Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer (raw, json)
Hash identifier: ziC+B03WXsmgVRi1wwLKbJPR1Ul/LUtiYKR7wn2KWZc=
Subject key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B584EE78C3BB11444EFF564D28BE19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59874
IP: 185.68.36.0/22
IP: 2a05:1580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:84:ee:78:c3:bb:11:44:4e:ff:56:4d:28:be:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:06:4f:96:49:31:b6:6e:28:fe:fe:9b:58:
25:8c:81:84:55:69:6e:ba:94:21:3a:8a:70:c9:28:
f4:e6:bf:63:74:1b:2c:d5:a8:98:06:a3:95:4c:fc:
f7:3b:8e:6f:2e:45:7e:2f:54:e5:8e:31:d1:cc:74:
ab:6a:6c:c5:12:35:68:51:d3:0f:66:53:7c:3e:67:
dc:f3:cd:3d:b4:81:50:ff:f6:14:32:e4:ac:00:21:
af:2b:43:02:e8:63:4c:41:b4:fd:c4:cf:cc:02:b5:
9b:6b:e6:9d:3c:02:6b:ed:c4:32:5a:1c:e9:78:3f:
d3:a4:2b:dd:aa:1a:8b:f5:ec:62:15:8b:54:aa:e7:
e0:eb:ca:49:cb:3b:68:ff:8d:be:0b:65:6d:50:76:
3c:a9:81:be:4c:6e:c4:77:76:04:e7:5b:78:16:60:
dd:6a:2d:4a:65:ef:55:b3:a0:11:c3:eb:b6:a9:45:
85:b0:70:4d:f8:51:1c:fa:df:88:c3:02:87:56:c2:
dd:9a:5c:71:95:27:75:a6:f8:58:e4:c5:08:85:79:
f1:6c:67:83:14:6a:69:fe:da:ea:a2:8e:e6:d1:aa:
96:cf:96:17:6e:14:31:63:be:da:7d:3f:63:f9:ea:
bd:11:da:09:12:ff:18:cb:5d:67:ea:5f:61:47:20:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.36.0/22
IPv6:
2a05:1580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59874
Signature Algorithm: sha256WithRSAEncryption
4d:3b:db:71:2e:f3:37:b0:9a:86:64:46:97:2b:dd:3d:23:a1:
39:68:79:7c:3e:0c:a8:3c:d6:16:08:d8:03:b4:49:b1:8d:e0:
cc:75:58:f4:28:74:23:ce:38:67:b2:74:02:42:8e:be:a7:7c:
a4:31:2c:69:37:d2:45:02:7a:ac:e3:03:8b:92:b4:10:8f:93:
8c:ef:fe:c9:12:a6:d0:d7:19:b8:5b:79:b6:3c:1f:21:cf:7e:
39:f7:76:ea:15:f9:1f:15:c8:e9:69:17:f7:1c:f0:35:8f:b2:
49:cf:21:1f:d1:cd:0c:45:ce:df:53:5e:e9:35:e9:80:96:f2:
75:3d:a2:ce:cf:92:ac:ca:7a:52:06:1a:2b:cc:b0:0f:c4:02:
bb:ce:90:3f:ed:76:8b:38:2d:fd:45:8b:34:21:2b:7a:9f:2d:
87:14:d1:b3:e1:85:1e:d6:16:3e:65:fd:f3:d9:b7:48:5c:05:
10:f4:cf:b0:fc:4c:b0:c9:bb:f9:c3:a1:26:33:53:ce:36:9e:
71:60:88:5d:be:bd:87:19:c2:44:e9:b1:4c:0b:65:0a:52:70:
ea:bc:f0:c1:8a:5f:14:f4:09:e8:5f:4a:0c:3c:33:a2:7a:57:
5c:93:b7:24:e9:15:24:fc:e6:45:fc:58:d6:10:1e:01:3f:19:
e3:b5:64:11
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntYTueMO7EURO/1ZNKL4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODNlZTNjMmVjNGExOTAyNWMwMzkyYWQxZWU2YTQ2NDFiY2RkMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YkGT5ZJMbZuKP7+m1gljIGEVWlu
upQhOopwySj05r9jdBss1aiYBqOVTPz3O45vLkV+L1TljjHRzHSramzFEjVoUdMP
ZlN8Pmfc8809tIFQ//YUMuSsACGvK0MC6GNMQbT9xM/MArWba+adPAJr7cQyWhzp
eD/TpCvdqhqL9exiFYtUqufg68pJyzto/42+C2VtUHY8qYG+TG7Ed3YE51t4FmDd
ai1KZe9Vs6ARw+u2qUWFsHBN+FEc+t+IwwKHVsLdmlxxlSd1pvhY5MUIhXnxbGeD
FGpp/trqoo7m0aqWz5YXbhQxY77afT9j+eq9EdoJEv8Yy11n6l9hRyCbDwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFg+48LsShkCXAOSrR7mpGQbzdDIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2I3M2Iw
Yi03YzBjLTQ0OGEtOGJjYy0zNWNjMjE0ZGVhODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjczYjBi
LTdjMGMtNDQ4YS04YmNjLTM1Y2MyMTRkZWE4MS8xL1dEN2p3dXhLR1FKY0E1S3RI
dWFrWkJ2TjBNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUQkMA0EAgACMAcDBQMqBRWAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDp4jANBgkqhkiG9w0BAQsFAAOCAQEATTvbcS7zN7Ca
hmRGlyvdPSOhOWh5fD4MqDzWFgjYA7RJsY3gzHVY9Ch0I844Z7J0AkKOvqd8pDEs
aTfSRQJ6rOMDi5K0EI+TjO/+yRKm0NcZuFt5tjwfIc9+Ofd26hX5HxXI6WkX9xzw
NY+ySc8hH9HNDEXO31Ne6TXpgJbydT2izs+SrMp6UgYaK8ywD8QCu86QP+12izgt
/UWLNCErep8thxTRs+GFHtYWPmX989m3SFwFEPTPsPxMsMm7+cOhJjNTzjaecWCI
Xb69hxnCROmxTAtlClJw6rzwwYpfFPQJ6F9KDDwzonpXXJO3JOkVJPzmRfxY1hAe
AT8Z47VkEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:49 2025 by rpki-client