Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.cer (raw, json)
Hash identifier: JThu2wjCXi/1vjOW006t011+jH+aIhriTDLRHU4b6qw=
Subject key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C3D51F019EA44703F8E70BDEAB7A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42320
IP: 77.72.112.0/21
IP: 2a02:a70::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3d:51:f0:19:ea:44:70:3f:8e:70:bd:ea:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:86:c3:64:8c:80:51:b9:c1:19:54:69:41:
e2:03:17:12:2f:6d:26:a8:84:4b:1e:fa:91:47:bf:
92:b9:62:2a:96:67:e0:c7:70:45:6d:6f:fd:90:29:
44:6e:c2:ee:78:f6:93:74:d9:d7:ca:83:00:d4:51:
3a:49:1c:88:b6:ba:ad:86:ff:5a:9f:fd:ff:1a:42:
1d:93:08:6b:9a:e6:4e:90:28:03:cc:2a:36:fa:54:
53:6f:37:d2:f9:04:b7:98:52:ab:07:8c:4a:8d:30:
7a:53:cf:c3:26:8d:ec:63:c2:17:f9:d6:77:ae:89:
33:9e:e2:32:59:79:a9:c8:0a:a8:4b:d7:45:2d:77:
12:22:5b:1b:76:0c:b8:9b:43:b2:47:21:ad:86:da:
60:c1:a5:d6:ad:27:c3:eb:e0:41:ab:18:8e:97:c1:
60:61:61:b2:c7:79:82:26:13:35:99:90:04:90:d7:
c2:9d:c2:2a:6c:d4:82:e0:21:df:95:c0:2e:f9:3c:
45:c6:9d:38:ae:1d:81:37:e2:fb:4a:4f:be:78:cb:
72:79:c0:a5:5b:85:e8:da:65:7d:38:28:b4:10:2b:
14:2d:d0:ed:22:d7:f5:e9:e8:2f:63:12:3b:a4:a7:
ed:f3:79:64:3f:8f:93:cd:38:98:41:ff:b8:7c:eb:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.112.0/21
IPv6:
2a02:a70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42320
Signature Algorithm: sha256WithRSAEncryption
23:31:70:18:04:d8:de:b5:dd:c1:d0:e9:f3:19:2c:50:7f:d1:
7e:d3:e7:67:60:14:17:6d:7b:75:e9:10:b3:2f:b7:b8:6c:3f:
be:6a:ce:b8:77:84:c1:05:7f:29:e8:35:1d:09:88:04:a9:e0:
ee:36:3e:87:fa:0a:ad:93:17:2f:12:a7:23:1a:f6:c2:80:e7:
72:24:31:2f:f7:41:47:77:df:2f:59:a9:08:26:41:0d:54:f2:
f1:bc:46:8a:0e:66:d8:0f:d1:5a:82:1d:f1:6f:01:1b:86:21:
9e:17:af:5d:91:a5:e8:c2:12:40:50:15:fa:5c:68:99:8b:c1:
2d:61:9a:dd:65:2a:e6:b4:69:f7:ea:b7:34:de:69:a7:e9:e8:
8b:61:bb:8c:f3:07:65:18:ba:09:78:4a:9b:0f:44:5b:fa:5b:
7c:0c:84:f8:ae:50:98:9c:8f:cc:7f:95:e8:6e:d7:6e:d4:02:
6a:b2:32:2b:20:a9:8e:6f:db:35:d9:a7:6f:c5:f9:67:81:ce:
f4:9a:bb:95:bb:e7:b8:51:2a:7b:bb:ac:f7:1d:7e:0e:57:b5:
b3:b9:fd:93:c5:29:14:65:4e:53:50:de:29:b4:b3:4d:37:66:
27:f4:90:02:0d:4b:b6:10:ae:ca:55:73:3c:bc:4b:03:81:67:
71:69:40:e0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQmbD1R8BnqRHA/jnC96remMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjAyOTQ0Nzk0NTkxODI0NTljMTVkOGNhMDEwYThhN2Y0N2Y4MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiiGw2SMgFG5wRlUaUHiAxcSL20m
qIRLHvqRR7+SuWIqlmfgx3BFbW/9kClEbsLuePaTdNnXyoMA1FE6SRyItrqthv9a
n/3/GkIdkwhrmuZOkCgDzCo2+lRTbzfS+QS3mFKrB4xKjTB6U8/DJo3sY8IX+dZ3
rokznuIyWXmpyAqoS9dFLXcSIlsbdgy4m0OyRyGthtpgwaXWrSfD6+BBqxiOl8Fg
YWGyx3mCJhM1mZAEkNfCncIqbNSC4CHflcAu+TxFxp04rh2BN+L7Sk++eMtyecCl
W4Xo2mV9OCi0ECsULdDtItf16egvYxI7pKft83lkP4+TzTiYQf+4fOs1TwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO8ClEeUWRgkWcFdjKAQqKf0f4DIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzViY2U0
Ni1jYzliLTQ4M2YtYjk0MC0wNDdiYTBlNjJkZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNWJjZTQ2
LWNjOWItNDgzZi1iOTQwLTA0N2JhMGU2MmRlNC8xLzd3S1VSNVJaR0NSWndWMk1v
QkNvcF9SX2dNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDTUhwMA0EAgACMAcDBQAqAgpwMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwClUDANBgkqhkiG9w0BAQsFAAOCAQEAIzFwGATY3rXd
wdDp8xksUH/RftPnZ2AUF217dekQsy+3uGw/vmrOuHeEwQV/Keg1HQmIBKng7jY+
h/oKrZMXLxKnIxr2woDnciQxL/dBR3ffL1mpCCZBDVTy8bxGig5m2A/RWoId8W8B
G4YhnhevXZGl6MISQFAV+lxomYvBLWGa3WUq5rRp9+q3NN5pp+noi2G7jPMHZRi6
CXhKmw9EW/pbfAyE+K5QmJyPzH+V6G7XbtQCarIyKyCpjm/bNdmnb8X5Z4HO9Jq7
lbvnuFEqe7us9x1+Dle1s7n9k8UpFGVOU1DeKbSzTTdmJ/SQAg1LthCuylVzPLxL
A4FncWlA4A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:35 2025 by rpki-client