Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.cer (raw, json)
Hash identifier: 7JGt2WvyMMlpLilS4rvg6WLUOSNc/LLLccdTmkTUkek=
Subject key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6565D654B7890D1CD763679FB81D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60502
IP: 185.221.224.0/22
IP: 2a0c:5000::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:56:5d:65:4b:78:90:d1:cd:76:36:79:fb:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:1b:1b:97:8c:ab:0f:4b:d1:79:2b:5d:ba:
23:4e:78:b3:37:4f:c9:67:d4:76:5d:e0:cf:08:5e:
81:1b:6d:bf:ca:1c:1b:a5:cc:42:a0:1c:dc:5c:96:
df:2f:64:ec:1c:4c:c9:f4:ad:c5:c2:92:6d:7d:a7:
5a:67:8c:8f:62:bb:57:c7:60:ba:26:25:c1:3f:18:
ca:51:6f:9b:ce:77:83:84:a1:70:80:b3:57:66:ad:
64:aa:72:69:8e:c4:0d:99:b7:f3:1a:a7:a1:d2:25:
ce:d1:3a:ef:04:7f:a1:01:af:f4:af:05:18:cc:21:
d4:39:1d:c3:4e:68:6e:e3:2a:a3:5a:d4:6c:bb:86:
d5:f6:b7:c2:fb:c6:10:30:a4:28:33:f8:f6:9e:b8:
39:8e:88:74:fb:54:82:53:85:df:b5:ae:31:fa:a2:
a3:29:be:81:67:d8:10:95:67:88:29:5b:b0:9a:18:
e4:da:a6:e2:1d:bf:d6:6b:04:fe:83:c4:4e:39:35:
2b:bb:4a:9c:96:56:9e:02:95:ff:f5:5f:d8:a8:94:
db:dd:b1:44:41:8d:27:6c:e6:ed:3e:31:63:c3:15:
eb:82:3b:b1:af:22:4c:de:38:32:4a:4a:ce:d8:47:
c5:46:98:31:f2:12:1b:b4:34:2f:fa:a1:38:64:5a:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.224.0/22
IPv6:
2a0c:5000::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60502
Signature Algorithm: sha256WithRSAEncryption
6e:10:56:5d:6c:23:41:1d:7b:cf:bd:f3:4f:b8:74:e7:07:ae:
92:2c:20:de:23:cc:23:c8:e4:30:97:f8:ab:f1:e4:59:e6:9c:
21:96:93:42:f2:82:46:2f:23:e6:f4:61:4d:54:3d:3b:5a:85:
fc:c5:ae:ff:e8:3b:50:34:14:97:62:c9:9c:10:32:29:7c:74:
cc:cc:39:86:1a:2a:16:ae:b9:29:54:01:43:04:bd:8f:47:ff:
59:8c:a2:3b:7e:81:23:65:79:3f:9c:a9:34:50:86:63:0f:2a:
4e:53:55:b7:55:a5:e8:ab:2f:94:24:cf:c9:da:fa:6b:4f:06:
c9:12:52:d3:ed:7b:b9:66:24:18:99:4d:1d:31:58:62:75:66:
f7:ce:8e:9e:a9:1f:2d:66:d0:fc:51:10:f8:8c:c6:8f:ce:5a:
9c:20:26:f1:b5:82:0d:e4:8a:7b:cf:bb:a8:1d:58:1f:04:ac:
08:aa:6c:66:0f:ce:94:3a:05:65:25:92:fd:26:82:61:7a:02:
60:8f:aa:15:2d:18:e9:f3:58:c3:ab:a4:39:80:a2:90:90:cd:
3e:35:23:97:b5:c1:ff:c7:3b:0a:31:47:c5:3c:4b:ae:b5:e1:
e1:1b:07:95:3e:fb:57:6e:59:e4:e9:e6:af:8b:a2:82:80:7d:
bc:3d:02:ec
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntlZdZUt4kNHNdjZ5+4HSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGFiNDU2YTA1MWQ0YTkzNzg4YmVmNGZhYzBkMDdiZGMwYzlmMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL4bG5eMqw9L0XkrXbojTnizN0/J
Z9R2XeDPCF6BG22/yhwbpcxCoBzcXJbfL2TsHEzJ9K3FwpJtfadaZ4yPYrtXx2C6
JiXBPxjKUW+bzneDhKFwgLNXZq1kqnJpjsQNmbfzGqeh0iXO0TrvBH+hAa/0rwUY
zCHUOR3DTmhu4yqjWtRsu4bV9rfC+8YQMKQoM/j2nrg5joh0+1SCU4Xfta4x+qKj
Kb6BZ9gQlWeIKVuwmhjk2qbiHb/WawT+g8ROOTUru0qcllaeApX/9V/YqJTb3bFE
QY0nbObtPjFjwxXrgjuxryJM3jgySkrO2EfFRpgx8hIbtDQv+qE4ZFroHwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFF2rRWoFHUqTeIvvT6wNB73AyfDPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzhkMzg5
NS02NWMyLTRiOGUtYTU0Ny04YWQ3NGNjNmE2YjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOGQzODk1
LTY1YzItNGI4ZS1hNTQ3LThhZDc0Y2M2YTZiOS8xL1hhdEZhZ1VkU3BONGktOVBy
QTBIdmNESjhNOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCud3gMA0EAgACMAcDBQIqDFAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDsVjANBgkqhkiG9w0BAQsFAAOCAQEAbhBWXWwjQR17
z73zT7h05weukiwg3iPMI8jkMJf4q/HkWeacIZaTQvKCRi8j5vRhTVQ9O1qF/MWu
/+g7UDQUl2LJnBAyKXx0zMw5hhoqFq65KVQBQwS9j0f/WYyiO36BI2V5P5ypNFCG
Yw8qTlNVt1Wl6KsvlCTPydr6a08GyRJS0+17uWYkGJlNHTFYYnVm986OnqkfLWbQ
/FEQ+IzGj85anCAm8bWCDeSKe8+7qB1YHwSsCKpsZg/OlDoFZSWS/SaCYXoCYI+q
FS0Y6fNYw6ukOYCikJDNPjUjl7XB/8c7CjFHxTxLrrXh4RsHlT77V25Z5Onmr4ui
goB9vD0C7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:42 2025 by rpki-client