Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
File: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer (raw, json)
Hash identifier: ZB6AMXnCytnQOi08ckfAxfySCDclnSVE6hsMEtqa7Mw=
Subject key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F539D4ACFC27B650F6DA65A393990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21057
AS: 25259
AS: 51007
IP: 31.187.68.0/24
IP: 80.84.128.0/19
IP: 157.97.64.0/23
IP: 178.249.8.0/21
IP: 185.100.180.0/22
IP: 2a03:a420::/32
IP: 2a03:de40::/32
IP: 2a06:1880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:9d:4a:cf:c2:7b:65:0f:6d:a6:5a:39:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:08:91:7f:9f:70:32:f6:44:8c:d3:8c:4c:
d2:1b:86:04:b2:52:d4:46:d0:6c:9d:3e:5d:62:e8:
d6:49:c4:61:e3:b2:52:34:c6:db:f6:c1:63:c9:f7:
34:b5:0a:47:59:bb:0d:1b:24:60:ea:14:6e:84:1e:
08:37:4e:d5:9a:ab:b1:f9:82:5f:a9:eb:aa:46:16:
66:93:3b:96:36:17:4b:e2:7e:07:e4:b6:3c:64:c1:
c8:3f:75:cc:0b:81:96:e9:21:1a:67:26:4c:dd:83:
c3:6b:d3:f1:0b:fd:df:fe:7a:09:3b:34:33:28:50:
6b:af:1b:31:e3:bb:4d:16:8f:de:98:82:43:36:c3:
50:3a:28:62:4e:8c:e2:cb:64:b5:83:ca:cc:45:b2:
07:b8:2c:84:1b:45:44:e1:61:d3:f4:d2:be:16:c8:
48:06:34:4d:e2:6d:28:e7:59:14:c5:ec:a0:ba:e3:
fb:0a:f0:7d:13:2a:65:2c:8e:f8:e1:b5:a1:4c:9e:
ce:78:21:d8:48:c7:e6:07:a7:8e:69:b7:5a:33:e6:
01:1d:67:d9:63:40:68:d0:f0:09:0d:28:1e:4d:f6:
a3:cc:99:cd:cb:2b:06:2a:80:dc:3c:cb:ea:49:ff:
b6:09:d6:2c:15:85:53:09:b8:4b:40:3f:50:fa:1a:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.68.0/24
80.84.128.0/19
157.97.64.0/23
178.249.8.0/21
185.100.180.0/22
IPv6:
2a03:a420::/32
2a03:de40::/32
2a06:1880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21057
25259
51007
Signature Algorithm: sha256WithRSAEncryption
92:c0:03:c5:e9:83:4e:49:29:58:99:e9:b3:25:a8:fa:4a:50:
88:bc:87:79:fd:25:7e:d5:fc:bd:ab:33:a6:1c:a4:88:05:d9:
96:9e:46:71:e7:82:83:e2:8b:62:fe:90:30:82:b9:f6:2e:f2:
82:26:3b:7d:ad:87:e1:ed:98:9d:2d:07:42:31:55:82:f0:90:
e2:19:b0:5b:f1:18:83:f0:92:79:48:3e:bf:1a:99:bd:ed:60:
60:fc:6a:b2:79:ab:e6:53:fb:19:07:67:86:ca:80:9a:81:86:
4d:f5:70:4b:69:2b:81:3c:65:2e:a6:2f:a2:d2:cc:18:3f:68:
c7:64:9e:bf:3e:75:a3:63:dc:6f:e1:02:24:18:64:f1:d2:f3:
a8:42:f8:ca:a7:3f:f4:54:3b:89:c2:5f:15:88:ac:eb:0f:f8:
2f:a9:7f:29:3f:59:bf:56:4d:09:9a:42:f2:3f:36:ad:29:73:
d0:5e:c0:36:37:62:fa:b1:0b:d2:f9:a8:bd:65:4a:9e:2c:c7:
4e:cb:97:29:91:5c:de:94:39:1c:06:48:5a:13:c4:5d:61:c3:
2c:21:dd:1a:0f:79:30:f8:45:9f:15:4b:84:3d:0f:a2:f5:97:
29:d5:b8:54:84:d0:c6:6c:02:93:00:d2:a3:86:65:36:20:36:
0e:c0:08:ee
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgISAZQlj1OdSs/Ce2UPbaZaOTmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JhNzc0YmE4MmZiMDQyN2Y3NjZlNzgzZTc3MGY0YmQ5NjQxNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV8IkX+fcDL2RIzTjEzSG4YEslLU
RtBsnT5dYujWScRh47JSNMbb9sFjyfc0tQpHWbsNGyRg6hRuhB4IN07Vmqux+YJf
qeuqRhZmkzuWNhdL4n4H5LY8ZMHIP3XMC4GW6SEaZyZM3YPDa9PxC/3f/noJOzQz
KFBrrxsx47tNFo/emIJDNsNQOihiToziy2S1g8rMRbIHuCyEG0VE4WHT9NK+FshI
BjRN4m0o51kUxeyguuP7CvB9EyplLI744bWhTJ7OeCHYSMfmB6eOabdaM+YBHWfZ
Y0Bo0PAJDSgeTfajzJnNyysGKoDcPMvqSf+2CdYsFYVTCbhLQD9Q+hrriQIDAQAB
o4IC3TCCAtkwHQYDVR0OBBYEFOy6d0uoL7BCf3ZueD53D0vZZBb5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzgxMGMx
MS1hMTA1LTRkYjEtYTZiNS0zOTJiODYzYzlmMDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvODEwYzEx
LWExMDUtNGRiMS1hNmI1LTM5MmI4NjNjOWYwMy8xLzdMcDNTNmd2c0VKX2RtNTRQ
bmNQUzlsa0Z2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF
BwEHAQH/BEUwQzAkBAIAATAeAwQAH7tEAwQFUFSAAwQBnWFAAwQDsvkIAwQCuWS0
MBsEAgACMBUDBQAqA6QgAwUAKgPeQAMFAyoGGIAwIgYIKwYBBQUHAQgBAf8EEzAR
oA8wDQICUkECAmKrAgMAxz8wDQYJKoZIhvcNAQELBQADggEBAJLAA8Xpg05JKViZ
6bMlqPpKUIi8h3n9JX7V/L2rM6YcpIgF2ZaeRnHngoPii2L+kDCCufYu8oImO32t
h+HtmJ0tB0IxVYLwkOIZsFvxGIPwknlIPr8amb3tYGD8arJ5q+ZT+xkHZ4bKgJqB
hk31cEtpK4E8ZS6mL6LSzBg/aMdknr8+daNj3G/hAiQYZPHS86hC+MqnP/RUO4nC
XxWIrOsP+C+pfyk/Wb9WTQmaQvI/Nq0pc9BewDY3YvqxC9L5qL1lSp4sx07LlymR
XN6UORwGSFoTxF1hwywh3RoPeTD4RZ8VS4Q9D6L1lynVuFSE0MZsApMA0qOGZTYg
Ng7ACO4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:19 2025 by rpki-client