Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer (raw, json)
Hash identifier: 0ZeYBvltf6sXw1/Mbk0vrwRA5P5DR6ReFrP4NFNbnaA=
Subject key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222014B8BED33336566BD5A2E60B928D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5528
AS: 24651
AS: 34018
AS: 34354
IP: 46.23.32.0/20
IP: 77.93.0.0/19
IP: 82.193.64.0/19
IP: 83.99.128.0/17
IP: 85.158.72.0/21
IP: 89.221.112.0/20
IP: 109.73.96.0/20
IP: 185.31.44.0/22
IP: 185.75.236.0/22
IP: 185.141.52.0/22
IP: 188.92.16.0/21
IP: 195.130.205.0/24
IP: 212.142.64.0/18
IP: 217.195.48.0/20
IP: 2a01:4e0::/29
IP: 2a04:4e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:b8:be:d3:33:36:56:6b:d5:a2:e6:0b:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:29:2f:b2:d8:52:80:79:e1:5d:0c:98:ba:
cd:ad:91:56:59:af:14:d8:54:d5:a7:12:89:73:88:
d5:8a:c3:05:8d:cd:f9:40:9e:ba:13:36:a9:3b:de:
4a:fb:d4:2b:cf:36:38:7d:28:81:ae:01:4a:96:0a:
71:87:9a:2a:3a:b5:16:6b:22:2d:41:21:7d:a6:04:
a9:eb:ee:ee:23:f2:74:f6:f7:b3:fa:f1:31:b7:20:
2f:d9:c2:f6:be:7a:4d:33:51:8b:5b:79:08:cd:e3:
c3:41:6c:3d:80:27:2f:cc:d3:a8:f7:f8:b1:c7:72:
43:69:cd:ea:22:7b:d9:47:c7:e9:ed:e9:97:65:b5:
f4:c8:8e:23:33:a0:83:4a:08:16:e9:0b:47:2e:10:
9e:2a:68:5d:e4:66:00:30:35:42:81:55:ca:a2:d0:
3e:53:9d:c6:21:7b:02:3e:59:cb:2f:01:f8:c8:1b:
fb:76:f1:2d:27:c0:ee:32:5f:d2:f8:6e:e4:ab:7a:
67:63:8e:ba:47:ac:f1:06:3c:6a:26:40:6b:56:c3:
f7:41:b4:b5:c8:1e:85:86:f7:e0:de:c9:0d:d0:1d:
74:7c:5d:ca:26:d1:d2:34:f9:4a:33:54:51:f7:9c:
6e:99:c7:51:65:45:86:50:b6:e2:35:d7:da:8d:6f:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.32.0/20
77.93.0.0/19
82.193.64.0/19
83.99.128.0/17
85.158.72.0/21
89.221.112.0/20
109.73.96.0/20
185.31.44.0/22
185.75.236.0/22
185.141.52.0/22
188.92.16.0/21
195.130.205.0/24
212.142.64.0/18
217.195.48.0/20
IPv6:
2a01:4e0::/29
2a04:4e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5528
24651
34018
34354
Signature Algorithm: sha256WithRSAEncryption
9b:16:b4:db:79:0f:ff:77:94:bb:92:1f:cd:8e:9f:a5:3b:e8:
45:78:87:e6:1a:83:70:06:a5:13:d1:9d:de:66:3e:00:0e:80:
f0:86:f2:7b:fd:71:73:67:59:90:a8:d0:96:18:09:1f:88:af:
df:54:e7:b1:67:79:20:ec:63:44:c2:df:1f:49:24:3b:9f:f3:
