Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
File: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer (raw, json)
Hash identifier: jrcb2WmNl7gnxdYx6KkLcwJamZpsUIsMOIR4s/uEHeo=
Subject key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A36A7866E8837E9D0C2FBA95794C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59781
IP: 185.72.48.0/22
IP: 2a05:38c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:6a:78:66:e8:83:7e:9d:0c:2f:ba:95:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:47:fb:07:19:82:4b:35:6d:1c:c8:c9:f8:
ae:31:a4:83:e0:46:a5:05:d6:c1:e1:f2:ed:21:77:
29:04:84:34:f8:f2:58:f4:a8:26:d5:24:a0:84:cf:
df:29:7c:8b:8e:89:22:e8:bb:b6:1c:c3:7a:49:81:
1f:78:8e:4a:eb:90:42:36:20:70:74:44:59:b0:c7:
d7:62:a9:bf:12:db:3b:5f:1e:e5:aa:d7:61:e4:08:
cf:f4:c5:cc:63:c3:b2:a4:16:ec:a1:11:5e:a3:fe:
96:a2:31:23:82:2c:b1:b5:fb:f2:a3:15:b6:7c:36:
0b:01:22:90:42:cd:46:e1:b7:d9:1b:59:82:4a:ce:
7a:13:75:6c:92:e9:45:d3:cd:a3:fd:de:42:bb:b3:
14:c6:f2:9d:3c:32:97:55:be:e0:35:60:f7:d8:1b:
84:26:32:1d:0f:09:a6:1d:b4:c9:ba:6e:3c:49:12:
fd:dd:30:f8:2e:f4:66:f8:90:fe:8e:79:be:6b:cd:
94:2a:f1:77:6b:76:81:10:d3:11:b0:f8:80:f9:d6:
00:74:37:ea:d5:a0:d9:c3:3f:93:97:db:5e:7a:ec:
7c:52:3d:1f:49:15:f2:75:37:e7:88:08:85:e6:34:
13:64:5c:49:c9:b3:34:a1:1e:52:fd:2f:0a:44:64:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.48.0/22
IPv6:
2a05:38c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59781
Signature Algorithm: sha256WithRSAEncryption
2f:e3:0d:b5:71:32:07:34:43:51:f0:4e:c5:6c:4e:b0:31:f0:
67:3f:19:f7:20:90:94:30:d8:08:5e:3b:02:1e:c9:12:fa:16:
cd:ce:52:7f:8c:e2:f1:d5:7b:ca:6f:3b:59:02:f3:f7:a6:dc:
84:0e:70:eb:5b:8c:1b:7b:9a:dc:28:32:74:d8:8a:9b:8e:b3:
f8:f7:9d:b6:eb:07:02:44:7a:b5:e5:df:c6:d7:52:5c:f1:d0:
c0:b3:b4:4b:3c:48:bc:a8:ce:e8:61:dd:c4:56:ab:ca:dd:2a:
e1:8c:6b:d8:b6:eb:ae:a5:82:7b:0d:a4:42:04:53:27:37:c1:
cb:6a:e6:ff:72:97:2a:ef:2e:74:a2:8f:10:d7:82:77:55:40:
22:7c:56:af:30:4a:ed:3d:47:4f:66:2d:86:50:41:c5:09:cc:
c2:f9:69:d8:0f:51:88:3b:13:9a:70:f4:a0:17:ee:d7:cd:5d:
d0:b4:70:97:59:d8:8f:5f:a7:e6:d2:2e:d5:9a:f0:58:21:4a:
df:f8:d1:6c:1b:79:c1:07:b5:fe:54:75:3e:84:e0:a3:a7:12:
3d:37:10:25:46:af:ee:b5:31:63:8b:2d:39:fa:0a:d8:0b:50:
12:4e:7a:ab:4f:f6:b2:e2:12:2f:6f:33:2a:be:da:89:0e:7b:
48:c8:a4:99
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQks6NqeGbog36dDC+6lXlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWFkMThmNGMzNjA2NzIyMGY0ZDgzM2NiYzc4YTEwZjk0ZWIwODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FxH+wcZgks1bRzIyfiuMaSD4Eal
BdbB4fLtIXcpBIQ0+PJY9Kgm1SSghM/fKXyLjoki6Lu2HMN6SYEfeI5K65BCNiBw
dERZsMfXYqm/Ets7Xx7lqtdh5AjP9MXMY8OypBbsoRFeo/6WojEjgiyxtfvyoxW2
fDYLASKQQs1G4bfZG1mCSs56E3VskulF082j/d5Cu7MUxvKdPDKXVb7gNWD32BuE
JjIdDwmmHbTJum48SRL93TD4LvRm+JD+jnm+a82UKvF3a3aBENMRsPiA+dYAdDfq
1aDZwz+Tl9teeux8Uj0fSRXydTfniAiF5jQTZFxJybM0oR5S/S8KRGQVeQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNmtGPTDYGciD02DPLx4oQ+U6wiIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2QzNTFi
Zi03MWNlLTQ4NTctOWU1MC1jMjY0NzM4NWU3MjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvZDM1MWJm
LTcxY2UtNDg1Ny05ZTUwLWMyNjQ3Mzg1ZTcyNy8xLzJhMFk5TU5nWnlJUFRZTTh2
SGloRDVUckNJZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUgwMA0EAgACMAcDBQMqBTjAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDphTANBgkqhkiG9w0BAQsFAAOCAQEAL+MNtXEyBzRD
UfBOxWxOsDHwZz8Z9yCQlDDYCF47Ah7JEvoWzc5Sf4zi8dV7ym87WQLz96bchA5w
61uMG3ua3CgydNiKm46z+PedtusHAkR6teXfxtdSXPHQwLO0SzxIvKjO6GHdxFar
yt0q4Yxr2LbrrqWCew2kQgRTJzfBy2rm/3KXKu8udKKPENeCd1VAInxWrzBK7T1H
T2YthlBBxQnMwvlp2A9RiDsTmnD0oBfu181d0LRwl1nYj1+n5tIu1ZrwWCFK3/jR
bBt5wQe1/lR1PoTgo6cSPTcQJUav7rUxY4stOfoK2AtQEk56q0/2suISL28zKr7a
iQ57SMikmQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:39 2025 by rpki-client