Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
File: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer (raw, json)
Hash identifier: sDFuQ6JE+wnkSyN42H+APQ7Vh49Ex88HIsM7AiMQ4ak=
Subject key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425219EB9184B8F8BBCB24E49AE096990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209048
IP: 45.8.244.0/22
IP: 2a0e:a200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:b9:18:4b:8f:8b:bc:b2:4e:49:ae:09:69:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:c6:9c:fb:c7:a7:48:23:73:c2:69:7d:c9:
a9:0f:fc:65:9b:8a:41:3d:f4:d3:98:5f:05:1d:88:
dd:0d:b5:05:eb:de:ac:12:c5:32:61:62:3f:24:be:
81:0c:e6:d0:a9:36:ed:60:89:f0:b8:7e:e8:66:06:
f9:12:da:f1:37:dd:2d:3a:01:62:63:ff:c2:1e:73:
27:7f:fc:a4:80:db:b5:c5:98:0e:f8:57:69:89:b2:
b3:50:23:4f:3e:1d:1c:cb:b7:17:3b:97:2f:c4:99:
e2:b0:2d:a9:f8:f7:e5:89:01:87:6d:7d:b5:11:f2:
85:39:1c:8d:0f:3b:92:5d:eb:41:4b:20:c2:70:33:
53:2c:1a:c9:c4:49:a8:b8:2b:80:8f:d8:67:9d:e6:
72:41:a8:b6:8f:44:9a:7e:e3:eb:49:90:74:17:f0:
5d:e2:92:96:48:b8:72:f0:43:bd:c7:7c:22:4d:db:
38:16:79:11:1e:d3:63:05:0f:00:b5:a8:c0:0a:58:
44:c8:ce:98:46:34:59:15:0f:30:51:3a:dd:79:43:
00:a1:c9:f1:b7:11:49:86:37:7b:e2:28:f2:73:49:
d4:cc:0d:c2:67:10:27:06:99:9d:e5:55:28:24:90:
dc:e8:8b:a6:bb:a5:97:da:4a:eb:0f:e4:ba:3a:6a:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.244.0/22
IPv6:
2a0e:a200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209048
Signature Algorithm: sha256WithRSAEncryption
64:93:96:16:49:fd:f3:96:87:a5:f5:50:3b:cc:1b:87:9b:ba:
24:dd:3b:22:90:d4:b4:98:6d:9d:5c:29:dc:60:fb:c3:45:bc:
b2:e5:94:f8:c7:20:09:9c:51:ac:13:1c:a9:2d:6c:58:33:f4:
f6:e6:d7:34:bc:ff:81:30:90:ff:20:5b:9f:4d:71:60:5a:58:
b0:ca:8f:b8:57:55:a1:89:d2:e2:95:99:f5:bc:b4:6d:de:09:
0b:ef:11:34:fd:77:21:8f:cb:d8:b6:4e:49:b0:71:83:0d:f8:
bd:16:cd:57:7a:23:51:0b:6f:c2:cb:92:7c:c2:48:7e:1a:e6:
eb:d6:ce:9e:46:55:c7:ce:69:7f:09:e4:3e:f0:2b:c8:e4:ec:
95:cf:ea:23:85:c7:84:11:58:21:a1:1c:e5:34:02:21:55:43:
0f:0d:d8:f1:d8:90:5e:a7:17:23:75:51:3a:0a:41:86:6b:4d:
fc:62:ed:51:be:ca:57:46:13:ab:d8:16:70:9a:a1:80:cb:60:
e2:5a:87:cb:0e:e7:0b:b2:52:1a:17:53:06:8e:22:08:4c:9a:
74:da:62:b1:62:dd:07:aa:1d:96:02:51:33:f4:cc:f1:cc:20:
68:e8:82:00:7d:b2:8c:14:df:03:79:a7:2e:9f:db:57:47:42:
01:b6:49:5e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlIZ65GEuPi7yyTkmuCWmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzQwMTBlNDM5OGRmZDZlMTlmNDViNTEzYzIyYzFlY2EzMzMxMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4bGnPvHp0gjc8JpfcmpD/xlm4pB
PfTTmF8FHYjdDbUF696sEsUyYWI/JL6BDObQqTbtYInwuH7oZgb5EtrxN90tOgFi
Y//CHnMnf/ykgNu1xZgO+FdpibKzUCNPPh0cy7cXO5cvxJnisC2p+PfliQGHbX21
EfKFORyNDzuSXetBSyDCcDNTLBrJxEmouCuAj9hnneZyQai2j0SafuPrSZB0F/Bd
4pKWSLhy8EO9x3wiTds4FnkRHtNjBQ8AtajAClhEyM6YRjRZFQ8wUTrdeUMAocnx
txFJhjd74ijyc0nUzA3CZxAnBpmd5VUoJJDc6Iumu6WX2krrD+S6OmoXgQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBNAEOQ5jf1uGfRbUTwiweyjMxH4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzI1M2Y0
MS1mNjJiLTQ5MmMtOWUxOC0xNjJkZjA4YjM5ZTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMjUzZjQx
LWY2MmItNDkyYy05ZTE4LTE2MmRmMDhiMzllNS8xL0UwQVE1RG1OX1c0WjlGdFJQ
Q0xCN0tNekVmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLQj0MA0EAgACMAcDBQMqDqIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMwmDANBgkqhkiG9w0BAQsFAAOCAQEAZJOWFkn985aH
pfVQO8wbh5u6JN07IpDUtJhtnVwp3GD7w0W8suWU+McgCZxRrBMcqS1sWDP09ubX
NLz/gTCQ/yBbn01xYFpYsMqPuFdVoYnS4pWZ9by0bd4JC+8RNP13IY/L2LZOSbBx
gw34vRbNV3ojUQtvwsuSfMJIfhrm69bOnkZVx85pfwnkPvAryOTslc/qI4XHhBFY
IaEc5TQCIVVDDw3Y8diQXqcXI3VROgpBhmtN/GLtUb7KV0YTq9gWcJqhgMtg4lqH
yw7nC7JSGhdTBo4iCEyadNpisWLdB6odlgJRM/TM8cwgaOiCAH2yjBTfA3mnLp/b
V0dCAbZJXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:33 2025 by rpki-client