d:fd:7d:3d:
4c:f5:1b:ad:5c:ed:be:54:d8:cc:fd:ec:66:8c:a9:
1a:ca:a4:d9:78:8d:0e:e2:a4:a9:ef:92:bb:88:2f:
ea:b9:ec:2a:bf:0d:4e:27:14:cb:51:3b:cd:07:16:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.52.0/22
IPv6:
2a06:2300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29458
Signature Algorithm: sha256WithRSAEncryption
a1:bc:79:f4:39:11:13:8e:dd:d8:0a:1a:bb:6d:5f:15:25:12:
f7:6d:f9:76:da:18:00:ba:68:a7:fc:7c:30:0a:3c:cd:7a:60:
11:ba:4d:15:88:17:2f:b3:22:f0:44:89:54:f4:cf:9a:70:e2:
a9:96:56:cd:c5:70:b9:2f:58:10:59:2d:f0:77:de:90:8f:6a:
f7:bb:69:e8:d3:98:ef:ac:b1:b1:c5:3e:2b:57:2f:a2:b0:7b:
b8:99:09:09:2f:b7:42:43:6f:b0:76:6a:1c:71:60:e6:e3:20:
a4:2d:6e:b0:26:5d:95:dc:e2:a3:fa:b5:67:39:80:ed:54:b3:
75:66:75:00:f8:03:0f:32:0d:1d:6b:15:d4:1d:1a:3f:87:ce:
25:e2:1e:d5:bb:8a:97:58:7a:fe:7b:85:e1:92:e6:a4:01:0d:
53:d5:1d:88:fc:72:2c:56:1d:14:48:1e:44:dc:03:ef:28:61:
c5:2d:15:c1:71:5d:5e:30:f4:7b:45:ce:12:b2:61:75:01:6e:
9c:4e:5f:1d:61:43:fd:c1:73:ad:d4:50:df:a2:5c:13:b8:ae:
af:94:7d:bc:3d:e7:74:5f:ca:c2:9e:a8:1c:40:df:2e:dd:66:
18:bc:24:98:7a:84:3c:13:cf:32:cd:69:10:b7:f4:23:92:a5:
0f:6f:0a:64
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQf+ims3WFkZtH7AqEEmf0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTZmZTJjMGNmZDc2OTEwNDRlZTM3ODQ1Y2ZjZjU0ZTFhODQ5OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQDs2f+VRsKCkeSxSyBGykG/uV0R
sBNeKWD685lv2SkXdqCAZv1swJ4L1Sv+txvSPuBLt+ifgPzAHBL2lsVCqoXxHOGk
vZsaGSE8hI0sqq/o5bH1L92q65jY7oay4oXnsfvCSL7oZhqJUFLuavQuLA/B30TQ
5AMKBX4NY9SI4QWoTIj3unFr7vzSj5K6UL7IV0b14gyfU3hskrS9M5n0ZFkgvDlc
eVGVQMEjAJ6523DH5irMG2Wu9uvxZ9a0GNEhZEPWA6zHa8zNI2oGtW39fT1M9Rut
XO2+VNjM/exmjKkayqTZeI0O4qSp75K7iC/quewqvw1OJxTLUTvNBxaD7QIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFNVv4sDP12kQRO43hFz89U4ahJl0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzAzMTEz
OC04NmUxLTQxODItYTdhNi0wMTA3ZWMzM2U1YjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvMDMxMTM4
LTg2ZTEtNDE4Mi1hN2E2LTAxMDdlYzMzZTViNy8xLzFXX2l3TV9YYVJCRTdqZUVY
UHoxVGhxRW1YUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWY0MA0EAgACMAcDBQMqBiMAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAnMSMA0GCSqGSIb3DQEBCwUAA4IBAQChvHn0ORETjt3Y
Chq7bV8VJRL3bfl22hgAumin/HwwCjzNemARuk0ViBcvsyLwRIlU9M+acOKpllbN
xXC5L1gQWS3wd96Qj2r3u2no05jvrLGxxT4rVy+isHu4mQkJL7dCQ2+wdmoccWDm
4yCkLW6wJl2V3OKj+rVnOYDtVLN1ZnUA+AMPMg0daxXUHRo/h84l4h7Vu4qXWHr+
e4XhkuakAQ1T1R2I/HIsVh0USB5E3APvKGHFLRXBcV1eMPR7Rc4SsmF1AW6cTl8d
YUP9wXOt1FDfolwTuK6vlH28Ped0X8rCnqgcQN8u3WYYvCSYeoQ8E88yzWkQt/Qj
kqUPbwpk
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:30 2025 by rpki-client