Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
File: E38zct9XyBSrqLUakHhh2SueT1U.cer (raw, json)
Hash identifier: Dot5aMm6W0H9piEMHh1DFCyRrifuokIpqN8VSVsEdGA=
Subject key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F60ADF770EC0BFFECA9E610C388DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209459
IP: 5.253.24.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:60:ad:f7:70:ec:0b:ff:ec:a9:e6:10:c3:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:9f:19:c2:3d:a4:a0:10:79:55:22:57:3e:
0a:42:92:79:40:03:ef:3d:38:01:38:f6:31:5f:4a:
45:a6:82:96:55:cb:29:d6:c9:2e:89:c1:69:c0:9d:
0a:39:28:81:fc:4d:a0:ad:6a:c1:8f:ab:23:23:38:
12:d4:dd:73:a0:ce:3f:89:62:3b:97:4c:fc:0e:e0:
46:19:22:5c:19:f7:41:d3:0b:1d:e7:e1:fc:61:46:
2f:36:74:99:a4:3e:3e:e3:35:c7:1a:7b:86:bf:9d:
8c:b3:35:6d:35:8f:01:74:3f:66:c0:f3:2a:0c:38:
6e:99:c7:ef:1a:50:fe:76:96:95:4b:df:c8:e9:2f:
c0:d6:17:e4:eb:0b:bb:40:9b:a7:aa:0f:7b:35:7a:
df:5a:00:0a:20:c2:ea:7f:05:1f:6b:3e:03:8d:4d:
1c:82:e4:fd:9b:96:cf:79:27:1c:04:1e:05:51:d8:
1c:1d:ab:22:6e:f2:80:8f:b9:75:0a:5a:e4:8f:07:
1d:3d:59:8d:cc:11:c6:86:b4:21:4f:9c:54:9a:85:
72:77:ee:1d:57:69:c4:94:be:4e:f5:60:a0:7e:ad:
74:c3:25:5f:48:db:39:c5:48:40:9e:0d:54:09:0f:
b6:d2:53:66:60:a9:fa:32:ce:d2:7f:91:bb:62:23:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209459
Signature Algorithm: sha256WithRSAEncryption
07:8f:c3:86:08:c3:c0:65:b3:67:38:e6:f5:02:9e:03:2f:6a:
c8:76:3d:36:50:9d:bd:f5:15:81:44:95:37:63:33:64:bb:70:
9b:56:e6:59:38:3a:6b:06:4a:33:b2:1b:6d:3f:53:9b:6e:44:
21:7a:39:31:c5:7a:58:2c:68:7f:af:1f:df:07:b5:28:bd:59:
cc:e9:81:35:f9:04:24:13:79:0e:c5:51:8f:71:64:45:4d:0b:
26:56:ec:cd:af:b1:86:7a:a2:84:9f:b5:86:04:22:a2:64:d3:
df:45:51:31:b5:1d:f4:9d:87:a9:73:fc:9e:49:1e:df:0d:28:
37:5d:48:17:dd:aa:78:7b:83:17:48:a1:ad:d5:07:ac:4b:70:
63:f4:68:23:09:e4:8b:e0:66:50:f0:56:56:1a:ab:01:c3:04:
9f:01:79:f3:f5:55:6f:62:b5:e1:5f:af:d1:c9:a5:11:1e:3e:
16:f9:98:74:9e:24:0c:af:c6:a0:10:44:20:1b:93:36:88:67:
4e:50:d5:b2:eb:d8:b4:85:0f:3c:a7:b0:ac:dd:dd:d6:b2:2d:
d1:e8:06:ce:a5:62:34:6c:f5:33:49:48:45:5f:d7:c7:03:2a:
2d:a1:8c:3b:45:65:39:d4:58:16:54:d8:31:e8:ab:cb:eb:2c:
01:c8:7f:b0
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQiH2Ct93DsC//sqeYQw4jeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzdmMzM3MmRmNTdjODE0YWJhOGI1MWE5MDc4NjFkOTJiOWU0ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM6fGcI9pKAQeVUiVz4KQpJ5QAPv
PTgBOPYxX0pFpoKWVcsp1skuicFpwJ0KOSiB/E2grWrBj6sjIzgS1N1zoM4/iWI7
l0z8DuBGGSJcGfdB0wsd5+H8YUYvNnSZpD4+4zXHGnuGv52MszVtNY8BdD9mwPMq
DDhumcfvGlD+dpaVS9/I6S/A1hfk6wu7QJunqg97NXrfWgAKIMLqfwUfaz4DjU0c
guT9m5bPeSccBB4FUdgcHasibvKAj7l1ClrkjwcdPVmNzBHGhrQhT5xUmoVyd+4d
V2nElL5O9WCgfq10wyVfSNs5xUhAng1UCQ+20lNmYKn6Ms7Sf5G7YiPrnwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzhiMTQx
Yi00OTRlLTQ2NmItYTIyYy1hMjI0ZmVmYWMyMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvOGIxNDFi
LTQ5NGUtNDY2Yi1hMjJjLWEyMjRmZWZhYzIxOC8xL0UzOHpjdDlYeUJTcnFMVWFr
SGhoMlN1ZVQxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCBf0YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMyMzANBgkqhkiG9w0BAQsFAAOCAQEAB4/DhgjDwGWzZzjm9QKeAy9qyHY9NlCd
vfUVgUSVN2MzZLtwm1bmWTg6awZKM7IbbT9Tm25EIXo5McV6WCxof68f3we1KL1Z
zOmBNfkEJBN5DsVRj3FkRU0LJlbsza+xhnqihJ+1hgQiomTT30VRMbUd9J2HqXP8
nkke3w0oN11IF92qeHuDF0ihrdUHrEtwY/RoIwnki+BmUPBWVhqrAcMEnwF58/VV
b2K14V+v0cmlER4+FvmYdJ4kDK/GoBBEIBuTNohnTlDVsuvYtIUPPKewrN3d1rIt
0egGzqViNGz1M0lIRV/XxwMqLaGMO0VlOdRYFlTYMeiry+ssAch/sA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:47 2025 by rpki-client