05:7d:10:24:59:ec:90:2e:d1:a9:ab:fd:b3:be:c7:83:b2:a6:
26:3d:81:e9:8f:e2:ca:59:01:64:2f:25:8e:24:27:65:da:ba:
8a:8b:20:6b:ff:15:d9:ea:f1:34:f8:2e:59:ff:cf:f9:62:5a:
94:8f:65:1b:85:7b:98:df:1e:6d:52:6c:6a:4f:f5:96:f7:1b:
a1:29:d1:d3:c1:a2:79:1a:c6:d5:3a:c2:4d:98:76:87:b5:f5:
73:c2:62:93:6f:a7:70:63:2c:ec:97:4c:f6:eb:d8:16:fe:c8:
dc:d1:ca:72:b3:f7:0a:36:d7:4e:c5:dd:fa:ac:3f:ca:c5:39:
a9:99:ad:dd:07:b3:09:8e:3a:38:78:f8:35:ae:71:85:d1:02:
36:25:b3:84:89:4a:f1:f1:19:56:80:f0:6c:0c:b7:78:38:4e:
f2:d7:38:e9:2e:91:c3:2d:68:0c:57:38:00:b3:f4:4d:35:a9:
ca:ce:24:76
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISAZQiIBS4vtMzNlZr1aLmC5KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWExYjM2NTUyZjlkYWNjYjkyYWM1YzNiNDRiNDI2ZDY0Mzc0OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNQpL7LYUoB54V0MmLrNrZFWWa8U
2FTVpxKJc4jVisMFjc35QJ66EzapO95K+9QrzzY4fSiBrgFKlgpxh5oqOrUWayIt
QSF9pgSp6+7uI/J09vez+vExtyAv2cL2vnpNM1GLW3kIzePDQWw9gCcvzNOo9/ix
x3JDac3qInvZR8fp7emXZbX0yI4jM6CDSggW6QtHLhCeKmhd5GYAMDVCgVXKotA+
U53GIXsCPlnLLwH4yBv7dvEtJ8DuMl/S+G7kq3pnY466R6zxBjxqJkBrVsP3QbS1
yB6Fhvfg3skN0B10fF3KJtHSNPlKM1RR95xumcdRZUWGULbiNdfajW/WWQIDAQAB
o4IDEjCCAw4wHQYDVR0OBBYEFOWhs2VS+drMuSrFw7RLQm1kN0niMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2I4ZWE1
Yi0zZGQ0LTQzNzQtYTc5My1jNWU2ZDIzZjhiMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYjhlYTVi
LTNkZDQtNDM3NC1hNzkzLWM1ZTZkMjNmOGIwOS8xLzVhR3paVkw1MnN5NUtzWER0
RXRDYldRM1NlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF
BQcBBwEB/wR0MHIwWgQCAAEwVAMEBC4XIAMEBU1dAAMEBVLBQAMEB1NjgAMEA1We
SAMEBFndcAMEBG1JYAMEArkfLAMEArlL7AMEArmNNAMEA7xcEAMEAMOCzQMEBtSO
QAMEBNnDMDAUBAIAAjAOAwUDKgEE4AMFAyoETgAwJwYIKwYBBQUHAQgBAf8EGDAW
oBQwEgICFZgCAmBLAgMAhOICAwCGMjANBgkqhkiG9w0BAQsFAAOCAQEAmxa023kP
/3eUu5IfzY6fpTvoRXiH5hqDcAalE9Gd3mY+AA6A8Ibye/1xc2dZkKjQlhgJH4iv
31TnsWd5IOxjRMLfH0kkO5/zBX0QJFnskC7Rqav9s77Hg7KmJj2B6Y/iylkBZC8l
jiQnZdq6iosga/8V2erxNPguWf/P+WJalI9lG4V7mN8ebVJsak/1lvcboSnR08Gi
eRrG1TrCTZh2h7X1c8Jik2+ncGMs7JdM9uvYFv7I3NHKcrP3CjbXTsXd+qw/ysU5
qZmt3QezCY46OHj4Na5xhdECNiWzhIlK8fEZVoDwbAy3eDhO8tc46S6Rwy1oDFc4
ALP0TTWpys4kdg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:43 2025 by rpki-client