Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
File: EzSVRauL_SZSc-jUhDuYvwtBSPI.cer (raw, json)
Hash identifier: OtIapkH1WjaCdrv2Yen8ptAvHVvx8bJfR0X71m50v4c=
Subject key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B18E1F7629EE3F03F11AC7AB0A6963
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 152.89.180.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8e:1f:76:29:ee:3f:03:f1:1a:c7:ab:0a:69:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:11:bb:06:4c:40:0a:07:a0:d0:03:54:fc:
6f:d7:44:8e:17:dc:ac:1d:6f:a8:cf:6c:6a:6c:ca:
87:06:d5:40:69:90:93:83:fe:27:05:e5:0a:64:82:
b6:5b:1d:64:65:79:df:0d:f8:1b:b3:0b:c8:4a:3e:
7b:49:06:91:b0:45:d3:c4:d5:35:e1:5e:59:00:4c:
9d:12:b4:7c:97:d4:c2:90:c1:3e:ea:20:db:30:7e:
19:b6:a0:0c:5e:12:38:58:3b:03:24:c5:5c:d4:d7:
27:4f:b5:24:33:ed:4e:a8:bc:21:67:4b:7d:d2:a6:
85:95:e2:ec:b1:8c:3c:8f:92:7f:26:49:65:2c:b5:
ef:03:56:c2:5e:80:fa:b0:e7:9e:dd:74:00:b9:02:
f1:da:a8:d0:ff:4e:69:ef:c4:15:ee:3a:bd:de:de:
93:d0:36:69:06:09:ac:e4:af:ac:c3:52:ee:e1:df:
9b:ea:60:03:0f:bb:a6:f1:ff:ca:ae:bd:f4:1a:aa:
a4:13:e4:28:79:d6:5c:3a:f0:17:d1:a7:21:67:a1:
5c:77:37:84:40:a7:a4:11:cf:fc:fc:85:ac:25:f1:
62:8f:87:3d:08:30:cf:c7:1e:27:40:87:94:f3:55:
7a:6a:2f:03:35:66:cf:24:5f:48:10:6f:6b:ba:a4:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:fb:6d:fd:61:ee:de:8f:53:5f:48:ae:48:bd:9b:dc:f4:37:
2e:45:c3:90:cb:1e:b5:8f:f1:9e:f7:56:11:08:ef:62:d6:e3:
b1:5d:7a:e7:01:bf:dc:01:a3:ef:8f:87:65:e3:cd:94:96:b5:
42:c4:6f:3a:64:4b:65:61:a8:df:21:64:1e:9c:d6:46:fd:9a:
3d:a7:50:80:91:49:03:1d:ba:67:ef:0a:df:a5:97:e6:40:8a:
86:11:9f:eb:7a:fd:20:c3:47:e3:22:d7:4e:9f:16:36:23:dd:
ce:4c:23:74:e6:27:f7:d8:15:03:4b:66:29:18:7c:88:1f:7b:
6c:33:f1:a2:05:6d:a4:f4:6d:3f:a4:77:fb:89:c0:73:c9:fb:
f3:e7:a5:1c:b3:69:b9:0b:f7:66:a5:2c:54:1d:f7:e4:c5:7e:
dc:7d:4f:21:9f:86:aa:44:80:4e:3d:83:78:ca:7a:e1:92:83:
ba:98:60:10:d9:3a:18:bb:4b:4c:aa:85:b8:fd:47:b0:09:34:
27:65:45:08:92:58:c6:9f:a3:71:83:f1:aa:2d:cd:59:d1:bb:
c8:69:d6:24:57:92:ae:32:b6:46:04:04:26:da:34:66:af:d7:
9d:3b:e4:83:76:5b:7b:07:d6:eb:a5:f6:61:87:bb:13:09:d6:
89:7b:9d:8c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhsY4fdinuPwPxGserCmljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzM0OTU0NWFiOGJmZDI2NTI3M2U4ZDQ4NDNiOThiZjBiNDE0OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9kRuwZMQAoHoNADVPxv10SOF9ys
HW+oz2xqbMqHBtVAaZCTg/4nBeUKZIK2Wx1kZXnfDfgbswvISj57SQaRsEXTxNU1
4V5ZAEydErR8l9TCkME+6iDbMH4ZtqAMXhI4WDsDJMVc1NcnT7UkM+1OqLwhZ0t9
0qaFleLssYw8j5J/JkllLLXvA1bCXoD6sOee3XQAuQLx2qjQ/05p78QV7jq93t6T
0DZpBgms5K+sw1Lu4d+b6mADD7um8f/Krr30GqqkE+QoedZcOvAX0achZ6FcdzeE
QKekEc/8/IWsJfFij4c9CDDPxx4nQIeU81V6ai8DNWbPJF9IEG9ruqS/owIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBM0lUWri/0mUnPo1IQ7mL8LQUjyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzE3NTI2
MC04ZjlhLTRiN2YtYjAxMS00YzI2NDdhNTg5NjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMTc1MjYw
LThmOWEtNGI3Zi1iMDExLTRjMjY0N2E1ODk2Ny8xL0V6U1ZSYXVMX1NaU2MtalVo
RHVZdnd0QlNQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCmFm0MA0GCSqGSIb3DQEBCwUAA4IBAQB8+239
Ye7ej1NfSK5IvZvc9DcuRcOQyx61j/Ge91YRCO9i1uOxXXrnAb/cAaPvj4dl482U
lrVCxG86ZEtlYajfIWQenNZG/Zo9p1CAkUkDHbpn7wrfpZfmQIqGEZ/rev0gw0fj
ItdOnxY2I93OTCN05if32BUDS2YpGHyIH3tsM/GiBW2k9G0/pHf7icBzyfvz56Uc
s2m5C/dmpSxUHffkxX7cfU8hn4aqRIBOPYN4ynrhkoO6mGAQ2ToYu0tMqoW4/Uew
CTQnZUUIkljGn6Nxg/GqLc1Z0bvIadYkV5KuMrZGBAQm2jRmr9edO+SDdlt7B9br
pfZhh7sTCdaJe52M
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:56 2025 by rpki-client