Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
File: d9LZKEIxBOXDSA4htKPtFJiyon4.cer (raw, json)
Hash identifier: haBHG2F01fx5TS4iQga9z499YKxCwKG4+bgOEj1YOYk=
Subject key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01943FCC6321DDA3786BC966B6722D7D2798
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jan 2025 08:05:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62392
IP: 151.216.128.0/17
IP: 185.175.216.0/22
IP: 2001:67c:1808::/47
IP: 2001:67c:1810::/48
IP: 2a13:8300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:cc:63:21:dd:a3:78:6b:c9:66:b6:72:2d:7d:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 7 08:05:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:19:20:e8:58:21:d0:7f:51:ee:88:b4:46:
45:d2:e6:ff:d7:28:92:ca:31:3d:94:97:17:30:b8:
b6:b6:c5:49:9b:0a:15:e9:9f:ed:3f:07:38:da:1a:
cc:e1:13:4d:5b:68:08:c0:3f:39:c4:a6:0d:ee:15:
34:df:29:d8:e5:bc:d5:24:a3:aa:b8:ca:d1:6c:04:
6b:a2:c6:80:1f:94:5a:6c:ed:0b:55:45:24:bd:e2:
48:54:f9:8a:d0:ea:b8:39:f8:82:ed:45:6a:56:62:
7d:5f:a9:1d:f8:9a:89:97:e9:ba:a8:b7:08:f2:87:
3c:e9:0c:df:e8:fa:c7:e5:44:50:3a:9b:b5:78:f7:
8d:af:74:56:67:0d:06:4c:cd:27:a7:33:a7:05:21:
f4:cf:60:5e:05:6d:b1:8c:99:0a:b2:2d:31:76:b6:
f1:af:64:21:65:e2:f3:d1:1a:8a:c8:bc:1e:b2:53:
17:5d:58:14:9a:18:15:5a:91:a0:d4:66:30:fe:d2:
97:b6:7b:91:2d:5c:9a:de:25:95:0a:af:3b:60:e9:
ff:5e:e2:14:a3:44:61:22:44:82:83:72:73:4f:6a:
22:91:b8:c6:eb:d5:db:0a:b6:4c:1b:63:71:02:d4:
08:1c:d2:2c:3c:2a:ad:ca:42:63:89:f9:46:fa:d2:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.128.0/17
185.175.216.0/22
IPv6:
2001:67c:1808::/47
2001:67c:1810::/48
2a13:8300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62392
Signature Algorithm: sha256WithRSAEncryption
04:d3:ac:85:96:da:ea:15:49:80:b5:f6:bc:92:c8:40:62:93:
49:5e:0a:a7:6d:a9:4a:e9:14:fb:e3:f9:71:e3:9a:27:f6:07:
47:d9:34:02:d2:3c:98:ff:15:98:db:16:a5:a3:d6:75:ba:46:
5a:13:bf:e2:a6:8b:ea:a4:ca:32:36:b8:ac:81:9d:97:ef:10:
f3:be:1e:07:95:d0:6e:4d:53:0b:2c:71:c6:2d:e1:b8:28:40:
54:d9:79:ec:47:e8:dc:8a:46:96:14:b4:74:69:c3:ae:6e:bc:
d4:73:1a:c0:57:31:48:0f:41:e7:7f:48:9f:09:a1:1d:74:bb:
64:f9:13:8b:b4:db:e7:4b:f8:e2:66:21:e9:1a:43:3e:03:62:
3a:c0:a8:2a:93:7d:6b:61:51:f7:a4:7f:81:22:ca:94:e0:69:
17:cb:4d:fe:89:01:e5:d8:96:c3:43:71:1d:6f:29:d7:22:53:
ec:b2:8d:83:bd:ac:38:6a:f9:2c:34:50:1c:45:06:57:7e:d7:
50:fa:b5:30:f6:a3:6f:6a:de:68:82:27:4a:01:5e:4b:97:f8:
33:aa:0c:33:e7:8f:e0:16:04:a6:25:7c:13:e5:cb:db:6b:ab:
f0:a3:09:e0:f9:78:56:83:e9:b0:8f:3d:ba:1e:43:6e:13:61:
b2:ac:7e:be
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQ/zGMh3aN4a8lmtnItfSeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTA3MDgwNTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QyZDkyODQyMzEwNGU1YzM0ODBlMjFiNGEzZWQxNDk4YjJhMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnwZIOhYIdB/Ue6ItEZF0ub/1yiS
yjE9lJcXMLi2tsVJmwoV6Z/tPwc42hrM4RNNW2gIwD85xKYN7hU03ynY5bzVJKOq
uMrRbARrosaAH5RabO0LVUUkveJIVPmK0Oq4OfiC7UVqVmJ9X6kd+JqJl+m6qLcI
8oc86Qzf6PrH5URQOpu1ePeNr3RWZw0GTM0npzOnBSH0z2BeBW2xjJkKsi0xdrbx
r2QhZeLz0RqKyLweslMXXVgUmhgVWpGg1GYw/tKXtnuRLVya3iWVCq87YOn/XuIU
o0RhIkSCg3JzT2oikbjG69XbCrZMG2NxAtQIHNIsPCqtykJjiflG+tJ5wwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzJiOWUy
OS1kNTY4LTRkNTMtYjEyOC00ODg3OTIzODhlNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMmI5ZTI5
LWQ1NjgtNGQ1My1iMTI4LTQ4ODc5MjM4OGU1Yi8xL2Q5TFpLRUl4Qk9YRFNBNGh0
S1B0RkppeW9uNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTASBAIAATAMAwQHl9iAAwQCua/YMB8EAgACMBkDBwEgAQZ8GAgD
BwAgAQZ8GBADBQMqE4MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzuDANBgkq
hkiG9w0BAQsFAAOCAQEABNOshZba6hVJgLX2vJLIQGKTSV4Kp22pSukU++P5ceOa
J/YHR9k0AtI8mP8VmNsWpaPWdbpGWhO/4qaL6qTKMja4rIGdl+8Q874eB5XQbk1T
Cyxxxi3huChAVNl57Efo3IpGlhS0dGnDrm681HMawFcxSA9B539InwmhHXS7ZPkT
i7Tb50v44mYh6RpDPgNiOsCoKpN9a2FR96R/gSLKlOBpF8tN/okB5diWw0NxHW8p
1yJT7LKNg72sOGr5LDRQHEUGV37XUPq1MPajb2reaIInSgFeS5f4M6oMM+eP4BYE
piV8E+XL22ur8KMJ4Pl4VoPpsI89uh5DbhNhsqx+vg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:01 2025 by rpki-client