Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.cer (raw, json)
Hash identifier: NvIUESnY12oHAZJdJdjkvlMS9txb1OqyQAdKsaykhrM=
Subject key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FBA6C99D11303AAF6F6DFA007C6D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202185
IP: 91.216.115.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ba:6c:99:d1:13:03:aa:f6:f6:df:a0:07:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:2f:87:a6:1c:0f:1b:d7:36:90:6d:ef:1d:
64:63:a1:12:93:5f:59:8f:ab:66:9b:3a:ca:03:64:
38:61:99:2c:45:3e:98:46:51:99:61:46:e7:61:d1:
e1:f7:e8:70:c4:cb:b0:ce:1f:4a:91:0f:90:dd:39:
b6:4c:bd:a3:9e:89:3a:5a:f8:ca:2b:cd:eb:b3:aa:
9e:0d:5b:57:75:e7:11:9c:97:1f:4a:29:7d:13:58:
c6:58:0e:8d:87:98:2d:6d:49:1b:c7:b4:63:b7:69:
ca:17:1d:b8:4f:a9:60:34:d1:9c:ad:46:e7:18:b8:
2c:8d:35:ff:d1:dd:1f:01:ca:ae:e9:a8:d8:47:1a:
5f:fa:f3:f5:0c:94:42:18:f3:d3:6f:f3:3e:1c:64:
01:96:91:72:bd:fa:93:fc:1f:99:5d:39:dc:33:27:
1d:4b:72:fa:9e:80:2f:37:7f:b8:16:69:07:f3:b0:
3d:e4:8a:bd:62:f3:0d:7c:4d:b1:53:62:5f:fb:86:
a2:9e:e4:13:51:9d:ef:c3:ae:46:36:f0:ea:25:95:
97:1a:b7:d0:bd:c9:5b:38:b9:27:a0:6f:2b:6f:36:
12:a5:cf:a6:52:1f:2b:0d:99:e7:d3:c2:c1:bb:49:
21:e8:32:af:dd:71:c0:91:8a:32:34:6f:54:70:97:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.115.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202185
Signature Algorithm: sha256WithRSAEncryption
82:ab:af:46:af:f9:b8:04:d1:0a:55:79:c7:10:d2:78:a3:88:
57:dc:e4:22:f5:06:a2:22:f7:13:27:fc:f4:5d:f4:bd:77:ae:
18:fe:8b:58:d2:9f:57:79:22:20:3e:9e:4e:0d:99:81:2c:86:
3f:08:23:6c:56:c3:8c:2a:4a:07:4b:41:d8:bb:a0:46:04:4e:
9d:22:40:ab:bf:63:07:b5:e4:3a:c3:5a:50:af:07:31:c9:c9:
21:e0:b1:13:02:70:4e:a1:03:e3:15:a1:e4:a1:dc:26:48:35:
f2:ac:7b:8a:f5:44:50:c4:12:15:d8:cd:3a:1c:bc:f7:1f:6a:
4b:81:fd:27:94:0d:92:44:d8:a5:7d:f3:01:f5:a2:ba:66:ea:
e3:39:9d:36:65:9f:1c:db:08:34:25:de:0e:4d:a0:65:b8:e1:
9f:4d:dc:c4:55:0a:40:ad:af:66:2d:b0:f3:d9:f3:68:c3:e6:
f4:d2:9c:f7:f0:f2:f2:a3:3b:17:71:f8:5c:7a:53:08:36:ee:
bc:5e:a8:e4:4e:d6:e4:e1:f2:fc:e3:11:af:de:d5:5a:ad:7c:
df:7e:f8:55:0c:9b:c7:1c:39:79:e6:5b:c3:dc:0d:7b:60:4b:
02:5a:fb:f8:5c:85:e7:3b:31:70:f1:d0:9b:ac:8c:e6:d5:78:
de:1a:84:0a
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQiH7psmdETA6r29t+gB8bRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmNiMWNmM2QzZjNjZGMzNDI2ZmI0OWYwYTBjMzNkYzA0Yzg2ODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo68vh6YcDxvXNpBt7x1kY6ESk19Z
j6tmmzrKA2Q4YZksRT6YRlGZYUbnYdHh9+hwxMuwzh9KkQ+Q3Tm2TL2jnok6WvjK
K83rs6qeDVtXdecRnJcfSil9E1jGWA6Nh5gtbUkbx7Rjt2nKFx24T6lgNNGcrUbn
GLgsjTX/0d0fAcqu6ajYRxpf+vP1DJRCGPPTb/M+HGQBlpFyvfqT/B+ZXTncMycd
S3L6noAvN3+4FmkH87A95Iq9YvMNfE2xU2Jf+4ainuQTUZ3vw65GNvDqJZWXGrfQ
vclbOLknoG8rbzYSpc+mUh8rDZnn08LBu0kh6DKv3XHAkYoyNG9UcJeFHwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNvLHPPT883DQm+0nwoMM9wEyGgcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2E0MDhm
Yi01YzgwLTRkY2EtODQyOC03MzY2OWJhNjNmN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYTQwOGZi
LTVjODAtNGRjYS04NDI4LTczNjY5YmE2M2Y3Yy8xLzI4c2M4OVB6emNOQ2I3U2ZD
Z3d6M0FUSWFCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9hzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMVyTANBgkqhkiG9w0BAQsFAAOCAQEAgquvRq/5uATRClV5xxDSeKOIV9zkIvUG
oiL3Eyf89F30vXeuGP6LWNKfV3kiID6eTg2ZgSyGPwgjbFbDjCpKB0tB2LugRgRO
nSJAq79jB7XkOsNaUK8HMcnJIeCxEwJwTqED4xWh5KHcJkg18qx7ivVEUMQSFdjN
Ohy89x9qS4H9J5QNkkTYpX3zAfWiumbq4zmdNmWfHNsINCXeDk2gZbjhn03cxFUK
QK2vZi2w89nzaMPm9NKc9/Dy8qM7F3H4XHpTCDbuvF6o5E7W5OHy/OMRr97VWq18
3374VQybxxw5eeZbw9wNe2BLAlr7+FyF5zsxcPHQm6yM5tV43hqECg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:02 2025 by rpki-client