Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
File: 493Ty2SL60JR1HzEtlvNZLCajUs.cer (raw, json)
Hash identifier: 4ggWhbZg2PXN1apfBdpWg2bujNXFgov1mQynOqVrfck=
Subject key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B406A912F24727046FDA50F08312A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208178
IP: 45.155.104.0/22
IP: 2a0f:fb00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:06:a9:12:f2:47:27:04:6f:da:50:f0:83:12:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:a0:49:6c:4d:c6:2c:2d:37:a6:aa:16:2a:
63:43:ec:48:23:f6:7e:13:cd:0f:4e:e6:06:9c:ba:
d0:60:ba:0c:22:29:0d:3f:80:12:a2:21:8d:c1:7a:
b6:16:23:e3:b3:4b:85:56:fc:96:d4:0d:ef:34:07:
f6:65:bf:54:ea:76:eb:ad:cb:e8:1e:80:5b:43:e1:
e4:de:38:03:35:48:04:5c:ae:c0:d9:b1:5b:f4:a4:
9f:ed:b2:5c:ab:10:1d:24:07:f3:b9:c9:00:2b:39:
55:d7:12:8d:7c:a9:71:c3:f7:85:50:cb:6d:87:c1:
5b:01:c5:cb:8d:4b:5c:4d:94:a7:86:47:db:aa:41:
68:b6:67:08:07:27:d4:45:7d:42:77:34:90:1a:f4:
f3:1a:52:89:7c:88:9b:6a:32:f3:bb:e5:7c:84:ed:
b2:60:e4:d2:a8:5f:25:06:54:b6:bb:27:d7:53:6a:
32:55:75:ce:d5:dd:51:6a:b8:62:49:db:93:9c:79:
46:8c:da:10:21:0b:42:c4:3e:3c:b6:87:a0:46:dc:
08:5b:71:c0:5a:0e:ad:cc:bb:64:3e:7f:be:58:05:
5d:06:38:3c:f2:b9:fe:e0:e9:a6:67:7e:ec:20:c2:
1f:8b:e9:4c:fa:24:33:1b:37:17:8b:3b:12:16:45:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.104.0/22
IPv6:
2a0f:fb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208178
Signature Algorithm: sha256WithRSAEncryption
4e:aa:c4:39:de:07:f4:08:42:f9:96:45:9a:78:55:8c:a0:b5:
c6:af:92:dd:80:f7:4e:0b:a3:4d:59:0f:4b:2a:d3:2a:7b:b5:
63:d9:1a:4e:8c:ea:dc:c4:89:d6:b2:99:c1:09:11:25:c7:6f:
fe:14:26:20:1e:87:08:ec:18:31:4f:fc:e5:b1:f3:8e:b5:43:
96:c4:a7:89:e3:a1:fd:58:2f:25:74:2a:c8:44:3d:4d:6f:ed:
17:a6:b0:c9:bb:0d:ba:ce:a5:11:70:77:67:3f:08:5f:1c:02:
9b:8b:80:e0:ba:45:8a:8d:cb:5c:c5:ec:df:49:40:19:af:9e:
7b:ff:c7:2d:49:a5:17:8e:a2:84:aa:dd:b1:71:a6:5e:b1:1a:
8a:7a:c6:50:bf:e9:cb:f0:d3:e6:11:60:4b:36:4a:5f:ec:81:
2f:b7:f5:f8:cc:5a:39:ad:5a:93:7b:b1:30:1c:a9:26:2f:d5:
6b:98:ca:aa:97:7d:d2:aa:f2:ac:2d:f3:77:b7:b9:05:09:eb:
f8:9e:43:83:14:b7:ab:d1:4f:c5:e6:51:95:bc:b1:cb:67:33:
de:c9:f8:a6:8f:ff:48:89:d8:66:97:cb:68:c5:c5:e1:fb:d5:
2f:d2:3c:24:22:ad:3e:d4:64:29:e9:a1:16:f8:b3:52:ce:ae:
ce:2f:3c:3f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntAapEvJHJwRv2lDwgxKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2RkZDNjYjY0OGJlYjQyNTFkNDdjYzRiNjViY2Q2NGIwOWE4ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+gSWxNxiwtN6aqFipjQ+xII/Z+
E80PTuYGnLrQYLoMIikNP4ASoiGNwXq2FiPjs0uFVvyW1A3vNAf2Zb9U6nbrrcvo
HoBbQ+Hk3jgDNUgEXK7A2bFb9KSf7bJcqxAdJAfzuckAKzlV1xKNfKlxw/eFUMtt
h8FbAcXLjUtcTZSnhkfbqkFotmcIByfURX1CdzSQGvTzGlKJfIibajLzu+V8hO2y
YOTSqF8lBlS2uyfXU2oyVXXO1d1RarhiSduTnHlGjNoQIQtCxD48toegRtwIW3HA
Wg6tzLtkPn++WAVdBjg88rn+4OmmZ37sIMIfi+lM+iQzGzcXizsSFkWDrQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOPd08tki+tCUdR8xLZbzWSwmo1LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2ZjMTQ3
YS04M2ZjLTRhNTMtYTkxMi1iNmI3NmUyMmZmYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvZmMxNDdh
LTgzZmMtNGE1My1hOTEyLWI2Yjc2ZTIyZmZhYy8xLzQ5M1R5MlNMNjBKUjFIekV0
bHZOWkxDYWpVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZtoMA0EAgACMAcDBQMqD/sAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMtMjANBgkqhkiG9w0BAQsFAAOCAQEATqrEOd4H9AhC
+ZZFmnhVjKC1xq+S3YD3TgujTVkPSyrTKnu1Y9kaTozq3MSJ1rKZwQkRJcdv/hQm
IB6HCOwYMU/85bHzjrVDlsSnieOh/VgvJXQqyEQ9TW/tF6awybsNus6lEXB3Zz8I
XxwCm4uA4LpFio3LXMXs30lAGa+ee//HLUmlF46ihKrdsXGmXrEainrGUL/py/DT
5hFgSzZKX+yBL7f1+MxaOa1ak3uxMBypJi/Va5jKqpd90qryrC3zd7e5BQnr+J5D
gxS3q9FPxeZRlbyxy2cz3sn4po//SInYZpfLaMXF4fvVL9I8JCKtPtRkKemhFviz
Us6uzi88Pw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:56 2025 by rpki-client