Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer (raw, json)
Hash identifier: g4V+cNoa/f7i2iplM3BH3hL0yZ/VyRyPravQFdtCWKU=
Subject key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427481E7E074137D944258651774A1197
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47343
AS: 206892
IP: 45.95.44.0/22
IP: 94.199.176.0/22
IP: 95.140.32.0/23
IP: 95.140.38.0/23
IP: 185.6.136.0/22
IP: 185.90.236.0/22
IP: 185.161.72.0/22
IP: 185.199.28.0/22
IP: 185.234.180.0/22
IP: 194.39.44.0/22
IP: 195.200.232.0/23
IP: 2a07:c280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:7e:07:41:37:d9:44:25:86:51:77:4a:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:55:70:10:91:15:9a:70:7b:a7:3d:4d:3d:fc:
ae:f2:2a:cb:71:0f:5e:0b:46:70:bf:05:b1:00:2a:
45:47:95:dd:96:7e:38:df:17:25:95:9c:ef:97:06:
ef:73:d4:c6:36:79:96:96:07:da:b6:a7:03:17:ae:
6d:d7:6e:09:86:93:cb:de:76:a7:aa:e2:3c:57:73:
c2:94:e8:34:1c:a3:99:c2:87:fe:5f:cd:a8:a2:1c:
2b:6c:75:7e:0c:98:45:6c:66:7e:01:bf:2d:8d:99:
c1:8a:99:5b:ab:2e:be:2d:5a:84:93:eb:67:5d:19:
63:9e:f0:48:e1:76:7f:cc:24:bc:f3:a4:da:62:0a:
4b:45:71:b2:3e:ba:b5:b8:df:47:0e:a0:db:22:20:
ec:68:6c:de:93:96:8f:62:e1:f0:c2:60:e0:59:32:
78:5c:36:4e:1d:ac:e0:3d:9d:ff:5e:e3:f0:f4:ac:
99:3a:64:58:04:95:3d:df:e0:4b:4e:93:0b:9d:6e:
a6:0c:67:85:51:78:88:e8:d5:e9:07:eb:58:97:39:
31:37:df:30:30:a9:b9:bd:36:cd:99:13:06:d5:4f:
2a:12:86:bd:bb:8f:f3:bc:3a:5d:d4:6b:a4:ca:b3:
d4:ee:fd:e0:b4:5d:e8:d4:76:c1:7b:92:09:49:0a:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.44.0/22
94.199.176.0/22
95.140.32.0/23
95.140.38.0/23
185.6.136.0/22
185.90.236.0/22
185.161.72.0/22
185.199.28.0/22
185.234.180.0/22
194.39.44.0/22
195.200.232.0/23
IPv6:
2a07:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47343
206892
Signature Algorithm: sha256WithRSAEncryption
90:97:30:67:1b:49:47:cc:49:13:bc:94:c2:cb:3c:e8:3d:c8:
31:58:bf:3e:f5:aa:37:32:22:76:90:d7:e3:8f:cf:6d:86:e2:
3e:9d:ca:d1:04:10:88:14:d4:45:96:5a:3c:81:1d:58:43:6c:
4b:41:da:d9:f6:0d:27:94:c2:0a:e4:c0:ff:2c:5a:fc:66:0d:
aa:4b:28:f7:b3:e7:31:2d:da:ea:bb:3d:9e:da:66:45:31:aa:
aa:f3:ee:80:aa:17:4e:7b:60:bc:0b:7e:6e:04:23:9c:ec:68:
87:c1:d8:ed:98:10:cf:47:4b:26:9b:f6:ab:03:c5:33:ee:dc:
5d:05:6a:3f:b2:51:3a:55:f4:dd:0e:92:1b:bb:64:a6:8f:fb:
4c:ab:6f:1f:c3:8c:84:70:b5:bd:27:fe:9b:48:ea:8f:14:0d:
41:33:f5:fd:db:9a:4e:b5:e0:fd:45:04:a7:40:3b:60:18:f5:
d8:64:0f:96:2f:cb:34:9d:70:fc:61:3d:4e:8a:a4:22:82:d7:
4e:0c:41:72:b8:1c:5b:88:ae:ad:47:be:49:f2:76:8b:81:da:
85:a2:be:0c:25:0c:7a:0c:bb:e4:4d:aa:48:d7:03:cf:eb:d7:
33:2a:0f:f4:01:f0:a1:0e:aa:9d:75:f4:bc:b8:99:11:cd:8e:
87:21:f9:ba
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAZQnSB5+B0E32UQlhlF3ShGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzIyYWVhMGVmNGMwNjY3ZGI4MTlmNWQ1YTNkYWVhNjM5OWYwMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lVwEJEVmnB7pz1NPfyu8irLcQ9e
C0ZwvwWxACpFR5Xdln443xcllZzvlwbvc9TGNnmWlgfatqcDF65t124JhpPL3nan
quI8V3PClOg0HKOZwof+X82oohwrbHV+DJhFbGZ+Ab8tjZnBiplbqy6+LVqEk+tn
XRljnvBI4XZ/zCS886TaYgpLRXGyPrq1uN9HDqDbIiDsaGzek5aPYuHwwmDgWTJ4
XDZOHazgPZ3/XuPw9KyZOmRYBJU93+BLTpMLnW6mDGeFUXiI6NXpB+tYlzkxN98w
MKm5vTbNmRMG1U8qEoa9u4/zvDpd1GukyrPU7v3gtF3o1HbBe5IJSQrEOwIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFEcirqDvTAZn24GfXVo9rqY5nwOMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzgwYzM4
Ny1iMjBiLTQzMGEtYTVlNi02ZTMwNzRjNmM2NjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvODBjMzg3
LWIyMGItNDMwYS1hNWU2LTZlMzA3NGM2YzY2My8xL1J5S3VvTzlNQm1mYmdaOWRX
ajJ1cGptZkE0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQCLV8sAwQCXsewAwQBX4wgAwQBX4wmAwQCuQaI
AwQCuVrsAwQCuaFIAwQCucccAwQCueq0AwQCwicsAwQBw8joMA0EAgACMAcDBQMq
B8KAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC47wIDAygsMA0GCSqGSIb3DQEB
CwUAA4IBAQCQlzBnG0lHzEkTvJTCyzzoPcgxWL8+9ao3MiJ2kNfjj89thuI+ncrR
BBCIFNRFllo8gR1YQ2xLQdrZ9g0nlMIK5MD/LFr8Zg2qSyj3s+cxLdrquz2e2mZF
Maqq8+6AqhdOe2C8C35uBCOc7GiHwdjtmBDPR0smm/arA8Uz7txdBWo/slE6VfTd
DpIbu2Smj/tMq28fw4yEcLW9J/6bSOqPFA1BM/X925pOteD9RQSnQDtgGPXYZA+W
L8s0nXD8YT1OiqQigtdODEFyuBxbiK6tR75J8naLgdqFor4MJQx6DLvkTapI1wPP
69czKg/0AfChDqqddfS8uJkRzY6HIfm6
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:33 2025 by rpki-client