Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.cer (raw, json)
Hash identifier: gqH7D/+0Gd+3mI4NyZK5Q+0BvoHzNoZs6pQ47AwNmZU=
Subject key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B37E62B11FD3D8F03B4B013871076
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41750
AS: 52214
AS: 59527
IP: 46.226.208.0/21
IP: 77.235.0.0/19
IP: 92.245.96.0/19
IP: 109.201.160.0/19
IP: 158.181.0.0/19
IP: 158.181.128.0/17
IP: 176.123.224.0/19
IP: 185.138.100.0/22
IP: 2a04:5600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:37:e6:2b:11:fd:3d:8f:03:b4:b0:13:87:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:49:f2:b1:e3:99:78:cd:30:6c:03:b9:3b:
ef:69:df:63:b5:e2:a0:af:62:46:57:df:1b:ca:88:
30:28:bd:14:b5:df:f0:d9:66:65:aa:ad:9d:c0:78:
da:6a:3d:0a:e9:23:9d:11:11:ab:93:83:85:7f:b0:
b9:51:2c:2b:6b:b2:b5:54:9a:8c:82:5d:d9:fe:14:
f8:53:cb:e8:9a:aa:22:2e:79:a3:02:13:39:91:11:
01:8a:3f:d5:33:80:c9:56:de:a6:99:ef:c8:20:bd:
87:9a:8b:c3:e7:98:ee:8b:72:5f:ec:83:90:f8:9e:
ee:81:1d:a4:be:fe:52:d4:72:d6:34:1e:fd:d1:ee:
37:a7:37:93:33:b1:6f:22:f8:43:f5:57:00:2d:af:
fd:18:1d:9d:89:9c:e4:14:78:e9:42:b8:2b:66:fb:
07:d3:d2:7c:09:ef:41:5a:1b:a1:f4:f3:25:f2:ab:
02:07:bc:69:33:74:e3:7e:77:4d:fd:8c:92:4f:01:
0d:61:a3:b1:da:b7:44:fb:cc:78:d4:33:5d:4a:c1:
e4:76:cb:2d:d0:cd:e4:9c:71:9b:5b:a4:73:93:94:
55:2f:fd:80:9c:72:2c:6c:7e:08:ab:44:1f:66:50:
e9:e1:45:1a:e5:25:43:b6:10:bd:68:45:35:9e:75:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.208.0/21
77.235.0.0/19
92.245.96.0/19
109.201.160.0/19
158.181.0.0/19
158.181.128.0/17
176.123.224.0/19
185.138.100.0/22
IPv6:
2a04:5600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41750
52214
59527
Signature Algorithm: sha256WithRSAEncryption
4c:9d:26:42:75:0f:54:63:14:5a:36:a1:97:bb:8f:25:69:96:
6e:74:53:31:ba:93:4b:b0:ba:e4:9f:c8:2e:f5:96:09:58:95:
29:82:d6:fa:07:1b:59:8e:98:49:72:9c:47:e9:92:6e:82:7a:
32:3b:df:82:6e:4c:45:00:3c:61:61:15:38:39:59:b9:72:c9:
48:af:e5:e1:00:4f:63:84:85:0c:57:30:a9:75:93:3e:32:7c:
70:62:35:9c:81:c0:d0:d5:5a:ed:01:d8:f1:70:93:92:9a:4c:
a1:2a:7d:03:b7:42:e5:ee:c7:9e:17:71:84:17:6d:a7:8b:cc:
74:23:3d:c7:eb:a7:ef:e8:ec:14:a7:9e:94:08:39:b4:a7:64:
a7:8b:24:c6:e6:1c:00:d9:60:bf:42:6a:c4:09:bd:4c:0d:c4:
13:0f:6e:3a:72:af:4c:ca:b6:bd:05:ba:64:45:61:75:47:cb:
1e:aa:93:b2:c5:9d:7b:24:32:76:4d:3d:74:42:df:ee:6b:0d:
32:7c:53:11:fc:e0:36:a7:fe:e1:3b:d4:df:00:6d:78:d8:84:
28:eb:2c:03:ec:bc:3d:0e:24:59:83:be:f7:2d:40:78:1b:9e:
c5:3d:2d:cd:8c:9a:e5:e5:6b:82:1d:d7:88:ea:aa:9f:c7:20:
ac:ea:96:24
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZQmazfmKxH9PY8DtLAThxB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2UzYzI5MDBiNTk5NzU0MjgzZjI3ZjNiNGU4ZDdmNmM0NTEwOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT1J8rHjmXjNMGwDuTvvad9jteKg
r2JGV98byogwKL0Utd/w2WZlqq2dwHjaaj0K6SOdERGrk4OFf7C5USwra7K1VJqM
gl3Z/hT4U8vomqoiLnmjAhM5kREBij/VM4DJVt6mme/IIL2HmovD55jui3Jf7IOQ
+J7ugR2kvv5S1HLWNB790e43pzeTM7FvIvhD9VcALa/9GB2diZzkFHjpQrgrZvsH
09J8Ce9BWhuh9PMl8qsCB7xpM3TjfndN/YySTwENYaOx2rdE+8x41DNdSsHkdsst
0M3knHGbW6Rzk5RVL/2AnHIsbH4Iq0QfZlDp4UUa5SVDthC9aEU1nnXPnwIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFHfjwpALWZdUKD8n87To1/bEUQlyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2VmMmI0
OS0wMzVmLTQwYTQtYWU1MS1kM2M1NWQ0ZmRhOWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvZWYyYjQ5
LTAzNWYtNDBhNC1hZTUxLWQzYzU1ZDRmZGE5ZC8xL2QtUENrQXRabDFRb1B5Znp0
T2pYOXNSUkNYSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQDLuLQAwQFTesAAwQFXPVgAwQFbcmgAwQFnrUA
AwQHnrWAAwQFsHvgAwQCuYpkMA0EAgACMAcDBQMqBFYAMCQGCCsGAQUFBwEIAQH/
BBUwE6ARMA8CAwCjFgIDAMv2AgMA6IcwDQYJKoZIhvcNAQELBQADggEBAEydJkJ1
D1RjFFo2oZe7jyVplm50UzG6k0uwuuSfyC71lglYlSmC1voHG1mOmElynEfpkm6C
ejI734JuTEUAPGFhFTg5WblyyUiv5eEAT2OEhQxXMKl1kz4yfHBiNZyBwNDVWu0B
2PFwk5KaTKEqfQO3QuXux54XcYQXbaeLzHQjPcfrp+/o7BSnnpQIObSnZKeLJMbm
HADZYL9CasQJvUwNxBMPbjpyr0zKtr0FumRFYXVHyx6qk7LFnXskMnZNPXRC3+5r
DTJ8UxH84Dan/uE71N8AbXjYhCjrLAPsvD0OJFmDvvctQHgbnsU9Lc2MmuXla4Id
14jqqp/HIKzqliQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:44 2025 by rpki-client