Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
File: bd1AUuD8dlNjYcu9x3UId93zYK0.cer (raw, json)
Hash identifier: 28ErxvIMSIG+Xdq4J9elXl8MyQwNwzkAVNzaEdFTnrw=
Subject key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D963B4E123673E6FD103052ACA7F44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210874
IP: 45.10.100.0/22
IP: 2a0e:3700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:63:b4:e1:23:67:3e:6f:d1:03:05:2a:ca:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:c9:1d:d2:5a:8b:4c:12:2a:aa:cf:c0:62:
39:3c:a0:14:98:02:52:4d:e6:40:8d:a2:ee:fc:2f:
48:37:66:ec:16:53:e8:9d:ca:48:4e:f7:6f:08:f3:
f8:06:1c:d5:69:d9:cb:b0:0a:3c:97:d8:3e:10:8f:
5e:e5:62:84:a7:d2:4a:ee:a8:d6:4e:69:29:c1:a8:
ce:29:21:48:91:5a:3c:57:74:a1:67:ef:17:4a:64:
5c:76:d4:b2:7c:fa:08:2b:1c:2d:96:be:e0:cf:57:
82:a8:fd:39:93:12:b5:6e:53:39:5b:0c:b1:0b:2b:
88:b8:55:13:5b:93:29:5b:df:cd:82:71:17:6e:d9:
74:e0:59:57:ef:2d:73:85:fd:da:c6:90:d4:97:7c:
54:2c:d1:67:a8:64:11:3a:3e:6d:4e:c2:ab:d3:4b:
af:25:87:ae:f4:43:fd:42:e7:30:bb:07:01:00:a6:
61:07:a5:e6:cd:d4:cd:e5:3b:5c:fe:0e:74:98:15:
0c:dd:44:29:5a:b6:9d:c1:0a:c1:b5:55:10:64:b9:
8d:fe:08:c8:f3:9a:24:21:bd:c4:50:10:18:a3:97:
7a:eb:de:61:e9:c9:a6:f9:24:19:f8:80:83:30:91:
72:9f:32:32:5e:20:ec:0e:cb:26:52:52:e6:fa:3f:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.100.0/22
IPv6:
2a0e:3700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210874
Signature Algorithm: sha256WithRSAEncryption
42:03:e7:01:df:71:aa:7b:e6:73:d2:44:58:b8:8c:b9:f0:cb:
97:7c:3e:e8:90:c8:81:16:07:33:88:42:b0:24:44:6b:21:6d:
20:3c:0c:4e:67:9d:d6:c7:15:3b:01:67:de:ac:b1:97:fa:1c:
19:49:1d:56:34:98:d5:37:8a:28:6b:bf:c1:3c:4b:91:dc:67:
d1:09:35:43:1d:3f:2f:7f:e1:f2:b9:16:ef:f2:c5:94:e7:cf:
78:c9:a3:0d:f6:08:36:41:be:d0:0a:00:1b:f9:6e:45:79:09:
58:8a:98:bd:46:8a:85:90:99:7c:94:a4:98:1c:e9:47:88:fc:
44:48:21:f7:26:d1:f8:ac:d2:34:59:7c:81:17:6d:5a:1e:45:
de:ab:3c:23:5c:26:94:1e:32:2c:8a:ae:9a:5c:da:6a:bd:f1:
fa:6a:d2:53:bf:22:a8:fc:a9:10:5d:d8:c1:c4:84:f9:56:3c:
f1:98:53:9a:e1:41:c7:c8:62:06:20:19:69:8f:35:95:9d:6b:
a5:8b:d0:75:fb:4e:af:49:31:fd:8e:4e:4c:7c:89:ab:71:82:
ba:9a:bd:49:57:c1:aa:2e:c0:c7:c4:af:fb:7e:57:a0:b0:5f:
33:34:59:7b:04:07:55:d7:a0:87:b4:08:ba:c1:da:bb:94:c5:
5b:11:68:6e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2WO04SNnPm/RAwUqyn9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGRkNDA1MmUwZmM3NjUzNjM2MWNiYmRjNzc1MDg3N2RkZjM2MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIrJHdJai0wSKqrPwGI5PKAUmAJS
TeZAjaLu/C9IN2bsFlPoncpITvdvCPP4BhzVadnLsAo8l9g+EI9e5WKEp9JK7qjW
TmkpwajOKSFIkVo8V3ShZ+8XSmRcdtSyfPoIKxwtlr7gz1eCqP05kxK1blM5Wwyx
CyuIuFUTW5MpW9/NgnEXbtl04FlX7y1zhf3axpDUl3xULNFnqGQROj5tTsKr00uv
JYeu9EP9QucwuwcBAKZhB6XmzdTN5Ttc/g50mBUM3UQpWradwQrBtVUQZLmN/gjI
85okIb3EUBAYo5d6695h6cmm+SQZ+ICDMJFynzIyXiDsDssmUlLm+j9HYQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFG3dQFLg/HZTY2HLvcd1CHfd82CtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzkyMzQ0
OC0zMDI3LTQ5NDEtOThhNC1iYTdiMWYzNzY5ZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvOTIzNDQ4
LTMwMjctNDk0MS05OGE0LWJhN2IxZjM3NjllMy8xL2JkMUFVdUQ4ZGxOalljdTl4
M1VJZDkzellLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLQpkMA0EAgACMAcDBQMqDjcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3ujANBgkqhkiG9w0BAQsFAAOCAQEAQgPnAd9xqnvm
c9JEWLiMufDLl3w+6JDIgRYHM4hCsCREayFtIDwMTmed1scVOwFn3qyxl/ocGUkd
VjSY1TeKKGu/wTxLkdxn0Qk1Qx0/L3/h8rkW7/LFlOfPeMmjDfYINkG+0AoAG/lu
RXkJWIqYvUaKhZCZfJSkmBzpR4j8REgh9ybR+KzSNFl8gRdtWh5F3qs8I1wmlB4y
LIqumlzaar3x+mrSU78iqPypEF3YwcSE+VY88ZhTmuFBx8hiBiAZaY81lZ1rpYvQ
dftOr0kx/Y5OTHyJq3GCupq9SVfBqi7Ax8Sv+35XoLBfMzRZewQHVdegh7QIusHa
u5TFWxFobg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:42 2025 by rpki-client