
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
File: 7m9CHCUwligDR9wuksoQzDmME08.cer (raw, json)
Hash identifier: YphelRc9dQOXqpN2aHqf42o9FDcw1pfGWOMeJTTL8Rg=
Subject key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D91C4C04A59C3FF45CE4FFC208F3D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44991
IP: 195.230.106.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1c:4c:04:a5:9c:3f:f4:5c:e4:ff:c2:08:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:c5:93:6e:78:52:d7:a6:2b:5b:85:09:a0:
8f:e8:7f:42:fa:a2:bb:9d:36:0c:64:2b:be:4c:06:
9c:d3:c4:42:2e:c4:9c:ca:0c:8f:eb:3f:f8:a9:d5:
fe:14:a4:48:d0:81:52:04:2f:e1:ec:9e:57:01:85:
c9:14:b6:98:47:c7:86:14:16:9a:54:db:64:aa:f1:
a8:6d:cd:60:ec:20:92:80:9d:2d:e0:b6:b8:8c:03:
ca:a9:71:c3:80:84:c6:01:09:ca:cb:01:c1:3d:08:
51:7d:f5:d1:ca:61:8a:35:39:36:c3:a3:d0:d9:f0:
51:3b:93:3d:19:2f:08:5b:e3:3f:8b:b1:40:23:3b:
0e:11:b6:2d:35:eb:e0:fd:10:cb:d2:5f:0a:21:fc:
22:ab:8d:de:86:73:66:6c:5e:65:3f:4a:2f:cd:8d:
ca:05:c1:36:aa:1c:14:b1:b4:54:b3:af:30:69:4c:
0f:7c:37:5f:53:15:60:dd:e9:fc:b1:d7:0b:b5:9a:
ce:01:f4:87:f6:4d:ab:b2:ba:76:ae:71:ab:f0:31:
92:f7:ec:a5:16:11:8b:f3:59:fd:10:64:ce:84:d5:
a6:2f:51:62:97:d9:8d:c9:21:15:1c:10:95:01:2a:
03:88:8e:51:9d:6d:b8:a8:8c:39:d4:12:88:bd:12:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44991
Signature Algorithm: sha256WithRSAEncryption
28:a5:2d:e0:a7:a9:ae:20:71:fb:33:23:af:4b:4c:00:e8:0c:
eb:ec:5e:74:7a:25:33:6b:eb:cc:8f:d2:db:ff:60:ac:3c:ce:
3c:f4:82:80:6d:4c:13:44:21:02:44:e3:5e:d3:de:55:c8:29:
d0:c7:81:5a:23:58:34:60:9f:1d:54:ca:68:b5:e7:07:5c:cb:
00:6b:4c:21:6c:46:b2:f1:8c:1c:89:3d:0c:c5:14:72:74:71:
2f:b0:fc:bb:ee:ca:b6:e6:fc:bc:ee:52:3a:4a:a0:34:56:00:
a4:f2:06:c1:12:36:d8:d2:2a:8d:07:2a:c2:98:ce:4c:75:0c:
41:40:c0:f4:83:4a:2a:80:ab:f3:ee:cf:f5:e8:c1:25:b2:0a:
f7:6e:8b:ef:71:dd:73:8b:24:c8:4f:63:52:7d:04:a2:c9:13:
ae:d8:ad:af:38:c5:e4:1a:d6:15:dc:d5:fc:6b:63:24:c3:86:
77:79:cd:a0:f5:bc:16:12:21:b4:96:50:01:58:95:0b:3d:c8:
70:8b:a9:a4:9b:17:b3:76:c7:67:9c:6c:14:c7:0f:ff:b3:e0:
aa:5f:57:3f:54:50:1e:68:81:4d:c0:41:e4:53:b8:8a:e0:7d:
cd:8d:87:77:6f:54:24:29:4b:d2:68:12:50:a0:d6:a8:6c:42:
9a:bc:48:e5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2RxMBKWcP/Rc5P/CCPPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTZmNDIxYzI1MzA5NjI4MDM0N2RjMmU5MmNhMTBjYzM5OGMxMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSDFk254UtemK1uFCaCP6H9C+qK7
nTYMZCu+TAac08RCLsScygyP6z/4qdX+FKRI0IFSBC/h7J5XAYXJFLaYR8eGFBaa
VNtkqvGobc1g7CCSgJ0t4La4jAPKqXHDgITGAQnKywHBPQhRffXRymGKNTk2w6PQ
2fBRO5M9GS8IW+M/i7FAIzsOEbYtNevg/RDL0l8KIfwiq43ehnNmbF5lP0ovzY3K
BcE2qhwUsbRUs68waUwPfDdfUxVg3en8sdcLtZrOAfSH9k2rsrp2rnGr8DGS9+yl
FhGL81n9EGTOhNWmL1Fil9mNySEVHBCVASoDiI5RnW24qIw51BKIvRKdJQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFO5vQhwlMJYoA0fcLpLKEMw5jBNPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzNlMDkz
NS02YTk1LTQ3YTQtYWQ0Yy0zNTQyZjk5YmU2M2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvM2UwOTM1
LTZhOTUtNDdhNC1hZDRjLTM1NDJmOTliZTYzYi8xLzdtOUNIQ1V3bGlnRFI5d3Vr
c29RekRtTUUwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCvvzANBgkqhkiG9w0BAQsFAAOCAQEAKKUt4KepriBx+zMjr0tMAOgM6+xedHol
M2vrzI/S2/9grDzOPPSCgG1ME0QhAkTjXtPeVcgp0MeBWiNYNGCfHVTKaLXnB1zL
AGtMIWxGsvGMHIk9DMUUcnRxL7D8u+7Ktub8vO5SOkqgNFYApPIGwRI22NIqjQcq
wpjOTHUMQUDA9INKKoCr8+7P9ejBJbIK926L73Hdc4skyE9jUn0EoskTrtitrzjF
5BrWFdzV/GtjJMOGd3nNoPW8FhIhtJZQAViVCz3IcIuppJsXs3bHZ5xsFMcP/7Pg
ql9XP1RQHmiBTcBB5FO4iuB9zY2Hd29UJClL0mgSUKDWqGxCmrxI5Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:54 2025 by rpki-client