Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
File: UhqgJHWNjRBOEXnFUDmBZjav4pg.cer (raw, json)
Hash identifier: JSO/jpXs9fj5AEuQYEFReBWLFHElOd/jg4OnGK090uw=
Subject key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521E521D88CD9D5F5F12C79CBAF80C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20626
IP: 62.168.128.0/19
IP: 83.216.96.0/19
IP: 185.75.40.0/22
IP: 2001:b58::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:21:d8:8c:d9:d5:f5:f1:2c:79:cb:af:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521aa024758d8d104e1179c55039816636afe298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:6c:ba:53:49:13:d0:b5:28:76:34:6b:a1:
f3:2a:e4:c6:f2:02:57:47:e5:0b:d2:d7:2d:e6:68:
cf:ce:6b:c2:92:2e:43:ac:26:70:23:d5:6a:38:8a:
a1:42:a1:7f:f2:63:09:2a:1b:ef:06:99:65:85:6b:
ef:84:8b:5e:c2:55:1c:59:7a:a3:5d:b1:03:78:ad:
78:dd:c8:8c:c2:7a:04:a2:55:04:c5:2f:53:47:b5:
87:80:63:7f:c5:74:59:b8:90:21:18:ca:c8:5b:b6:
55:95:89:b9:d2:e4:f2:61:61:c1:77:96:cc:8f:d1:
b2:c3:9b:cd:4d:b0:2b:96:70:81:cc:6e:3d:66:bd:
b4:4d:1e:0d:7f:9c:aa:8c:b0:e8:e8:6b:b3:54:6b:
2c:d8:ff:a7:2e:88:8d:1d:60:28:c7:47:e3:a0:9b:
8f:4d:f7:cb:e4:7d:9b:d6:4d:62:18:e9:37:53:af:
a4:4a:ec:5b:91:75:6d:2a:b5:34:d3:40:9a:3e:9e:
f5:7e:c6:25:f7:d4:4b:9e:7f:3b:d5:f2:48:e2:72:
2b:87:b6:3c:5d:5a:84:f6:de:9d:61:da:e8:6a:34:
5e:84:7a:4a:0c:12:ba:c7:f5:50:6d:3b:1d:43:12:
e7:93:21:21:24:14:9c:5c:0f:ef:8b:f5:58:c4:da:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.168.128.0/19
83.216.96.0/19
185.75.40.0/22
IPv6:
2001:b58::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20626
Signature Algorithm: sha256WithRSAEncryption
19:01:79:cf:88:a8:ef:cd:c9:77:01:f0:fb:8d:49:9a:6b:17:
ae:1d:fc:78:23:cb:a2:54:0b:a0:aa:a4:4f:f4:4a:a1:48:03:
e7:ec:74:70:ea:70:46:3f:8e:24:3c:d7:2b:d3:da:8a:15:d0:
fe:d2:76:0f:bf:ae:dd:08:60:5f:54:5c:3e:63:86:02:a9:c4:
43:a9:dd:26:3a:86:a6:9e:3d:1b:00:66:16:27:8c:b1:a0:0e:
af:83:70:31:99:b9:e7:53:95:87:71:42:10:6c:d0:bc:e4:2e:
93:88:9e:fa:fe:ac:70:95:74:a8:70:53:5d:1c:c1:e2:ed:bf:
3f:69:ed:29:e1:a5:db:74:2d:78:42:64:0c:67:d6:0d:ad:1b:
0d:b3:b8:f8:72:7a:2f:79:b5:4c:70:d9:07:22:d5:9e:1e:7a:
6a:b6:83:3f:7d:65:6f:ae:8c:f0:cc:96:b0:99:b3:50:ac:c5:
85:d0:32:d5:dc:af:a5:8d:e2:60:4e:57:d3:ce:01:2c:55:a9:
fa:2b:a1:52:d4:db:f8:e7:a1:85:d6:54:6d:22:5a:d2:b7:3e:
84:67:3f:99:06:94:c0:a5:eb:6c:f0:97:de:3f:e0:ef:bf:9b:
46:75:a1:27:d8:5e:7c:86:78:1b:67:c3:11:ee:07:54:c4:3c:
8d:1e:7e:5b
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQlIeUh2IzZ1fXxLHnLr4DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjFhYTAyNDc1OGQ4ZDEwNGUxMTc5YzU1MDM5ODE2NjM2YWZlMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQFsulNJE9C1KHY0a6HzKuTG8gJX
R+UL0tct5mjPzmvCki5DrCZwI9VqOIqhQqF/8mMJKhvvBpllhWvvhItewlUcWXqj
XbEDeK143ciMwnoEolUExS9TR7WHgGN/xXRZuJAhGMrIW7ZVlYm50uTyYWHBd5bM
j9Gyw5vNTbArlnCBzG49Zr20TR4Nf5yqjLDo6GuzVGss2P+nLoiNHWAox0fjoJuP
TffL5H2b1k1iGOk3U6+kSuxbkXVtKrU000CaPp71fsYl99RLnn871fJI4nIrh7Y8
XVqE9t6dYdroajRehHpKDBK6x/VQbTsdQxLnkyEhJBScXA/vi/VYxNrD8QIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFFIaoCR1jY0QThF5xVA5gWY2r+KYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzAzZjll
ZS01M2UzLTRmNjktYjhiMC1jMTM4ZTVjMjdjMmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMDNmOWVl
LTUzZTMtNGY2OS1iOGIwLWMxMzhlNWMyN2MyYi8xL1VocWdKSFdOalJCT0VYbkZV
RG1CWmphdjRwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQFPqiAAwQFU9hgAwQCuUsoMA0EAgACMAcDBQMg
AQtYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlCSMA0GCSqGSIb3DQEBCwUAA4IB
AQAZAXnPiKjvzcl3AfD7jUmaaxeuHfx4I8uiVAugqqRP9EqhSAPn7HRw6nBGP44k
PNcr09qKFdD+0nYPv67dCGBfVFw+Y4YCqcRDqd0mOoamnj0bAGYWJ4yxoA6vg3Ax
mbnnU5WHcUIQbNC85C6TiJ76/qxwlXSocFNdHMHi7b8/ae0p4aXbdC14QmQMZ9YN
rRsNs7j4cnovebVMcNkHItWeHnpqtoM/fWVvrozwzJawmbNQrMWF0DLV3K+ljeJg
TlfTzgEsVan6K6FS1Nv456GF1lRtIlrStz6EZz+ZBpTApets8JfeP+Dvv5tGdaEn
2F58hngbZ8MR7gdUxDyNHn5b
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:35 2025 by rpki-client