Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
File: XOGq4Mk60EtymAgraL9qVPpovPA.cer (raw, json)
Hash identifier: k9/qI1xMhtdwqKKmPzmg3cvhYUlWWgqNY7JcXasPKko=
Subject key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B52DF08B87E1C63161394BA93EA5E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 94.136.168.0/22
IP: 185.75.20.0/23
IP: 185.196.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:52:df:08:b8:7e:1c:63:16:13:94:ba:93:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:ad:51:1c:d5:df:1f:19:2d:70:30:5c:48:
a7:55:31:41:6c:bc:34:de:f3:32:ae:fc:ea:6e:81:
e0:6c:8b:92:f1:8a:5a:55:69:0a:53:c5:7e:18:a7:
83:70:c1:15:fe:02:20:1d:7c:5d:ef:85:00:35:81:
2f:80:4a:ae:30:b8:ea:b1:55:d2:3c:e1:a3:15:7e:
0f:05:80:3a:5d:54:51:46:da:d4:ba:23:b8:58:24:
f9:a8:05:5a:2e:e7:71:f3:b0:d6:32:0a:bc:e0:71:
4e:fb:0c:ee:3a:fa:7c:24:01:7a:59:41:55:cc:93:
c3:0d:bf:12:57:e0:03:8c:b1:11:2e:e1:fd:67:3d:
4a:4b:24:a1:d0:c2:bb:bb:b2:12:bb:3d:17:bd:f3:
1a:00:52:32:b3:35:a8:d0:50:d4:7e:99:cd:86:db:
64:2f:e3:67:8e:e9:c5:b6:06:e2:30:4a:a0:83:50:
ea:ba:af:4b:cd:98:23:0f:e6:4c:db:68:c0:96:32:
0f:67:02:55:b9:8c:00:30:5e:b5:e3:cb:d3:df:4e:
ea:32:5b:c9:50:70:e6:84:d6:c5:4c:1c:4e:d3:05:
be:99:7a:f0:ba:c0:00:60:9d:e1:27:0c:f4:01:d4:
0a:10:aa:c2:a2:df:f6:80:07:35:b5:ee:d0:ad:e0:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.168.0/22
185.75.20.0/23
185.196.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:9a:87:ad:4c:f8:c2:a0:55:0b:57:d5:70:c1:16:5b:49:e4:
04:c4:1c:f6:d6:e2:67:6c:06:d8:80:76:0f:32:d7:5a:dd:21:
19:e3:69:44:b9:01:5e:c2:4f:f5:03:ad:b6:4d:0d:7f:22:af:
92:f1:ab:2a:48:6e:39:8d:cc:01:03:0e:7e:bd:8f:73:ef:07:
f1:56:24:4b:57:73:e6:a8:83:11:cb:21:8d:c7:1f:b3:cc:c7:
aa:5c:94:f8:7e:cf:84:ce:9e:45:42:3e:e6:d9:72:05:81:05:
ed:a6:b0:ec:08:a3:fc:5e:e5:17:39:ce:3e:77:e3:8b:83:c1:
df:7d:57:f0:94:16:ea:24:53:90:fb:d6:1d:bb:c1:e4:2d:a9:
cc:c2:14:d6:98:08:08:d5:90:54:4c:10:c5:a9:f7:45:72:b7:
e1:32:ad:49:82:78:5f:98:e5:04:11:fe:54:7a:9a:1d:bf:88:
77:46:ec:d2:57:8f:3e:31:f7:3f:63:db:32:29:96:1d:bd:54:
7c:b9:96:24:a7:b2:38:48:51:56:b3:c4:51:ce:02:38:2b:b2:
43:82:fe:80:03:e3:4b:77:86:09:7f:db:04:66:0f:9d:28:d5:
3a:db:7b:2a:1f:f6:18:32:48:a4:d9:a4:95:71:48:83:b2:38:
4f:1d:9a:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZQma1LfCLh+HGMWE5S6k+peMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2UxYWFlMGM5M2FkMDRiNzI5ODA4MmI2OGJmNmE1NGZhNjhiY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4atURzV3x8ZLXAwXEinVTFBbLw0
3vMyrvzqboHgbIuS8YpaVWkKU8V+GKeDcMEV/gIgHXxd74UANYEvgEquMLjqsVXS
POGjFX4PBYA6XVRRRtrUuiO4WCT5qAVaLudx87DWMgq84HFO+wzuOvp8JAF6WUFV
zJPDDb8SV+ADjLERLuH9Zz1KSySh0MK7u7ISuz0XvfMaAFIyszWo0FDUfpnNhttk
L+NnjunFtgbiMEqgg1Dquq9LzZgjD+ZM22jAljIPZwJVuYwAMF6148vT307qMlvJ
UHDmhNbFTBxO0wW+mXrwusAAYJ3hJwz0AdQKEKrCot/2gAc1te7QreBMtQIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFFzhquDJOtBLcpgIK2i/alT6aLzwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2ZmMzYx
OC03MDMyLTQxNDMtOTM3NC1iYTE0MThkMjIwODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZmYzNjE4
LTcwMzItNDE0My05Mzc0LWJhMTQxOGQyMjA4Ny8xL1hPR3E0TWs2MEV0eW1BZ3Jh
TDlxVlBwb3ZQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQCXoioAwQBuUsUAwQCucRkMA0GCSqGSIb3DQEB
CwUAA4IBAQBcmoetTPjCoFULV9VwwRZbSeQExBz21uJnbAbYgHYPMtda3SEZ42lE
uQFewk/1A622TQ1/Iq+S8asqSG45jcwBAw5+vY9z7wfxViRLV3PmqIMRyyGNxx+z
zMeqXJT4fs+Ezp5FQj7m2XIFgQXtprDsCKP8XuUXOc4+d+OLg8HffVfwlBbqJFOQ
+9Ydu8HkLanMwhTWmAgI1ZBUTBDFqfdFcrfhMq1JgnhfmOUEEf5Uepodv4h3RuzS
V48+Mfc/Y9syKZYdvVR8uZYkp7I4SFFWs8RRzgI4K7JDgv6AA+NLd4YJf9sEZg+d
KNU623sqH/YYMkik2aSVcUiDsjhPHZpA
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:10 2025 by rpki-client