Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer (raw, json)
Hash identifier: 3nsjeriUpVRfzrfdK64Ggv5FyJgXpyZe9F3iq8BGoso=
Subject key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214411E49408EF20DDA2662333EADCB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.109.93.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:e4:94:08:ef:20:dd:a2:66:23:33:ea:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:4a:bc:e3:d1:a9:f3:73:45:e8:7b:a4:2d:
37:85:35:ae:10:8e:3f:6b:52:b9:3a:ae:88:73:8f:
b5:6e:ad:a8:a0:f8:d1:46:97:cd:66:c8:4b:b6:98:
cb:cb:c2:9c:aa:64:6a:a5:9f:0b:01:7f:d8:25:da:
60:eb:97:e1:fd:77:b2:fa:68:2b:7c:b3:79:c2:85:
4e:40:f1:03:c1:56:bd:dc:72:b0:a7:96:b9:38:19:
89:8c:59:75:7b:57:4a:e1:db:32:43:26:69:62:7f:
4a:de:44:ea:66:07:be:44:b0:65:d6:36:1b:80:47:
2a:59:ad:88:f3:fd:8f:07:7e:7e:b9:4a:38:94:77:
64:5f:8d:4e:bc:60:0d:db:f3:b1:87:87:24:5b:de:
ac:54:3d:cb:0d:95:2a:98:54:25:eb:6a:9c:ef:ff:
eb:c2:89:b7:90:01:b8:29:55:ab:a2:c6:d4:c5:f2:
b7:53:ab:0d:bf:e7:56:37:3a:b8:60:ae:cd:2a:bd:
8a:a1:69:83:53:09:1e:2f:07:e8:64:da:66:34:9e:
6d:5e:50:c5:44:ce:9f:cc:d1:dd:13:49:b2:6c:63:
2c:b4:d6:fd:a4:78:a4:64:c0:3e:1d:87:0e:5b:e0:
1f:50:11:60:63:3b:49:4b:b5:cc:e4:15:85:c1:23:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:52:bd:e9:5a:69:17:e1:8d:d1:9b:99:10:f6:24:bf:ec:85:
74:0f:87:90:e9:97:5a:72:57:33:b2:b4:b8:0e:77:c4:07:55:
d8:d8:41:8e:0b:c7:59:c2:e0:9d:ee:b7:73:59:fe:ff:5c:2f:
36:d2:91:be:68:9f:03:30:54:ef:97:5e:8b:90:09:13:14:a8:
07:b0:6e:a7:27:51:b1:26:2d:7e:2c:7c:99:9f:57:f9:01:47:
4c:47:08:e2:79:c2:4c:39:b8:36:db:1e:1e:02:76:90:f1:74:
ef:f6:91:64:87:1f:35:ec:d9:e2:51:4f:98:39:d2:ec:af:08:
78:25:fd:7f:95:8b:7e:88:b9:78:c4:a7:3b:1b:d0:90:68:dd:
2d:a3:ef:16:5b:e1:76:3d:f4:c4:e5:3f:41:33:66:07:2d:bf:
be:a3:2a:47:38:9c:4b:88:48:dd:6b:fb:ba:2f:05:e3:32:ac:
ba:c2:b8:c2:ba:d7:5b:57:71:0c:99:96:9c:5b:8f:28:3e:a2:
6a:02:72:ea:79:37:f9:d8:ce:38:8e:13:74:47:5f:ca:b4:15:
67:45:d8:08:b8:6f:7d:c3:ca:7a:3e:df:c2:88:a5:c4:d1:32:
2b:d5:8c:8c:f5:b5:18:53:08:95:f5:72:5b:6b:c7:b4:8a:f2:
40:8a:57:1b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRBHklAjvIN2iZiMz6tyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDJmNThlNjM2ZDhiYjFkZDEwMzk2YzgyNDRkYzExOTIxNWU3OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOxKvOPRqfNzReh7pC03hTWuEI4/
a1K5Oq6Ic4+1bq2ooPjRRpfNZshLtpjLy8KcqmRqpZ8LAX/YJdpg65fh/Xey+mgr
fLN5woVOQPEDwVa93HKwp5a5OBmJjFl1e1dK4dsyQyZpYn9K3kTqZge+RLBl1jYb
gEcqWa2I8/2PB35+uUo4lHdkX41OvGAN2/Oxh4ckW96sVD3LDZUqmFQl62qc7//r
wom3kAG4KVWrosbUxfK3U6sNv+dWNzq4YK7NKr2KoWmDUwkeLwfoZNpmNJ5tXlDF
RM6fzNHdE0mybGMstNb9pHikZMA+HYcOW+AfUBFgYztJS7XM5BWFwSOIIQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFG0vWOY22Lsd0QOWyCRNwRkhXnkUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2M5Nzhk
Yi02NTY5LTQ1NDQtODE5Ny1jZTZiN2M5ZDU1OWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvYzk3OGRi
LTY1NjktNDU0NC04MTk3LWNlNmI3YzlkNTU5Yi8xL2JTOVk1amJZdXgzUkE1YklK
RTNCR1NGZWVSUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwW1dMA0GCSqGSIb3DQEBCwUAA4IBAQALUr3p
WmkX4Y3Rm5kQ9iS/7IV0D4eQ6ZdaclczsrS4DnfEB1XY2EGOC8dZwuCd7rdzWf7/
XC820pG+aJ8DMFTvl16LkAkTFKgHsG6nJ1GxJi1+LHyZn1f5AUdMRwjiecJMObg2
2x4eAnaQ8XTv9pFkhx817NniUU+YOdLsrwh4Jf1/lYt+iLl4xKc7G9CQaN0to+8W
W+F2PfTE5T9BM2YHLb++oypHOJxLiEjda/u6LwXjMqy6wrjCutdbV3EMmZacW48o
PqJqAnLqeTf52M44jhN0R1/KtBVnRdgIuG99w8p6Pt/CiKXE0TIr1YyM9bUYUwiV
9XJba8e0ivJAilcb
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:18 2025 by rpki-client