Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.cer (raw, json)
Hash identifier: Mr/1gqmKy7AwEUTe4sUDzK2aaP9E2dYXxPMQsTu3IEw=
Subject key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5D7E40F141A6491B93A66F849CE6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44214
IP: 185.79.8.0/22
IP: 2a05:6c80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d7:e4:0f:14:1a:64:91:b9:3a:66:f8:49:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:ac:94:1e:49:42:c5:7e:e2:3e:ed:a3:f3:
7f:ac:89:04:f2:fd:1b:7b:18:61:e8:e2:d2:24:98:
5a:b4:cd:b7:3c:25:29:fa:cd:6a:ef:ef:be:d5:00:
51:08:1c:3b:f2:fc:d2:e6:fa:69:2e:e4:fb:64:76:
b0:1c:2e:6b:c4:b8:76:7d:51:9c:89:c9:45:2f:41:
f4:d8:b7:64:1f:57:12:b6:b5:6f:bd:46:89:b5:71:
0d:4f:d8:e9:3d:0f:62:62:e6:3a:7b:9b:2b:de:54:
d2:b0:7a:67:ac:df:41:aa:58:c4:52:60:ec:2a:62:
4a:b9:65:12:0c:10:d5:60:f3:cc:91:fd:43:fa:75:
d8:fa:89:f2:60:29:aa:bf:2f:3c:79:16:af:57:9a:
0f:ce:5a:c4:38:f3:43:fd:f4:a3:19:19:fa:79:36:
12:9d:52:08:fd:a3:f2:4e:00:91:af:61:02:14:b7:
65:93:43:5f:9d:63:9c:47:05:b9:05:9d:e4:60:9d:
94:7b:3d:36:b4:81:69:0d:40:3e:20:50:f4:78:c1:
18:a8:b9:06:8d:95:00:a8:0d:e3:fe:62:8b:56:ab:
89:df:63:80:98:a6:71:ca:3b:f3:6e:36:00:7c:67:
18:87:7d:57:a0:e4:7f:c0:ef:32:82:5b:48:ca:5a:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.8.0/22
IPv6:
2a05:6c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44214
Signature Algorithm: sha256WithRSAEncryption
7b:bd:ed:58:44:05:6c:e3:26:75:4c:d7:fe:39:c4:d2:96:e0:
5b:b6:98:8f:c5:d0:04:09:ca:bf:35:78:47:6f:80:3b:96:04:
32:87:7d:ed:09:6b:6f:f6:f4:f4:5a:93:cf:60:39:0f:5c:66:
e7:e1:a9:7d:c7:46:53:21:72:46:fd:e6:9f:82:f3:da:ce:0c:
43:b4:be:9d:d6:26:c5:4e:57:36:a0:45:07:77:33:04:52:1d:
73:8a:55:c9:10:da:05:9b:ee:36:c7:9d:24:77:52:d6:03:c3:
1c:d3:a6:50:d6:6e:33:fb:9b:2c:6e:c9:e9:ea:f7:22:48:e8:
d7:82:9e:28:db:d5:a7:65:de:96:d6:c5:9b:73:6d:74:42:2c:
63:3c:58:f4:7b:08:a2:88:71:ee:7a:90:de:16:b6:2e:60:b7:
42:70:95:15:f0:a5:96:45:63:7b:e9:90:25:1e:9c:44:cc:85:
73:e6:8f:95:37:b8:57:27:9a:dd:fa:2b:1b:99:38:7e:c4:7a:
ce:c3:95:06:b2:75:59:45:4a:bf:f0:7d:45:6c:24:3f:d7:17:
27:9f:e0:91:f3:6a:62:3e:c0:e5:60:4e:f5:2f:7e:f2:09:80:
54:8b:c1:ea:d3:14:b3:17:4f:b6:02:d6:4f:f3:72:d2:8b:79:
8c:0b:2c:2b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntdfkDxQaZJG5Omb4Sc5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTAwNmEwNmRjNDkwOTk3ZmY4ZmMzYTQyZWNmMzg5YmVkM2RkMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyyslB5JQsV+4j7to/N/rIkE8v0b
exhh6OLSJJhatM23PCUp+s1q7+++1QBRCBw78vzS5vppLuT7ZHawHC5rxLh2fVGc
iclFL0H02LdkH1cStrVvvUaJtXENT9jpPQ9iYuY6e5sr3lTSsHpnrN9BqljEUmDs
KmJKuWUSDBDVYPPMkf1D+nXY+onyYCmqvy88eRavV5oPzlrEOPND/fSjGRn6eTYS
nVII/aPyTgCRr2ECFLdlk0NfnWOcRwW5BZ3kYJ2Uez02tIFpDUA+IFD0eMEYqLkG
jZUAqA3j/mKLVquJ32OAmKZxyjvzbjYAfGcYh31XoOR/wO8ygltIylr1OwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOEAagbcSQmX/4/DpC7POJvtPdF4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzgzMGI1
Yy1iNmM4LTQ5NzktYTUzZS00OTRlMjY0OTE3OTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvODMwYjVj
LWI2YzgtNDk3OS1hNTNlLTQ5NGUyNjQ5MTc5Ni8xLzRRQnFCdHhKQ1pmX2o4T2tM
czg0bS0wOTBYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuU8IMA0EAgACMAcDBQMqBWyAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCstjANBgkqhkiG9w0BAQsFAAOCAQEAe73tWEQFbOMm
dUzX/jnE0pbgW7aYj8XQBAnKvzV4R2+AO5YEMod97Qlrb/b09FqTz2A5D1xm5+Gp
fcdGUyFyRv3mn4Lz2s4MQ7S+ndYmxU5XNqBFB3czBFIdc4pVyRDaBZvuNsedJHdS
1gPDHNOmUNZuM/ubLG7J6er3Ikjo14KeKNvVp2XeltbFm3NtdEIsYzxY9HsIoohx
7nqQ3ha2LmC3QnCVFfCllkVje+mQJR6cRMyFc+aPlTe4Vyea3forG5k4fsR6zsOV
BrJ1WUVKv/B9RWwkP9cXJ5/gkfNqYj7A5WBO9S9+8gmAVIvB6tMUsxdPtgLWT/Ny
0ot5jAssKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:21 2025 by rpki-client