Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.cer (raw, json)
Hash identifier: a/LKzfaIgD21/RA28HfWMZAEqvTJvBuhJSq7paoPNr4=
Subject key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252197EC8D1628F83F0345A7E0E08A3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201128
AS: 206739
IP: 185.84.180.0/22
IP: 194.110.168.0/22
IP: 2a05:a740::/29
IP: 2a0b:c680::/29
IP: 2a0d:4c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:97:ec:8d:16:28:f8:3f:03:45:a7:e0:e0:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:0e:ff:93:9b:f4:90:1b:04:9b:1f:d5:c9:
7a:b4:5e:25:d0:d9:77:75:b8:7b:54:6f:72:f8:b8:
47:47:8d:78:79:85:12:c8:7f:cd:e1:f7:9a:3b:8b:
7f:ba:2d:8b:67:3f:13:19:79:9d:d6:9d:30:c3:ad:
2e:d6:8a:4c:ab:c1:70:9f:89:ec:4e:7b:41:96:4c:
89:17:08:a6:c2:fe:89:74:0d:48:01:5e:b4:fe:3a:
55:f5:de:56:c4:cd:e6:0f:e7:96:b0:24:4f:10:57:
f2:99:3b:c2:b8:a0:01:da:66:b5:33:97:ea:b6:2e:
9b:9a:5b:09:67:16:da:3e:ff:49:c8:23:1d:8a:56:
13:b4:02:d2:7a:b3:42:15:82:07:7c:ba:78:54:fd:
10:c7:8d:0a:e0:c6:c0:0b:c6:42:8f:d9:36:2f:4a:
43:76:bf:d8:a0:49:7d:05:4f:25:71:72:a5:09:a3:
ef:4d:71:3b:a3:0b:50:18:d6:eb:8e:c0:aa:4b:33:
d0:1c:86:fe:4a:1c:3f:37:2b:28:20:d0:49:30:ee:
96:8d:f1:5f:c1:6c:99:ee:33:95:a2:e6:00:b6:be:
36:49:82:62:26:7f:2d:7e:ec:15:c5:8c:44:ce:c3:
62:f5:98:df:8d:76:6f:5a:9b:a7:c0:c5:90:79:e1:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0/22
194.110.168.0/22
IPv6:
2a05:a740::/29
2a0b:c680::/29
2a0d:4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201128
206739
Signature Algorithm: sha256WithRSAEncryption
2a:3c:c1:36:f8:79:8a:c8:02:e5:0c:7b:5c:51:52:76:7f:f3:
df:64:de:98:3b:ab:15:c8:af:db:75:c2:6e:23:50:1f:e3:b2:
7c:16:f0:ff:36:6b:d4:30:2b:b0:bc:ec:35:f7:8e:6f:1f:81:
69:7d:28:53:75:64:db:3d:ec:69:ba:5f:49:ec:32:ae:f4:27:
f3:70:71:a6:4f:9d:2c:11:22:c5:67:b3:fb:a3:57:ae:ad:36:
91:16:b3:be:a6:a8:29:0f:1f:67:62:bf:ab:d8:98:e6:8a:be:
92:7c:1d:e4:2f:e1:87:6b:ba:dc:47:42:89:05:cc:45:d0:7c:
8a:3a:fd:78:39:58:33:26:5d:b9:2d:44:77:de:03:4f:12:87:
6a:99:71:fc:82:d1:ef:4c:bf:83:b0:d6:99:34:69:6b:51:82:
97:bc:fb:4d:0b:1b:7b:66:32:fe:1e:62:37:2d:5e:8b:6b:a8:
54:63:91:7c:4e:de:5d:60:41:00:32:04:74:56:65:94:8c:21:
42:c0:9d:26:ee:6f:38:62:ce:15:01:4c:8c:cd:c6:59:11:d9:
ca:2d:9b:14:c8:94:51:47:37:51:7e:9d:76:7f:3a:99:1f:78:
f4:1b:d8:23:fa:db:b7:ca:08:03:fa:ed:49:80:71:20:54:4d:
f0:42:d3:88
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZQlIZfsjRYo+D8DRafg4Io6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTI1Mzg4NmEwMjUwYTA0ZWM2OWJlMDBiYmY4NDMzYzJmMDE0YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVEO/5Ob9JAbBJsf1cl6tF4l0Nl3
dbh7VG9y+LhHR414eYUSyH/N4feaO4t/ui2LZz8TGXmd1p0ww60u1opMq8Fwn4ns
TntBlkyJFwimwv6JdA1IAV60/jpV9d5WxM3mD+eWsCRPEFfymTvCuKAB2ma1M5fq
ti6bmlsJZxbaPv9JyCMdilYTtALSerNCFYIHfLp4VP0Qx40K4MbAC8ZCj9k2L0pD
dr/YoEl9BU8lcXKlCaPvTXE7owtQGNbrjsCqSzPQHIb+Shw/NysoINBJMO6WjfFf
wWyZ7jOVouYAtr42SYJiJn8tfuwVxYxEzsNi9ZjfjXZvWpunwMWQeeFS/wIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFAklOIagJQoE7Gm+ALv4QzwvAUt8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzM2Zjgz
ZS02YmU2LTQyYzUtODM4MC0xMTRhZDQxY2YzMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMzZmODNl
LTZiZTYtNDJjNS04MzgwLTExNGFkNDFjZjMzMS8xL0NTVTRocUFsQ2dUc2FiNEF1
X2hEUEM4QlMzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTASBAIAATAMAwQCuVS0AwQCwm6oMBsEAgACMBUDBQMqBadAAwUD
KgvGgAMFAyoNBMAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAxGoAgMDJ5MwDQYJ
KoZIhvcNAQELBQADggEBACo8wTb4eYrIAuUMe1xRUnZ/899k3pg7qxXIr9t1wm4j
UB/jsnwW8P82a9QwK7C87DX3jm8fgWl9KFN1ZNs97Gm6X0nsMq70J/NwcaZPnSwR
IsVns/ujV66tNpEWs76mqCkPH2div6vYmOaKvpJ8HeQv4YdrutxHQokFzEXQfIo6
/Xg5WDMmXbktRHfeA08Sh2qZcfyC0e9Mv4Ow1pk0aWtRgpe8+00LG3tmMv4eYjct
XotrqFRjkXxO3l1gQQAyBHRWZZSMIULAnSbubzhizhUBTIzNxlkR2cotmxTIlFFH
N1F+nXZ/OpkfePQb2CP627fKCAP67UmAcSBUTfBC04g=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:04 2025 by rpki-client