Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
File: UnrRl4bdVLNaS5atP7xXkyeORHQ.cer (raw, json)
Hash identifier: 1Hy2H92i1DobGi6ycGLBqUR4hOcjqrMyKcSELjWiivQ=
Subject key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BE3256ABD612C70E213EA20A7A184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49263
AS: 56726
AS: 57014
AS: 59816
IP: 185.70.132.0/22
IP: 185.241.36.0/22
IP: 185.251.224.0/22
IP: 185.254.88.0/22
IP: 194.147.120.0/22
IP: 2a05:2a00::/29
IP: 2a0c:1e40::/29
IP: 2a0c:49c0::/29
IP: 2a0c:af80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e3:25:6a:bd:61:2c:70:e2:13:ea:20:a7:a1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:d6:f1:8c:fc:c1:3d:1f:59:50:5d:74:be:
87:07:67:ab:a1:5d:c5:8f:ba:c9:5a:78:fa:07:97:
55:23:f8:98:3d:97:06:0e:cc:f4:6a:32:9b:0f:52:
8b:09:ac:9e:37:8c:bc:7f:bd:f4:cb:ba:ef:76:71:
12:dd:ec:1a:45:86:87:eb:54:99:95:e0:af:80:af:
6a:0b:b1:c6:13:6b:57:92:a4:e3:ca:72:b4:b3:7c:
68:a6:3c:8c:2f:cf:70:63:49:21:9f:d4:47:fd:3c:
fe:68:b0:82:0c:ee:18:ce:2a:2f:6c:ab:97:fe:20:
e8:0e:e0:d2:98:80:06:7c:b7:35:3f:cd:2c:f8:58:
aa:ca:47:21:03:02:55:4d:f6:4c:7d:19:bd:26:4d:
5f:0b:8e:77:15:dc:c7:11:77:b5:32:c6:88:e9:d2:
97:a1:84:d2:18:5f:8e:18:63:4f:cc:4b:6e:20:9f:
14:59:9d:a4:90:3c:0c:96:45:23:5c:8c:98:09:85:
76:ab:b4:8a:42:15:63:cf:38:33:1e:61:70:26:91:
86:a0:3e:69:39:d5:61:b6:6c:bc:64:eb:14:30:5f:
d1:a0:91:b8:8b:ca:66:a9:0c:21:c5:32:4c:6e:94:
0d:a4:2c:64:d7:97:95:2b:f5:70:d7:77:ee:75:d7:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
2a0c:1e40::/29
2a0c:49c0::/29
2a0c:af80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49263
56726
57014
59816
Signature Algorithm: sha256WithRSAEncryption
8a:27:72:60:05:57:cd:a8:79:10:86:f6:5d:b1:7e:ee:7d:24:
07:e5:af:9c:0b:a0:40:b7:72:02:0d:a4:06:ad:34:d8:e1:db:
0d:33:35:84:54:10:c7:b2:f7:a6:42:47:2e:93:ed:b7:bf:96:
30:b2:1f:0b:1c:e0:66:7c:70:18:ea:bf:5b:0a:a7:27:39:72:
6a:7b:c1:cc:11:6f:84:a5:35:0a:e5:df:96:65:0e:6e:de:e6:
04:fe:a6:fb:91:6c:a3:c7:fb:63:33:ce:10:0e:03:87:88:b1:
88:e6:9a:bf:9f:5a:38:69:49:4c:4e:59:bc:3a:1f:53:4d:da:
b8:1d:a9:71:f4:8a:7b:5f:bc:12:00:3d:2d:a3:f6:68:df:64:
57:dd:39:28:b8:45:bd:bc:c4:c5:d8:fd:4a:ad:9f:86:b2:30:
8c:84:3c:34:f5:db:79:c9:e2:34:b5:48:a3:67:f9:24:32:e0:
72:79:68:ed:be:cb:53:6d:76:a4:2a:ed:c7:aa:16:30:9e:13:
6a:ed:49:61:93:8f:6a:91:cd:24:96:33:55:d8:f2:da:14:0b:
94:90:99:c1:3e:57:fa:96:29:c5:b8:7e:f6:81:96:dd:e7:f7:
8d:82:db:ac:ae:12:9d:8f:eb:7e:e1:bd:ae:44:06:91:a7:e1:
2c:c5:b3:4a
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgISAZQma+Mlar1hLHDiE+ogp6GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjdhZDE5Nzg2ZGQ1NGIzNWE0Yjk2YWQzZmJjNTc5MzI3OGU0NDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfXW8Yz8wT0fWVBddL6HB2eroV3F
j7rJWnj6B5dVI/iYPZcGDsz0ajKbD1KLCayeN4y8f730y7rvdnES3ewaRYaH61SZ
leCvgK9qC7HGE2tXkqTjynK0s3xopjyML89wY0khn9RH/Tz+aLCCDO4YziovbKuX
/iDoDuDSmIAGfLc1P80s+FiqykchAwJVTfZMfRm9Jk1fC453FdzHEXe1MsaI6dKX
oYTSGF+OGGNPzEtuIJ8UWZ2kkDwMlkUjXIyYCYV2q7SKQhVjzzgzHmFwJpGGoD5p
OdVhtmy8ZOsUMF/RoJG4i8pmqQwhxTJMbpQNpCxk15eVK/Vw13fudddzYwIDAQAB
o4IC6zCCAucwHQYDVR0OBBYEFFJ60ZeG3VSzWkuWrT+8V5MnjkR0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzY5OGY1
ZS01OGMyLTRhNDMtOWM2YS0xNTVjNzJjMWE3MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNjk4ZjVl
LTU4YzItNGE0My05YzZhLTE1NWM3MmMxYTcyMy8xL1VuclJsNGJkVkxOYVM1YXRQ
N3hYa3llT1JIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF
BwEHAQH/BEwwSjAkBAIAATAeAwQCuUaEAwQCufEkAwQCufvgAwQCuf5YAwQCwpN4
MCIEAgACMBwDBQMqBSoAAwUDKgweQAMFAyoMScADBQMqDK+AMCkGCCsGAQUFBwEI
AQH/BBowGKAWMBQCAwDAbwIDAN2WAgMA3rYCAwDpqDANBgkqhkiG9w0BAQsFAAOC
AQEAiidyYAVXzah5EIb2XbF+7n0kB+WvnAugQLdyAg2kBq002OHbDTM1hFQQx7L3
pkJHLpPtt7+WMLIfCxzgZnxwGOq/WwqnJzlyanvBzBFvhKU1CuXflmUObt7mBP6m
+5Fso8f7YzPOEA4Dh4ixiOaav59aOGlJTE5ZvDofU03auB2pcfSKe1+8EgA9LaP2
aN9kV905KLhFvbzExdj9Sq2fhrIwjIQ8NPXbecniNLVIo2f5JDLgcnlo7b7LU212
pCrtx6oWMJ4Tau1JYZOPapHNJJYzVdjy2hQLlJCZwT5X+pYpxbh+9oGW3ef3jYLb
rK4SnY/rfuG9rkQGkafhLMWzSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:48 2025 by rpki-client