Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
File: B4h86xy9ECnvinbfd_EVK7RztkM.cer (raw, json)
Hash identifier: 8Pd/no/MD+X279kUoyHdksQZAUV+drXMDcY2ed7ZByE=
Subject key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4267E89F386EA3EA7B88806E4848
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21409
IP: 78.24.128.0/21
IP: 80.93.80.0/20
IP: 94.125.160.0/21
IP: 109.238.0.0/20
IP: 178.170.0.0/17
IP: 185.10.96.0/22
IP: 185.246.84.0/22
IP: 213.246.32.0/19
IP: 2a00:c70::/32
IP: 2a03:59c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:67:e8:9f:38:6e:a3:ea:7b:88:80:6e:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:8d:7d:98:f2:93:f9:1d:bd:ce:87:35:7b:
09:cc:71:b1:bf:13:ad:dd:7d:55:73:de:1a:45:e7:
55:93:bc:cd:60:73:57:14:ef:db:f6:55:76:13:35:
67:8e:a2:fe:9e:6e:2b:e8:74:b8:ed:d3:09:20:cf:
89:e9:43:28:4c:67:74:d0:3c:06:52:d5:f1:2b:14:
23:df:bc:62:29:41:ec:a3:17:c4:df:8f:ec:e8:93:
1d:10:d9:b1:77:3b:df:fd:fc:72:dd:da:7a:82:c3:
8b:f0:f2:a5:c8:e8:f1:c4:e4:91:0f:3e:58:ff:5a:
28:37:be:2e:84:ea:45:c1:dd:c2:f2:42:18:e2:39:
1d:1b:7d:e3:bd:f7:c0:a2:ac:e7:34:88:e0:af:83:
de:4f:a5:32:61:f3:4b:e8:00:41:16:10:11:eb:cf:
0d:32:4c:6c:11:d9:d3:79:02:47:de:50:30:5d:20:
bb:a2:92:bc:43:6c:05:64:7b:5c:63:c4:57:e9:b8:
1e:77:ae:9c:90:b8:87:de:12:49:79:ad:8d:77:6a:
d9:51:b5:ea:60:d9:da:54:cf:d8:a2:eb:47:a0:56:
dd:62:2b:b4:7b:b4:4c:9f:cd:ec:56:51:e7:98:32:
b7:4f:4a:a6:61:15:f1:11:96:4b:32:2a:99:f9:fc:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.128.0/21
80.93.80.0/20
94.125.160.0/21
109.238.0.0/20
178.170.0.0/17
185.10.96.0/22
185.246.84.0/22
213.246.32.0/19
IPv6:
2a00:c70::/32
2a03:59c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21409
Signature Algorithm: sha256WithRSAEncryption
0b:39:40:c1:e1:25:59:93:9e:79:5e:ea:be:82:15:1b:75:a5:
0f:09:1c:89:53:31:49:29:95:47:20:44:ad:88:82:ba:47:21:
25:11:b7:33:10:44:9e:55:fe:bf:f6:70:76:9e:57:cf:bb:7e:
87:93:a3:2d:0c:28:bc:d5:17:69:6a:3e:12:a0:27:a2:68:cb:
22:16:d8:13:5b:95:fe:2c:59:de:ad:4c:d9:31:2f:41:fb:68:
50:2f:c1:39:3c:d5:3d:03:92:13:d6:f5:6e:45:5a:09:ea:ea:
3e:09:cc:93:a6:d7:62:45:69:fc:d4:4e:7f:ef:04:7f:fa:d0:
b7:2d:a0:f4:2f:33:be:dd:ec:3f:07:4b:ff:d6:30:5b:b4:e8:
02:a8:0e:d3:8e:4a:83:8d:16:33:76:c6:f0:52:0c:35:3b:3d:
2e:4a:a6:af:69:5b:73:be:26:f1:1a:11:94:8e:2f:a3:c9:2f:
a5:8f:f9:59:06:32:b0:06:f8:6f:20:68:f9:de:0e:ad:75:b4:
fa:97:c7:5b:db:1c:47:d2:00:28:f1:5b:3c:5d:83:0d:67:78:
5f:4f:00:15:7c:e3:4f:69:da:f5:d5:b0:72:63:8d:b7:87:ab:
c2:bb:6b:1f:2f:b6:ab:d2:c6:f6:e9:13:40:85:9c:56:43:b1:
2c:92:8a:84
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAZQfjEJn6J84bqPqe4iAbkhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzg4N2NlYjFjYmQxMDI5ZWY4YTc2ZGY3N2YxMTUyYmI0NzNiNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUONfZjyk/kdvc6HNXsJzHGxvxOt
3X1Vc94aRedVk7zNYHNXFO/b9lV2EzVnjqL+nm4r6HS47dMJIM+J6UMoTGd00DwG
UtXxKxQj37xiKUHsoxfE34/s6JMdENmxdzvf/fxy3dp6gsOL8PKlyOjxxOSRDz5Y
/1ooN74uhOpFwd3C8kIY4jkdG33jvffAoqznNIjgr4PeT6UyYfNL6ABBFhAR688N
MkxsEdnTeQJH3lAwXSC7opK8Q2wFZHtcY8RX6bged66ckLiH3hJJea2Nd2rZUbXq
YNnaVM/YoutHoFbdYiu0e7RMn83sVlHnmDK3T0qmYRXxEZZLMiqZ+fxnvwIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFAeIfOscvRAp74p233fxFSu0c7ZDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzAyNDQ1
Yy04MWY5LTQ3YjMtOTM4NS0zNGY3ZDUxMzEzNjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMDI0NDVj
LTgxZjktNDdiMy05Mzg1LTM0ZjdkNTEzMTM2Ny8xL0I0aDg2eHk5RUNudmluYmZk
X0VWSzdSenRrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA2BAIAATAwAwQDThiAAwQEUF1QAwQDXn2gAwQEbe4AAwQHsqoA
AwQCuQpgAwQCufZUAwQF1fYgMBQEAgACMA4DBQAqAAxwAwUAKgNZwDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJToTANBgkqhkiG9w0BAQsFAAOCAQEACzlAweElWZOe
eV7qvoIVG3WlDwkciVMxSSmVRyBErYiCukchJRG3MxBEnlX+v/Zwdp5Xz7t+h5Oj
LQwovNUXaWo+EqAnomjLIhbYE1uV/ixZ3q1M2TEvQftoUC/BOTzVPQOSE9b1bkVa
CerqPgnMk6bXYkVp/NROf+8Ef/rQty2g9C8zvt3sPwdL/9YwW7ToAqgO045Kg40W
M3bG8FIMNTs9Lkqmr2lbc74m8RoRlI4vo8kvpY/5WQYysAb4byBo+d4OrXW0+pfH
W9scR9IAKPFbPF2DDWd4X08AFXzjT2na9dWwcmONt4erwrtrHy+2q9LG9ukTQIWc
VkOxLJKKhA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:17 2025 by rpki-client