Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer (raw, json)
Hash identifier: uR/RqSi+vjT5aZ2gSI7LRsalOwCxPvyn/RMr6qFO2cQ=
Subject key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444FB3AFA7F0F53275D40E3BE48B886
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.108.19.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fb:3a:fa:7f:0f:53:27:5d:40:e3:be:48:b8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:23:0c:9a:01:ae:ff:9d:d3:fe:32:50:80:
02:e6:c8:14:dd:24:d2:b4:e4:a3:87:41:e3:bd:52:
9a:8c:4d:ea:8b:57:12:8a:e6:b4:23:82:0b:44:2d:
f0:62:06:a1:63:98:7f:97:18:2a:75:5a:a6:f7:43:
42:99:95:b9:c0:47:38:68:91:8a:42:a9:33:5e:cb:
d1:c5:5a:f0:e0:1b:82:a6:57:6b:2d:f2:77:67:be:
58:12:29:af:8c:0f:49:d7:0e:54:4a:f5:1f:10:4f:
22:d0:17:bc:d0:f9:0f:c2:df:46:8b:33:99:ec:13:
64:9e:32:02:39:f5:6b:43:59:ef:ed:6d:40:5a:6b:
42:a6:20:c9:2d:ee:f3:fa:d3:d2:a5:41:c0:ba:01:
9a:56:93:a0:2d:12:20:b2:d6:bb:ac:2b:ac:67:2c:
98:2f:b5:fd:bd:57:81:f2:7c:e5:b3:a5:4d:35:da:
42:66:6f:f8:e0:08:d9:d0:77:cd:a4:e6:4d:09:c8:
89:b3:f1:64:3a:21:4c:ef:ed:a3:8c:db:2d:67:14:
3c:b2:68:8a:1f:93:89:45:61:95:03:6d:a7:75:5d:
3e:d4:c2:be:37:4e:ff:b1:12:65:56:3c:39:f9:1e:
5a:28:61:79:2d:69:90:09:3a:16:57:a7:03:42:22:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:db:5e:39:97:c3:de:22:0d:eb:f8:96:73:41:58:01:11:53:
a2:9f:34:1a:f8:bd:dc:84:5c:1f:72:58:bf:1c:43:ca:ea:94:
12:80:5c:1d:31:d8:d7:39:11:94:2f:cd:f4:72:b5:c1:78:aa:
b7:6a:fe:14:91:59:63:d8:f5:0f:db:2c:75:c1:20:d2:de:8d:
ae:67:74:77:80:ae:4d:cf:eb:64:a9:47:b1:9c:51:46:b3:60:
6c:17:d2:a3:d1:b6:34:d8:8d:44:61:f0:4e:04:dc:3b:81:13:
8e:b4:cf:a1:95:16:e1:93:c5:b9:78:84:b6:59:66:ec:57:a3:
ab:0b:73:df:5f:90:6d:46:ca:e1:b3:7c:61:29:54:37:2b:fb:
ea:72:9f:16:9e:02:99:0a:67:6a:72:89:4e:ac:b0:86:59:44:
c2:ad:83:0b:5c:f1:d3:2b:50:7a:47:d4:7e:cb:63:d6:64:69:
f8:ea:d7:24:5c:fe:e5:bc:83:c0:b0:6a:15:e1:14:1b:9c:7e:
86:23:36:17:bb:07:aa:85:23:3e:8d:8a:a8:e3:b0:48:36:ba:
99:a8:b4:b9:9a:27:1d:3b:b4:9b:64:e8:b6:12:81:cd:f3:a8:
d5:fd:9b:f9:61:43:39:be:d7:4a:95:39:fb:36:1e:66:e4:37:
23:d9:60:7c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQkRPs6+n8PUyddQOO+SLiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTdkNTk0MzhjYzIwMWRjYTJmYzFjZTdhNjg3NzNiZDcxYmUwZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdkjDJoBrv+d0/4yUIAC5sgU3STS
tOSjh0HjvVKajE3qi1cSiua0I4ILRC3wYgahY5h/lxgqdVqm90NCmZW5wEc4aJGK
QqkzXsvRxVrw4BuCpldrLfJ3Z75YEimvjA9J1w5USvUfEE8i0Be80PkPwt9GizOZ
7BNknjICOfVrQ1nv7W1AWmtCpiDJLe7z+tPSpUHAugGaVpOgLRIgsta7rCusZyyY
L7X9vVeB8nzls6VNNdpCZm/44AjZ0HfNpOZNCciJs/FkOiFM7+2jjNstZxQ8smiK
H5OJRWGVA22ndV0+1MK+N07/sRJlVjw5+R5aKGF5LWmQCToWV6cDQiKm3QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFF9WUOMwgHcovwc56aHc71xvg6+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzUwZjVi
YS1iZGY0LTRhNzEtYTgzNi04YjMxZTIzMzgyZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNTBmNWJh
LWJkZjQtNGE3MS1hODM2LThiMzFlMjMzODJkYS8xL1VYMVpRNHpDQWR5aV9Cem5w
b2R6dlhHLURyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWwTMA0GCSqGSIb3DQEBCwUAA4IBAQAa2145
l8PeIg3r+JZzQVgBEVOinzQa+L3chFwfcli/HEPK6pQSgFwdMdjXORGUL830crXB
eKq3av4UkVlj2PUP2yx1wSDS3o2uZ3R3gK5Nz+tkqUexnFFGs2BsF9Kj0bY02I1E
YfBOBNw7gROOtM+hlRbhk8W5eIS2WWbsV6OrC3PfX5BtRsrhs3xhKVQ3K/vqcp8W
ngKZCmdqcolOrLCGWUTCrYMLXPHTK1B6R9R+y2PWZGn46tckXP7lvIPAsGoV4RQb
nH6GIzYXuweqhSM+jYqo47BINrqZqLS5micdO7SbZOi2EoHN86jV/Zv5YUM5vtdK
lTn7Nh5m5Dcj2WB8
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:09 2025 by rpki-client