Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer (raw, json)
Hash identifier: N3mLOTx5G7zdNW+mwlChTRayvMLKY6PmZcY9FNPn0lA=
Subject key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC5DB1C982707E7D2FC0FD5731EE1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62253
IP: 185.124.67.0/24
IP: 2a12:ca80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5d:b1:c9:82:70:7e:7d:2f:c0:fd:57:31:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:ae:bb:40:03:34:77:0f:80:d5:f0:19:01:
f4:ce:6e:f6:fb:11:a6:f8:5e:d1:1d:c4:33:ea:11:
ef:4c:a6:9f:ed:09:d4:e8:fb:06:fc:12:a5:6f:0c:
e8:64:5f:45:de:b4:77:e0:f6:bd:d7:b9:9e:d6:ed:
c6:ec:4c:da:b6:dc:bb:a9:44:ca:d8:27:d4:a0:c0:
bd:1f:a9:e6:ee:ab:a5:71:03:10:b6:dd:3c:ed:3f:
17:c9:6c:08:4a:ce:a5:21:1e:3b:67:5e:9f:d8:b3:
5e:b6:13:a4:78:51:68:a2:1b:8f:5a:0b:60:e1:d9:
80:02:99:76:1e:fd:e1:3b:72:04:2e:57:f8:56:96:
84:25:05:c3:67:89:61:00:6a:45:5a:e9:f0:d3:47:
76:b9:e4:7b:28:54:73:c1:df:44:98:db:0f:72:6c:
38:82:1f:b3:5a:10:52:0e:8a:91:e6:d2:f4:f8:37:
ae:dc:0c:36:12:0f:5f:f0:31:73:57:b1:1f:6a:d6:
de:30:0d:16:1c:02:45:8d:31:da:ae:5d:d0:56:6e:
db:93:b4:c6:5f:f6:06:e1:f1:24:1f:7f:57:b0:d3:
64:45:9f:a6:8a:04:a7:a2:bd:52:30:04:d1:71:be:
4f:f2:8f:f3:3b:34:6d:51:af:b8:d5:cb:cb:bb:46:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.67.0/24
IPv6:
2a12:ca80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62253
Signature Algorithm: sha256WithRSAEncryption
66:2d:c6:84:16:26:a0:fc:e2:75:55:90:fa:2c:7b:60:56:af:
cb:4b:04:c8:ba:e6:4c:0f:2a:d6:fc:88:2f:e3:cf:55:07:cd:
3e:a0:3b:41:3b:8e:3c:ca:31:11:b4:7b:20:4e:f4:31:1e:b6:
72:f2:87:f0:a2:74:91:96:ae:f9:b9:8b:37:98:a4:ca:6f:06:
c4:63:0b:70:4c:9b:f4:59:71:17:79:e4:11:bb:ac:b2:af:98:
ec:59:26:3b:19:7b:96:cc:a8:0a:d0:6e:99:05:69:06:fc:61:
5d:7c:89:f7:70:a2:23:e0:ef:28:01:34:4f:cd:76:7a:58:8e:
bc:76:e6:9d:33:0a:26:de:71:fc:46:2d:17:e5:d1:8a:d9:28:
4c:3e:31:4d:26:ed:17:2b:31:cc:ab:07:a5:34:23:a9:14:4b:
c2:b2:d0:8f:09:6a:a1:9a:3b:68:ff:d1:66:84:be:ef:bd:b2:
38:79:48:93:ab:d3:f8:16:26:37:60:00:06:d3:62:25:38:be:
15:8a:92:6c:cc:ac:94:23:27:51:03:b1:33:68:47:10:c8:d3:
db:44:a3:db:90:03:e1:d5:02:f0:8a:b8:9d:52:cf:6e:fe:5b:
cb:bc:d1:bb:aa:b9:e7:d0:70:99:73:59:34:70:95:c0:bf:95:
93:3f:2a:31
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/F2xyYJwfn0vwP1XMe4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDM3NzRhMjc2MjE0Yjg2ZTBhNWI0ZmE3NzIxYmRiMGUzMjJlMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg2uu0ADNHcPgNXwGQH0zm72+xGm
+F7RHcQz6hHvTKaf7QnU6PsG/BKlbwzoZF9F3rR34Pa917me1u3G7Ezatty7qUTK
2CfUoMC9H6nm7qulcQMQtt087T8XyWwISs6lIR47Z16f2LNethOkeFFoohuPWgtg
4dmAApl2Hv3hO3IELlf4VpaEJQXDZ4lhAGpFWunw00d2ueR7KFRzwd9EmNsPcmw4
gh+zWhBSDoqR5tL0+Deu3Aw2Eg9f8DFzV7EfatbeMA0WHAJFjTHarl3QVm7bk7TG
X/YG4fEkH39XsNNkRZ+migSnor1SMATRcb5P8o/zOzRtUa+41cvLu0YMBQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPA3dKJ2IUuG4KW0+nchvbDjIuCAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzFlZDg4
My0zNzZhLTQ1ZjktODg4NC1iODE2MjI2MDEyNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMWVkODgz
LTM3NmEtNDVmOS04ODg0LWI4MTYyMjYwMTI0Zi8xLzhEZDBvblloUzRiZ3BiVDZk
eUc5c09NaTRJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuXxDMA0EAgACMAcDBQMqEsqAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDzLTANBgkqhkiG9w0BAQsFAAOCAQEAZi3GhBYmoPzi
dVWQ+ix7YFavy0sEyLrmTA8q1vyIL+PPVQfNPqA7QTuOPMoxEbR7IE70MR62cvKH
8KJ0kZau+bmLN5ikym8GxGMLcEyb9FlxF3nkEbussq+Y7FkmOxl7lsyoCtBumQVp
BvxhXXyJ93CiI+DvKAE0T812eliOvHbmnTMKJt5x/EYtF+XRitkoTD4xTSbtFysx
zKsHpTQjqRRLwrLQjwlqoZo7aP/RZoS+772yOHlIk6vT+BYmN2AABtNiJTi+FYqS
bMyslCMnUQOxM2hHEMjT20Sj25AD4dUC8Iq4nVLPbv5by7zRu6q559BwmXNZNHCV
wL+Vkz8qMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:26 2025 by rpki-client