Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer (raw, json)
Hash identifier: GkzD4jUcXeLjQoh5NXQZQvAAKQgxVK7xHcePomqqH6Q=
Subject key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA1DBF5205A9A0594581C34222E7C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196772
IP: 91.212.199.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:bf:52:05:a9:a0:59:45:81:c3:42:22:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:68:8b:51:03:75:0a:ca:0b:ac:1d:2d:60:0c:
04:f7:91:c9:6d:1e:48:20:e7:e4:44:04:65:2a:75:
7f:37:33:14:24:80:61:aa:7e:7b:26:e1:d3:61:ef:
01:5e:e8:98:16:db:40:46:cf:88:ae:0b:26:0a:09:
5b:83:a8:d1:ba:7c:38:7d:e5:98:d6:df:5d:86:89:
33:29:d6:cc:8a:19:1a:d5:e3:db:01:04:b4:eb:6d:
4c:f4:de:35:9f:0f:48:fe:8c:b6:50:77:27:b7:e6:
89:6e:5f:6b:c1:b4:66:c9:86:3f:5f:30:09:d0:82:
69:30:ad:f8:35:e2:be:42:a2:d8:cd:be:be:7d:55:
78:8d:d0:07:2a:a9:43:60:bb:09:49:6b:83:e9:91:
a2:3a:fd:76:78:08:9b:b0:d9:f1:e3:eb:90:6f:5b:
9a:02:7b:85:24:7b:b1:ab:53:b6:44:ba:fa:9c:8b:
80:4d:f6:88:01:b8:c9:3d:5e:8d:44:90:73:63:fc:
ee:58:b5:e3:fb:d9:b2:39:59:88:02:a4:e5:b0:ab:
5f:00:8e:d3:ea:1f:41:6f:b4:58:8d:79:5b:93:be:
24:1c:21:9c:d3:52:a9:1c:a4:f0:82:18:28:99:6c:
91:23:ff:e1:48:17:26:c3:1d:27:84:44:a1:45:28:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.199.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196772
Signature Algorithm: sha256WithRSAEncryption
ac:d2:3b:90:82:9d:38:c3:16:d2:01:f1:ea:b6:a5:55:0f:28:
94:28:f3:20:f2:39:aa:6d:be:a3:69:3a:0f:68:49:84:68:74:
69:41:a2:e7:36:52:53:b9:b4:94:a2:9e:e5:8b:f1:be:66:38:
85:f0:7c:16:90:f2:08:01:b4:57:a3:99:41:95:25:55:ef:2d:
b0:a8:8f:d0:9a:fa:a5:e2:20:e2:c7:2e:7a:bb:79:4d:da:aa:
f8:b8:9d:22:3e:fc:8c:0b:37:80:2d:c9:f5:51:5d:e5:b1:8d:
6a:d1:ce:9e:04:57:1d:1a:ab:95:06:a4:2c:4a:68:4d:d2:e4:
6a:ca:de:9c:79:0c:e7:15:dc:10:06:b4:46:aa:6e:e8:06:87:
86:91:28:0e:f6:8a:ba:bc:4a:3b:fa:05:a8:e4:34:df:ad:c5:
24:a3:0d:f8:b2:1d:f4:32:17:60:c3:aa:f0:45:78:57:71:dd:
f1:0b:87:23:76:af:95:02:bf:8a:57:61:9c:6b:a4:9b:d2:47:
de:bb:1b:c3:a5:a0:d2:20:82:37:ca:5b:fe:f8:07:95:03:03:
a6:48:e5:a7:02:90:7c:84:db:9b:22:ee:f1:1d:93:eb:63:4e:
82:cd:50:cd:5e:1f:03:34:0a:e8:71:5b:2a:90:9e:a4:ee:ac:
22:af:69:82
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQf+h2/UgWpoFlFgcNCIufAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTg2OGIwMmU1MTlkZDdlNjk0YzdhZjFlNzA4YmRkNjYzNjliZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WiLUQN1CsoLrB0tYAwE95HJbR5I
IOfkRARlKnV/NzMUJIBhqn57JuHTYe8BXuiYFttARs+IrgsmCglbg6jRunw4feWY
1t9dhokzKdbMihka1ePbAQS0621M9N41nw9I/oy2UHcnt+aJbl9rwbRmyYY/XzAJ
0IJpMK34NeK+QqLYzb6+fVV4jdAHKqlDYLsJSWuD6ZGiOv12eAibsNnx4+uQb1ua
AnuFJHuxq1O2RLr6nIuATfaIAbjJPV6NRJBzY/zuWLXj+9myOVmIAqTlsKtfAI7T
6h9Bb7RYjXlbk74kHCGc01KpHKTwghgomWyRI//hSBcmwx0nhEShRSgc4QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFF6GiwLlGd1+aUx68ecIvdZjab3fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzgwMmUw
NS0wZDViLTQ1ODktOTE2Yi05MGMxN2ViNzUxZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvODAyZTA1
LTBkNWItNDU4OS05MTZiLTkwYzE3ZWI3NTFmNC8xL1hvYUxBdVVaM1g1cFRIcng1
d2k5MW1OcHZkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9THMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMApDANBgkqhkiG9w0BAQsFAAOCAQEArNI7kIKdOMMW0gHx6ralVQ8olCjzIPI5
qm2+o2k6D2hJhGh0aUGi5zZSU7m0lKKe5YvxvmY4hfB8FpDyCAG0V6OZQZUlVe8t
sKiP0Jr6peIg4scuert5Tdqq+LidIj78jAs3gC3J9VFd5bGNatHOngRXHRqrlQak
LEpoTdLkasrenHkM5xXcEAa0Rqpu6AaHhpEoDvaKurxKO/oFqOQ0363FJKMN+LId
9DIXYMOq8EV4V3Hd8QuHI3avlQK/ildhnGukm9JH3rsbw6Wg0iCCN8pb/vgHlQMD
pkjlpwKQfITbmyLu8R2T62NOgs1QzV4fAzQK6HFbKpCepO6sIq9pgg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:30 2025 by rpki-client