Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer (raw, json)
Hash identifier: aWGzGSj8hTgoCyR/hVRfD9fpOoGXvRX/iSfbkS0U58Y=
Subject key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424449B6BBACA57580370A8BA634B16FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210796
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9b:6b:ba:ca:57:58:03:70:a8:ba:63:4b:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0817255df3130bdb77fc37187d06005fee066724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:a6:88:c7:6c:97:c5:99:b6:07:f5:5f:f4:
be:2f:2e:c9:24:a8:b8:09:ad:11:b6:c2:be:79:f1:
ae:79:b0:e3:97:d7:48:e8:87:38:92:5a:f0:0c:6b:
a0:ca:18:62:5c:7c:f7:5f:87:81:02:f7:a0:45:01:
f7:c9:b2:9e:b1:60:e8:f4:70:29:a7:55:af:73:2e:
ad:7a:99:9d:c9:ac:e3:df:bc:73:97:39:5c:db:36:
c9:32:af:ed:46:90:03:e8:5d:ae:17:d0:d0:04:3b:
d3:8a:f5:f4:54:50:1b:bc:bc:63:db:af:82:82:f8:
45:51:aa:6a:6d:61:c2:37:af:ba:5a:ea:c4:67:da:
a8:80:ef:ce:f5:0e:09:22:ba:9a:22:00:50:08:b6:
ec:ca:92:21:20:ed:dc:a6:90:25:0c:c3:d6:f9:fd:
40:aa:62:c8:1b:8f:11:6f:69:2a:23:b3:b8:13:ed:
db:63:fe:17:ba:76:80:27:a8:78:ba:e4:e1:1c:ba:
b0:e6:48:97:2b:29:15:45:03:69:5a:3c:ed:5a:e4:
58:16:df:06:a4:da:55:0c:45:81:74:2f:40:bc:c9:
6c:cb:9c:5e:e3:00:81:8d:31:87:6e:44:59:36:a4:
da:fa:31:df:0d:fd:17:08:bf:bc:da:2e:61:ea:94:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210796
Signature Algorithm: sha256WithRSAEncryption
a0:5e:39:07:8b:40:9d:1b:6c:07:85:3a:db:b1:c5:58:c6:57:
e3:61:b1:5a:53:e5:fb:c8:6d:4d:dc:48:4d:04:36:3e:e7:69:
44:5e:00:c7:7c:b0:d4:9d:79:85:4d:1a:53:cd:e4:60:59:f5:
25:48:ec:44:b1:50:cf:a8:11:89:08:0d:5b:a1:3f:c7:a2:d5:
47:b1:ec:5b:e8:ad:c0:02:b8:17:20:67:5b:68:46:b6:c1:b8:
89:d8:84:b7:3a:56:58:5c:0c:d8:99:ae:55:e3:9c:5d:36:d5:
39:9d:fe:9a:f8:eb:aa:86:09:07:11:33:f4:12:e0:5e:5a:42:
73:bb:65:34:77:ea:61:1d:b6:94:95:37:46:87:71:1f:17:be:
11:8f:55:21:34:c3:8d:98:d3:a8:dc:d3:a5:a7:a1:84:d8:ab:
13:01:63:fb:a6:be:ea:c0:a6:97:a8:cf:7f:7e:a9:25:5b:dc:
40:a6:a8:56:76:f1:b3:90:3f:4d:8f:19:94:f5:e5:c8:29:b9:
30:30:54:41:39:5c:bf:56:8d:32:f4:44:ca:29:b6:ae:b3:ee:
07:c1:ff:4f:89:c5:5c:b9:91:0c:04:5b:ad:41:ce:e2:e0:7b:
fa:a1:dd:c4:68:77:ee:bb:c9:ca:5a:28:a2:83:a1:0b:f2:47:
1d:07:4f:12
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQkRJtruspXWANwqLpjSxb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODE3MjU1ZGYzMTMwYmRiNzdmYzM3MTg3ZDA2MDA1ZmVlMDY2NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt6miMdsl8WZtgf1X/S+Ly7JJKi4
Ca0RtsK+efGuebDjl9dI6Ic4klrwDGugyhhiXHz3X4eBAvegRQH3ybKesWDo9HAp
p1Wvcy6tepmdyazj37xzlzlc2zbJMq/tRpAD6F2uF9DQBDvTivX0VFAbvLxj26+C
gvhFUapqbWHCN6+6WurEZ9qogO/O9Q4JIrqaIgBQCLbsypIhIO3cppAlDMPW+f1A
qmLIG48Rb2kqI7O4E+3bY/4XunaAJ6h4uuThHLqw5kiXKykVRQNpWjztWuRYFt8G
pNpVDEWBdC9AvMlsy5xe4wCBjTGHbkRZNqTa+jHfDf0XCL+82i5h6pTxGwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAgXJV3zEwvbd/w3GH0GAF/uBmckMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2E0MTdj
NC0zYWYyLTQzZTgtYTRjMS0zZGFkMDI5YjJkNGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvYTQxN2M0
LTNhZjItNDNlOC1hNGMxLTNkYWQwMjliMmQ0ZS8xL0NCY2xYZk1UQzl0M19EY1lm
UVlBWC00R1p5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3bDANBgkqhkiG9w0BAQsFAAOCAQEAoF45B4tAnRts
B4U627HFWMZX42GxWlPl+8htTdxITQQ2PudpRF4Ax3yw1J15hU0aU83kYFn1JUjs
RLFQz6gRiQgNW6E/x6LVR7HsW+itwAK4FyBnW2hGtsG4idiEtzpWWFwM2JmuVeOc
XTbVOZ3+mvjrqoYJBxEz9BLgXlpCc7tlNHfqYR22lJU3RodxHxe+EY9VITTDjZjT
qNzTpaehhNirEwFj+6a+6sCml6jPf36pJVvcQKaoVnbxs5A/TY8ZlPXlyCm5MDBU
QTlcv1aNMvREyim2rrPuB8H/T4nFXLmRDARbrUHO4uB7+qHdxGh37rvJylooooOh
C/JHHQdPEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:46 2025 by rpki-client