Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer (raw, json)
Hash identifier: 3y5GVv9VlM9vFqvIwVUNxpkrQiymtwHVpEXngj1SjwI=
Subject key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB08E4F9CE0BFA71FFA053CA494C92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51626
IP: 91.220.13.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:08:e4:f9:ce:0b:fa:71:ff:a0:53:ca:49:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:d5:00:02:f8:d7:9e:e4:9e:d8:fc:12:7c:
a6:2b:9b:37:b2:4a:7b:03:3e:b9:10:f4:3e:d8:5c:
c5:18:e0:3f:af:4e:0d:65:82:20:e1:df:e7:fb:bd:
80:45:53:e9:b6:20:4f:92:ca:8f:e5:ea:26:e0:4f:
2a:1e:af:c1:6f:97:bc:c8:24:52:9c:96:8d:70:b2:
32:51:3e:78:2e:ea:39:5c:46:f8:1d:8e:c3:7a:aa:
56:3e:69:70:3c:8a:58:dc:69:af:9c:1e:ab:5a:f2:
d0:e6:3e:b1:22:38:a0:35:a7:88:4a:a4:62:ab:85:
8f:09:1e:30:d6:c5:e1:30:d8:04:6b:ea:20:38:f4:
4e:53:85:36:3a:f2:8f:65:35:7d:b3:68:20:79:c5:
18:f6:f8:0e:09:b9:d6:9b:05:a6:1e:ec:d0:c4:5d:
0d:47:4a:e3:3f:bf:71:99:7e:04:3a:93:0f:f0:32:
5f:bc:73:a1:71:7c:0f:b9:2c:d1:6c:20:d0:c6:34:
b4:d6:b4:88:77:97:8a:1b:1d:9a:56:8b:41:85:e1:
36:b6:d9:fe:5f:9e:48:c5:3d:ab:5d:fd:4a:b6:8c:
72:d9:3c:62:50:ce:54:22:9e:dc:83:dc:ba:a6:45:
c4:5b:9f:b9:0f:50:42:55:ee:e6:93:bf:60:f5:44:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.13.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51626
Signature Algorithm: sha256WithRSAEncryption
35:86:1c:33:71:b8:2c:f1:ef:15:7e:52:47:c6:1c:28:e7:c2:
33:68:a9:01:13:10:77:e3:16:e6:fa:7d:2b:75:ca:cc:87:fc:
09:75:40:8a:dd:64:2d:38:31:f7:20:37:08:41:be:4b:ac:f7:
17:9c:b5:93:0b:95:86:53:3e:96:48:ab:48:92:0b:2d:1b:e6:
32:24:21:d9:b4:ba:5c:bb:e6:05:ee:49:c3:ad:87:10:56:56:
37:6e:d3:2c:4c:4e:a0:ef:76:65:12:9d:12:41:3d:7d:12:5d:
11:3f:9b:b8:2e:e6:9c:2c:de:9d:00:03:34:68:16:90:1d:aa:
77:15:a4:c4:12:f6:78:25:f0:bb:0a:09:26:a1:d8:28:3c:0f:
11:bf:04:6a:cd:eb:ba:7c:50:c9:4d:db:0c:5e:6a:f9:ef:2b:
a8:f0:88:35:c1:95:92:ca:d8:b5:25:89:e8:fb:78:90:5b:70:
6d:e5:d5:51:a2:ae:2e:ea:5b:5c:73:63:02:40:aa:4d:75:62:
30:af:53:ef:89:f6:a5:ff:be:13:a9:09:b8:19:07:3c:48:ea:
ff:8d:e7:bd:ca:13:4d:ba:22:5d:43:2f:e2:4e:25:47:48:00:
5c:f0:b2:89:af:07:b5:39:02:ad:b5:e9:36:a1:06:85:83:5d:
38:3f:8a:87
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQi+wjk+c4L+nH/oFPKSUySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJmYWY4YTFhYTNiYzFmZjNlM2U0MzBjNjdmYjdhNjQxMGEzZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M/VAAL4157kntj8EnymK5s3skp7
Az65EPQ+2FzFGOA/r04NZYIg4d/n+72ARVPptiBPksqP5eom4E8qHq/Bb5e8yCRS
nJaNcLIyUT54Luo5XEb4HY7DeqpWPmlwPIpY3GmvnB6rWvLQ5j6xIjigNaeISqRi
q4WPCR4w1sXhMNgEa+ogOPROU4U2OvKPZTV9s2ggecUY9vgOCbnWmwWmHuzQxF0N
R0rjP79xmX4EOpMP8DJfvHOhcXwPuSzRbCDQxjS01rSId5eKGx2aVotBheE2ttn+
X55IxT2rXf1Ktoxy2TxiUM5UIp7cg9y6pkXEW5+5D1BCVe7mk79g9UQmGQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFD6/r4oao7wf8+PkMMZ/t6ZBCj33MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzIxOGIw
ZS01NGI1LTRhZDAtOWFhMC1lZmQxYTA5OGI0ODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMjE4YjBl
LTU0YjUtNGFkMC05YWEwLWVmZDFhMDk4YjQ4NS8xL1ByLXZpaHFqdkJfejQtUXd4
bi0zcGtFS1BmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9wNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDJqjANBgkqhkiG9w0BAQsFAAOCAQEANYYcM3G4LPHvFX5SR8YcKOfCM2ipARMQ
d+MW5vp9K3XKzIf8CXVAit1kLTgx9yA3CEG+S6z3F5y1kwuVhlM+lkirSJILLRvm
MiQh2bS6XLvmBe5Jw62HEFZWN27TLExOoO92ZRKdEkE9fRJdET+buC7mnCzenQAD
NGgWkB2qdxWkxBL2eCXwuwoJJqHYKDwPEb8Eas3runxQyU3bDF5q+e8rqPCINcGV
ksrYtSWJ6Pt4kFtwbeXVUaKuLupbXHNjAkCqTXViMK9T74n2pf++E6kJuBkHPEjq
/43nvcoTTboiXUMv4k4lR0gAXPCyia8HtTkCrbXpNqEGhYNdOD+Khw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:59 2025 by rpki-client