Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.cer (raw, json)
Hash identifier: PGr5htMWPzDhdViJ87D6gTgiju84cKmaD+GpKwPNtgM=
Subject key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC41FA5027AEAC3E77A0FBA0CC90F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.31.8.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c4:1f:a5:02:7a:ea:c3:e7:7a:0f:ba:0c:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:62:c8:1e:72:2e:93:ce:c2:de:42:43:21:
ba:22:de:b3:47:8d:b6:70:a1:28:32:30:4e:da:e5:
c0:c0:9d:c8:66:44:79:75:ea:20:5e:aa:3a:94:de:
62:69:a3:03:ea:dd:32:f7:d2:f4:fe:e7:a2:a5:7e:
6e:e4:b9:03:14:a5:36:5b:60:2e:f2:c6:17:9d:b5:
81:1f:9e:f0:f4:56:d5:df:9d:8f:31:df:cf:07:bc:
90:c7:88:79:c7:b2:cb:7c:3a:8b:0b:76:38:ee:ef:
70:ca:c9:4e:72:a5:ad:5f:ef:62:af:7d:4a:4e:1f:
d8:4c:35:86:15:bc:a8:61:2c:22:f6:d0:97:2d:ae:
8e:c0:d8:88:43:76:e8:24:e2:49:ab:ac:1f:8e:b6:
34:5f:22:90:f1:5b:b0:5c:54:59:ac:2d:cd:bd:ee:
0e:1e:c0:a7:b9:8e:fc:14:3e:28:69:f2:7e:88:3d:
03:42:4f:65:01:a4:15:4d:98:ab:ee:95:7b:24:4a:
18:6f:b6:dd:4a:41:6f:12:33:43:69:db:8a:a7:74:
ff:87:3c:e2:64:86:29:dd:de:6d:08:2f:fa:1a:37:
78:94:13:16:1f:be:18:c9:c6:f7:ac:da:98:75:8d:
b1:48:79:d5:f5:88:a6:1f:d5:ec:79:a9:c0:62:c7:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.8.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:ff:60:38:3f:74:9d:6a:dd:22:62:71:5c:5f:0f:2f:c5:
4f:fd:2e:07:41:9f:8e:4e:b7:08:b2:83:63:d1:ab:29:3e:45:
3d:8c:07:94:f0:35:ea:63:c2:67:b9:ea:12:7c:ea:8b:0f:f6:
8d:d0:ca:54:5b:c5:b8:07:09:55:de:d3:83:99:1f:78:7e:ed:
a6:39:b4:3f:d7:c7:a8:a7:50:f4:5d:60:92:6e:7e:2e:27:aa:
fd:92:cf:c5:e5:0f:2a:7c:df:50:89:90:05:e4:0e:96:e1:17:
1a:00:6e:1f:f4:c0:f0:57:ef:bd:5e:07:30:27:81:40:43:e8:
b3:32:10:82:6a:a9:f5:33:22:34:85:40:c3:29:8a:8d:15:22:
09:cc:0f:0d:53:34:36:65:d7:4c:23:97:f0:1f:a3:20:79:59:
18:49:ec:5d:34:52:d7:7b:f8:41:df:ac:9e:91:49:ab:4c:40:
df:c4:57:08:96:b4:4b:f4:86:d0:5b:10:24:60:b7:71:05:ce:
68:00:bd:57:75:7b:bb:ba:51:27:ac:c5:d9:d9:13:68:31:b1:
19:ef:a8:92:8e:91:66:54:38:54:ea:92:fe:a9:e2:fc:4e:03:
41:59:69:0a:7a:66:82:13:89:88:e3:49:17:8a:44:8f:25:49:
2d:6d:62:b7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH8QfpQJ66sPneg+6DMkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQyNGFmYTRiY2VlNzY1NGJkZjNhYjc5MTY1NmU0NDQ1YzJmOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVpiyB5yLpPOwt5CQyG6It6zR422
cKEoMjBO2uXAwJ3IZkR5deogXqo6lN5iaaMD6t0y99L0/ueipX5u5LkDFKU2W2Au
8sYXnbWBH57w9FbV352PMd/PB7yQx4h5x7LLfDqLC3Y47u9wyslOcqWtX+9ir31K
Th/YTDWGFbyoYSwi9tCXLa6OwNiIQ3boJOJJq6wfjrY0XyKQ8VuwXFRZrC3Nve4O
HsCnuY78FD4oafJ+iD0DQk9lAaQVTZir7pV7JEoYb7bdSkFvEjNDaduKp3T/hzzi
ZIYp3d5tCC/6Gjd4lBMWH74Yycb3rNqYdY2xSHnV9YimH9XseanAYses6QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAVCSvpLzudlS986t5FlbkRFwvlaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzUxMTZm
My1mNDU0LTRkNzAtYjlkNC0wODFiMTc5OTMzYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNTExNmYz
LWY0NTQtNGQ3MC1iOWQ0LTA4MWIxNzk5MzNjNC8xL0JVSksta3ZPNTJWTDN6cTNr
V1Z1UkVYQy1Wby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuR8IMA0GCSqGSIb3DQEBCwUAA4IBAQADaP9g
OD90nWrdImJxXF8PL8VP/S4HQZ+OTrcIsoNj0aspPkU9jAeU8DXqY8JnueoSfOqL
D/aN0MpUW8W4BwlV3tODmR94fu2mObQ/18eop1D0XWCSbn4uJ6r9ks/F5Q8qfN9Q
iZAF5A6W4RcaAG4f9MDwV++9XgcwJ4FAQ+izMhCCaqn1MyI0hUDDKYqNFSIJzA8N
UzQ2ZddMI5fwH6MgeVkYSexdNFLXe/hB36yekUmrTEDfxFcIlrRL9IbQWxAkYLdx
Bc5oAL1XdXu7ulEnrMXZ2RNoMbEZ76iSjpFmVDhU6pL+qeL8TgNBWWkKemaCE4mI
40kXikSPJUktbWK3
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:04 2025 by rpki-client