Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
File: 1ikBDNsLMSwy4Hqvm3INc9O806s.cer (raw, json)
Hash identifier: Wvq/gaDWxh2bxuw4RJm0IBsflZBTyexx8VqlO0gLeCM=
Subject key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD83DDCB3DDC8287EFDBB8901F1569
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206757
IP: 45.147.16.0/22
IP: 116.204.252.0/22
IP: 185.218.236.0/22
IP: 193.16.151.0/24
IP: 193.16.156.0/24
IP: 195.10.218.0/24
IP: 201.148.168.0/22
IP: 203.78.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:83:dd:cb:3d:dc:82:87:ef:db:b8:90:1f:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:9f:7c:cc:52:2e:9f:92:4b:03:10:24:9c:
4e:00:54:44:74:2a:5c:c2:04:91:a7:d6:17:71:b0:
d5:52:db:29:ec:29:dd:89:0e:21:61:df:32:e1:d5:
85:1a:a6:13:dc:b8:83:b0:9f:92:9c:f7:b3:6e:6e:
ae:33:1e:e7:83:e7:e5:4e:87:6d:71:e1:ea:fc:32:
c7:97:b3:3f:f0:f5:81:8c:de:f2:c9:12:45:15:ae:
3d:df:b1:08:b2:59:1e:53:1b:35:34:64:47:7b:97:
bf:a2:f8:ee:3e:a7:a9:b8:e3:93:0c:95:ff:29:d9:
6e:9b:60:be:2d:12:c5:5c:0a:ed:74:a5:ef:29:b0:
3b:87:fe:05:d2:35:76:fe:57:46:a3:b0:5c:1c:c4:
46:e9:6e:2c:bc:4a:a1:29:11:48:45:d8:92:aa:0b:
bc:d8:31:92:e7:b9:27:1b:6b:96:ab:db:de:7f:e2:
87:31:90:ca:49:37:f5:f4:2e:ae:3a:cf:57:8e:59:
f3:0b:29:26:f8:5b:9f:a2:09:ce:e8:6e:42:c5:21:
ea:68:c6:05:c5:01:31:00:93:93:87:aa:e6:62:ef:
70:3b:43:6d:68:ea:e2:e2:0e:8f:63:25:4c:9e:ec:
b0:d3:ef:d7:13:83:1d:89:ed:80:7b:7e:48:6e:4c:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.16.0/22
116.204.252.0/22
185.218.236.0/22
193.16.151.0/24
193.16.156.0/24
195.10.218.0/24
201.148.168.0/22
203.78.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206757
Signature Algorithm: sha256WithRSAEncryption
06:a8:b0:d5:04:26:36:d7:56:83:fd:16:f1:41:70:1a:5f:50:
45:40:aa:12:6b:89:10:ee:6a:74:92:a4:18:01:2a:ff:da:32:
fd:f2:18:54:d8:2c:38:bc:a4:3b:95:76:d0:a1:9a:05:cf:72:
2d:9e:6a:b7:2e:1d:d2:75:3a:c4:01:25:0b:24:b6:58:21:35:
29:2a:ff:0f:fe:3f:94:c9:cf:f0:9c:b8:68:14:a5:77:55:d1:
d4:31:8a:f6:3e:2e:d6:f6:d8:47:aa:6f:db:57:80:74:ea:f2:
03:aa:8a:37:57:96:88:0d:c4:2b:6c:ca:43:31:af:01:ba:bd:
55:03:25:35:73:8d:de:3d:c8:f2:6e:c3:6b:77:8f:da:ce:68:
2f:22:0f:b1:13:36:1b:22:db:2b:97:b7:46:c7:ea:0f:ff:83:
61:cf:5d:d3:fa:41:57:4b:a1:5e:e9:46:03:23:28:37:9a:38:
90:5e:44:51:1c:45:0c:b6:34:00:b7:3e:c4:a1:85:69:df:cf:
3b:d2:c1:78:c8:64:0c:d7:f2:71:83:b2:92:e1:e9:ff:75:e2:
7d:e9:73:d2:01:3d:39:7e:f0:ea:ff:2a:87:ef:10:dd:bd:c4:
d3:86:ed:f1:aa:da:62:35:b8:f5:fe:f0:8c:c7:5f:15:36:f7:
3e:7a:70:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZQl/YPdyz3cgofv27iQHxVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjI5MDEwY2RiMGIzMTJjMzJlMDdhYWY5YjcyMGQ3M2QzYmNkM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMyffMxSLp+SSwMQJJxOAFREdCpc
wgSRp9YXcbDVUtsp7CndiQ4hYd8y4dWFGqYT3LiDsJ+SnPezbm6uMx7ng+flTodt
ceHq/DLHl7M/8PWBjN7yyRJFFa4937EIslkeUxs1NGRHe5e/ovjuPqepuOOTDJX/
Kdlum2C+LRLFXArtdKXvKbA7h/4F0jV2/ldGo7BcHMRG6W4svEqhKRFIRdiSqgu8
2DGS57knG2uWq9vef+KHMZDKSTf19C6uOs9XjlnzCykm+FufognO6G5CxSHqaMYF
xQExAJOTh6rmYu9wO0NtaOri4g6PYyVMnuyw0+/XE4Mdie2Ae35IbkyOGQIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFNYpAQzbCzEsMuB6r5tyDXPTvNOrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzE5NGMx
ZS05NzEwLTRkMzUtODIzYi01ZGQzMzk5NGEyNDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMTk0YzFl
LTk3MTAtNGQzNS04MjNiLTVkZDMzOTk0YTI0MS8xLzFpa0JETnNMTVN3eTRIcXZt
M0lOYzlPODA2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF
BwEHAQH/BDowODA2BAIAATAwAwQCLZMQAwQCdMz8AwQCudrsAwQAwRCXAwQAwRCc
AwQAwwraAwQCyZSoAwQAy06gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnpTAN
BgkqhkiG9w0BAQsFAAOCAQEABqiw1QQmNtdWg/0W8UFwGl9QRUCqEmuJEO5qdJKk
GAEq/9oy/fIYVNgsOLykO5V20KGaBc9yLZ5qty4d0nU6xAElCyS2WCE1KSr/D/4/
lMnP8Jy4aBSld1XR1DGK9j4u1vbYR6pv21eAdOryA6qKN1eWiA3EK2zKQzGvAbq9
VQMlNXON3j3I8m7Da3eP2s5oLyIPsRM2GyLbK5e3RsfqD/+DYc9d0/pBV0uhXulG
AyMoN5o4kF5EURxFDLY0ALc+xKGFad/PO9LBeMhkDNfycYOykuHp/3Xifelz0gE9
OX7w6v8qh+8Q3b3E04bt8araYjW49f7wjMdfFTb3PnpwkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:36 2025 by rpki-client