Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer (raw, json)
Hash identifier: 5vFuqvedqiY54n/c4K3jK8bOwcBZ1XCOrobMmAay/wg=
Subject key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422201259709F7A880012F6A983DE81BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57024
IP: 146.0.24.0/21
IP: 2a01:9680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:59:70:9f:7a:88:00:12:f6:a9:83:de:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:8d:55:c1:e3:75:b8:a5:1b:71:73:9c:a9:
27:e8:6a:34:ce:e2:7f:76:df:be:e8:e0:73:93:df:
04:21:f3:d8:76:35:bd:d1:36:1a:7b:8f:a5:38:6d:
07:9e:97:9a:f6:0c:80:a5:1d:57:70:36:9d:7d:16:
5c:35:a1:45:c9:c5:64:00:57:a7:65:7b:81:b2:36:
f7:cb:61:87:d1:8e:9b:66:b3:4f:03:bb:92:af:b0:
f6:d1:22:01:1e:8c:44:6b:54:18:9b:fd:c2:0b:fc:
05:bd:82:37:81:67:f9:d1:d7:42:4c:0a:ce:2a:44:
cf:16:3e:a4:30:2d:f2:58:35:59:de:d4:b9:ea:5e:
ff:37:53:5a:0c:d2:62:bb:26:20:a5:2c:82:eb:2c:
35:e0:45:3e:b4:f0:9c:ed:bf:fb:df:ce:3d:a2:f8:
e2:3c:0f:0d:20:26:ec:c0:ff:04:86:01:8a:1c:df:
64:dd:c7:8b:bc:70:7e:7f:c1:e0:df:2c:b9:79:3a:
f8:0a:79:85:1f:7f:28:cd:ee:7a:dc:f5:fb:b3:2e:
3f:65:ea:29:db:ac:30:18:1c:db:04:4d:60:8b:de:
d0:a0:81:e9:51:3a:e4:10:eb:77:cc:27:91:ba:1c:
97:5d:0e:66:98:cd:e2:01:6c:b5:9a:bd:5d:83:52:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.24.0/21
IPv6:
2a01:9680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57024
Signature Algorithm: sha256WithRSAEncryption
a4:b9:25:a2:8f:d9:85:93:13:60:15:16:90:da:f5:3e:08:17:
da:26:97:59:6e:46:fb:1b:cf:73:90:58:31:c0:a0:a1:5b:26:
8a:18:1c:1a:b8:64:f8:d6:97:cc:f5:81:c2:70:3f:ee:76:68:
aa:db:1b:00:4d:6a:8b:cb:50:88:f4:3d:96:04:6d:71:55:3b:
59:3e:72:9a:79:82:81:d0:46:0b:57:ea:9c:b2:cb:ca:de:9c:
7e:22:32:bb:8c:e5:42:9b:90:46:4a:5d:3c:8f:94:ef:3d:97:
fd:92:55:55:48:11:be:bc:0d:ca:32:20:da:41:70:b9:ab:58:
af:df:7a:89:38:f3:94:bf:ec:a9:2f:0e:f7:f0:91:e7:46:e3:
1f:91:68:27:75:ad:1a:35:0c:2e:42:9b:49:34:37:91:56:a2:
61:fc:47:31:43:c5:17:b7:fd:08:27:a7:23:5c:a1:d2:f2:f6:
0b:93:8f:99:11:45:9c:ee:71:56:4b:2f:05:27:ce:da:1b:98:
16:c2:97:77:7d:99:5c:65:81:2f:79:ec:61:9c:fe:fa:2f:9c:
22:9b:93:60:dc:df:17:e1:14:34:45:a7:ec:2e:86:8a:3c:db:
94:71:29:b3:83:11:fc:6e:6d:65:a6:a2:45:85:37:bb:4c:95:
2f:44:9e:c1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiIBJZcJ96iAAS9qmD3oG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzczOTBmYzYxNjA4YzAxNzg1ZDFhODA2ODVhZTllNTZhNWIyNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupONVcHjdbilG3FznKkn6Go0zuJ/
dt++6OBzk98EIfPYdjW90TYae4+lOG0Hnpea9gyApR1XcDadfRZcNaFFycVkAFen
ZXuBsjb3y2GH0Y6bZrNPA7uSr7D20SIBHoxEa1QYm/3CC/wFvYI3gWf50ddCTArO
KkTPFj6kMC3yWDVZ3tS56l7/N1NaDNJiuyYgpSyC6yw14EU+tPCc7b/73849ovji
PA8NICbswP8EhgGKHN9k3ceLvHB+f8Hg3yy5eTr4CnmFH38oze563PX7sy4/Zeop
26wwGBzbBE1gi97QoIHpUTrkEOt3zCeRuhyXXQ5mmM3iAWy1mr1dg1JzoQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPdzkPxhYIwBeF0agGha6eVqWyWDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzY1Njhj
Ni03ZGQ4LTQ0MWEtODAyZi02M2FiZjYxOThmNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNjU2OGM2
LTdkZDgtNDQxYS04MDJmLTYzYWJmNjE5OGY1OC8xLzkzT1FfR0ZnakFGNFhScUFh
RnJwNVdwYkpZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDkgAYMA0EAgACMAcDBQMqAZaAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDewDANBgkqhkiG9w0BAQsFAAOCAQEApLkloo/ZhZMT
YBUWkNr1PggX2iaXWW5G+xvPc5BYMcCgoVsmihgcGrhk+NaXzPWBwnA/7nZoqtsb
AE1qi8tQiPQ9lgRtcVU7WT5ymnmCgdBGC1fqnLLLyt6cfiIyu4zlQpuQRkpdPI+U
7z2X/ZJVVUgRvrwNyjIg2kFwuatYr996iTjzlL/sqS8O9/CR50bjH5FoJ3WtGjUM
LkKbSTQ3kVaiYfxHMUPFF7f9CCenI1yh0vL2C5OPmRFFnO5xVksvBSfO2huYFsKX
d32ZXGWBL3nsYZz++i+cIpuTYNzfF+EUNEWn7C6GijzblHEps4MR/G5tZaaiRYU3
u0yVL0SewQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:59 2025 by rpki-client