Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
File: Bv170s3aV23AzQiOvm7mAZceEjQ.cer (raw, json)
Hash identifier: hobrVW/j2nsL/dEBM31Wwxji+oFhJJogo95bwe+LCBc=
Subject key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206818E3B435271BB6D96A53E292733F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.235.162.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:18:e3:b4:35:27:1b:b6:d9:6a:53:e2:92:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:ba:2f:78:22:db:fb:bd:67:b6:d9:a1:89:
9c:6e:7a:5b:b8:ab:f8:6b:72:ce:53:43:37:f7:34:
92:c0:66:4a:6c:6f:06:a4:24:00:4c:44:bd:30:f9:
cc:43:79:e6:35:18:37:b7:c9:ca:07:c5:eb:07:52:
bc:a8:5c:4b:52:a0:dd:54:00:95:5e:a8:a7:50:38:
fe:fb:e8:da:b6:c0:48:f6:07:d6:87:8d:37:81:01:
be:48:05:21:5b:e7:d5:bb:ca:64:c0:e0:68:05:d5:
e6:dd:cf:cf:1c:e5:a5:4a:8f:0a:de:b5:53:57:cf:
22:d3:31:79:1e:d7:ca:89:e0:7d:02:52:71:09:38:
5d:83:87:20:9c:dd:a1:a3:ff:84:f9:1c:96:08:8d:
ea:6d:db:b3:30:ba:ef:4f:3b:f8:16:ac:5f:6f:8d:
2e:b3:c8:40:e2:eb:9d:77:a3:c5:2c:3a:c8:05:b6:
eb:51:db:18:86:fb:05:d2:7a:e1:c6:00:ce:5b:e4:
6c:25:4b:e2:bf:98:7c:78:fc:50:5f:66:97:eb:26:
3b:77:9b:95:00:72:68:6b:d5:1d:fb:17:d8:a2:e9:
c5:ef:32:16:73:05:f6:68:44:a7:a5:45:6e:3c:fc:
42:72:bb:09:92:88:81:4a:7e:28:17:18:9f:fe:b7:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.162.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a2:d5:4c:f0:4d:d1:06:59:ee:90:eb:fb:63:f5:ff:8b:38:
cc:b2:46:96:dd:b1:f7:15:13:e2:23:8e:bb:b3:c6:74:17:6e:
80:c6:df:4f:0d:7b:4b:bb:fe:f9:d8:5a:cf:7c:12:02:d4:53:
ea:e1:bf:8e:e2:03:b9:83:f6:f5:4a:f4:e3:11:0a:a2:c0:13:
a1:2c:ae:47:53:31:ec:a7:5c:7a:1f:c8:f7:e5:40:3b:4d:f3:
b1:62:31:71:44:40:65:21:37:69:15:c2:e6:a7:fd:6c:2e:ce:
3b:8e:a0:16:0f:1c:f8:47:aa:35:d1:ae:e9:07:18:9c:cf:91:
3e:2a:86:1a:43:21:97:dd:c0:17:a7:8c:cc:72:78:91:cb:fa:
0c:e6:62:ae:d9:36:4e:5b:d4:8a:1b:59:26:a0:13:92:b3:1e:
b0:a6:4c:6b:55:c4:26:1e:89:f0:ab:96:5d:9a:22:23:54:04:
bc:20:2b:67:1d:32:51:2e:ff:30:3f:6c:7c:a3:ff:83:28:ee:
f1:15:2a:d5:97:2a:35:43:ba:d7:1e:d3:6e:75:7a:82:79:30:
d4:9b:86:90:3f:c4:31:ae:13:1b:39:4d:de:f7:2c:8a:e6:03:
8a:8d:36:d4:4b:6a:a4:94:35:0f:7f:d8:91:c7:11:0d:57:92:
9c:03:16:23
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgaBjjtDUnG7bZalPiknM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZkN2JkMmNkZGE1NzZkYzBjZDA4OGViZTZlZTYwMTk3MWUxMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXC6L3gi2/u9Z7bZoYmcbnpbuKv4
a3LOU0M39zSSwGZKbG8GpCQATES9MPnMQ3nmNRg3t8nKB8XrB1K8qFxLUqDdVACV
XqinUDj+++jatsBI9gfWh403gQG+SAUhW+fVu8pkwOBoBdXm3c/PHOWlSo8K3rVT
V88i0zF5HtfKieB9AlJxCThdg4cgnN2ho/+E+RyWCI3qbduzMLrvTzv4Fqxfb40u
s8hA4uudd6PFLDrIBbbrUdsYhvsF0nrhxgDOW+RsJUviv5h8ePxQX2aX6yY7d5uV
AHJoa9Ud+xfYounF7zIWcwX2aESnpUVuPPxCcrsJkoiBSn4oFxif/rcXnwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAb9e9LN2ldtwM0Ijr5u5gGXHhI0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzYyMGRm
MS0zNGNhLTRlNTctYjNlMS1iOGQ0YmJhNzAyMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNjIwZGYx
LTM0Y2EtNGU1Ny1iM2UxLWI4ZDRiYmE3MDIxZS8xL0J2MTcwczNhVjIzQXpRaU92
bTdtQVpjZUVqUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW+uiMA0GCSqGSIb3DQEBCwUAA4IBAQAMotVM
8E3RBlnukOv7Y/X/izjMskaW3bH3FRPiI467s8Z0F26Axt9PDXtLu/752FrPfBIC
1FPq4b+O4gO5g/b1SvTjEQqiwBOhLK5HUzHsp1x6H8j35UA7TfOxYjFxREBlITdp
FcLmp/1sLs47jqAWDxz4R6o10a7pBxicz5E+KoYaQyGX3cAXp4zMcniRy/oM5mKu
2TZOW9SKG1kmoBOSsx6wpkxrVcQmHonwq5ZdmiIjVAS8ICtnHTJRLv8wP2x8o/+D
KO7xFSrVlyo1Q7rXHtNudXqCeTDUm4aQP8QxrhMbOU3e9yyK5gOKjTbUS2qklDUP
f9iRxxENV5KcAxYj
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:57 2025 by rpki-client