Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
File: UTTRMgZFZE4urzaFh51pP3JSLHY.cer (raw, json)
Hash identifier: ZxXtWPDdxazgQ6YfVjxKnZfGU+eUrKO+lShI//FTArc=
Subject key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144070873950DD73ACC93A317A27435
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203036
AS: 208098
IP: 91.194.24.0/23
IP: 91.194.104.0/23
IP: 2a0c:5400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:07:08:73:95:0d:d7:3a:cc:93:a3:17:a2:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5134d1320645644e2eaf3685879d693f72522c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:7e:b5:56:c1:67:16:19:88:8f:59:37:59:
a7:95:f7:6b:aa:10:a6:ff:cd:88:2e:c9:90:88:a5:
07:71:a0:df:22:d6:29:15:b9:c8:d8:7b:f5:1e:32:
ce:60:12:ac:55:90:9c:20:f0:1b:1e:34:e9:18:d1:
e4:18:64:fd:17:72:0f:0c:ac:f3:90:49:91:d4:56:
79:b9:fb:ad:06:b3:d8:e5:c3:b9:91:56:f2:d9:dd:
a7:de:c3:8d:c4:da:61:b8:8b:c7:a9:22:ca:95:a4:
1d:45:da:14:a4:16:af:2c:23:e1:e5:49:d0:79:51:
31:1c:7c:57:9c:9f:c1:45:25:38:8c:c0:24:e9:03:
4f:76:bc:da:3a:09:74:a9:90:5a:72:92:e5:a7:6d:
01:e6:16:39:01:12:e2:62:58:2f:6e:16:89:f7:01:
07:29:51:82:e8:4d:31:7f:b5:99:d7:60:9b:18:a1:
07:c9:1f:92:81:c2:09:19:88:99:6d:02:01:76:65:
d6:1d:f2:c1:bf:89:b8:46:83:43:23:7d:18:2b:36:
c6:5f:65:7b:75:49:50:ff:14:33:b7:b8:9a:9f:c8:
c1:04:97:4b:57:62:b8:c8:0f:d4:63:75:98:f9:64:
0d:96:8c:ca:2f:af:1e:e2:76:a7:9d:32:4d:c1:20:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.24.0/23
91.194.104.0/23
IPv6:
2a0c:5400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203036
208098
Signature Algorithm: sha256WithRSAEncryption
98:9b:b8:c6:82:68:ec:95:56:de:81:da:c7:38:30:69:ab:7d:
d3:bf:0a:3a:3c:68:8e:1a:7b:68:0e:1b:bb:ab:89:73:b5:19:
be:4b:df:87:59:db:67:6f:95:fc:d6:73:15:08:56:c9:dc:7b:
fc:19:e2:84:69:d8:74:56:80:f3:cc:46:ad:58:69:9a:2b:45:
3b:a4:f3:d8:81:78:d1:e4:78:4c:2d:0b:11:c4:fe:8c:88:54:
62:ff:a1:24:ab:1d:f5:18:b8:ec:c5:fb:d0:87:32:62:45:5f:
27:f4:fd:bd:bf:5a:e9:b1:83:bd:0d:30:7a:7f:9d:57:50:65:
e2:53:15:9a:d6:11:8f:3a:ff:84:1c:f9:f6:dc:12:86:66:39:
78:86:48:02:ae:19:f7:00:e5:d8:0a:85:52:67:15:9c:cb:bd:
8e:a5:48:93:e4:8d:fb:30:c4:4a:42:76:af:2e:ed:8f:98:d8:
06:98:4c:6c:bc:c8:65:7a:58:a0:a0:c4:6c:f2:08:88:ce:c3:
7d:cf:e0:1e:96:ea:65:10:ea:f6:74:06:5c:ce:c2:0a:a1:dc:
eb:df:e5:5e:25:0c:b2:d7:9b:4c:00:80:2f:fe:5e:35:c2:a5:
7e:08:99:c5:4b:bb:3d:eb:eb:82:53:c1:df:6b:ea:fa:52:e2:
2a:17:e4:68
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQhRAcIc5UN1zrMk6MXonQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTM0ZDEzMjA2NDU2NDRlMmVhZjM2ODU4NzlkNjkzZjcyNTIyYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02V+tVbBZxYZiI9ZN1mnlfdrqhCm
/82ILsmQiKUHcaDfItYpFbnI2Hv1HjLOYBKsVZCcIPAbHjTpGNHkGGT9F3IPDKzz
kEmR1FZ5ufutBrPY5cO5kVby2d2n3sONxNphuIvHqSLKlaQdRdoUpBavLCPh5UnQ
eVExHHxXnJ/BRSU4jMAk6QNPdrzaOgl0qZBacpLlp20B5hY5ARLiYlgvbhaJ9wEH
KVGC6E0xf7WZ12CbGKEHyR+SgcIJGYiZbQIBdmXWHfLBv4m4RoNDI30YKzbGX2V7
dUlQ/xQzt7ian8jBBJdLV2K4yA/UY3WY+WQNlozKL68e4nannTJNwSAGHQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFFE00TIGRWROLq82hYedaT9yUix2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzlmYjFk
Ny04NDI0LTRjODQtYjBjYi0yZjUxZWNkMWFhMGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvOWZiMWQ3
LTg0MjQtNGM4NC1iMGNiLTJmNTFlY2QxYWEwZS8xL1VUVFJNZ1pGWkU0dXJ6YUZo
NTFwUDNKU0xIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBW8IYAwQBW8JoMA0EAgACMAcDBQMqDFQAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMZHAIDAyziMA0GCSqGSIb3DQEBCwUAA4IB
AQCYm7jGgmjslVbegdrHODBpq33Tvwo6PGiOGntoDhu7q4lztRm+S9+HWdtnb5X8
1nMVCFbJ3Hv8GeKEadh0VoDzzEatWGmaK0U7pPPYgXjR5HhMLQsRxP6MiFRi/6Ek
qx31GLjsxfvQhzJiRV8n9P29v1rpsYO9DTB6f51XUGXiUxWa1hGPOv+EHPn23BKG
Zjl4hkgCrhn3AOXYCoVSZxWcy72OpUiT5I37MMRKQnavLu2PmNgGmExsvMhlelig
oMRs8giIzsN9z+AeluplEOr2dAZczsIKodzr3+VeJQyy15tMAIAv/l41wqV+CJnF
S7s96+uCU8Hfa+r6UuIqF+Ro
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:46 2025 by rpki-client