Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
File: eodGp2zag2kAnSiUHvFWI5xqY6E.cer (raw, json)
Hash identifier: 4UFViYswVj4xu8Qu5j7LROGzvZ+oPFmOH3FmdrtJ7pE=
Subject key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01944A86F6C3B0C9F1FDD677307A64DCAC49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jan 2025 10:05:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5378
AS: 5388
AS: 6660
AS: 8576
IP: 62.136.0.0/15
IP: 81.76.0.0/14
IP: 84.64.0.0/13
IP: 90.240.0.0/12
IP: 193.32.24.0/22
IP: 193.32.45.0/24
IP: 193.193.32.0/19
IP: 193.194.22.0 -- 193.194.31.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:86:f6:c3:b0:c9:f1:fd:d6:77:30:7a:64:dc:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 10:05:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:bc:b0:f8:f8:e8:e6:10:6e:88:a7:1d:2f:
30:f9:9d:53:e1:ae:57:f0:a5:33:89:5f:51:de:04:
62:9d:73:57:42:75:c7:89:69:b4:f7:2b:9f:77:88:
1c:ef:c5:bd:3c:0e:1b:9c:a9:93:02:e1:17:4f:40:
48:1c:5f:8a:4d:fd:09:79:2b:2b:29:5b:e3:d0:93:
2d:cf:20:eb:3d:a9:84:65:de:6f:8a:45:88:06:50:
3b:02:ab:d6:56:83:76:7f:27:1f:ab:06:c7:11:ff:
56:1e:b3:cf:19:2e:97:74:63:26:11:0c:09:a2:25:
58:74:1d:d8:b4:39:13:51:8b:dd:5f:bf:18:55:4c:
2c:a6:9f:14:39:5e:7c:42:7f:f0:c4:bf:1a:9f:0c:
18:11:94:fa:30:78:2c:3a:b5:ed:90:00:f9:66:58:
28:42:85:b9:1b:7a:db:a4:e8:40:68:81:94:26:ed:
68:af:e0:de:1a:6c:bf:bc:f7:47:77:66:f0:ba:7a:
98:7c:60:92:38:47:48:cd:63:97:f2:ec:21:11:13:
96:7d:ae:ce:47:8a:b6:62:6d:c3:f7:48:7c:0d:52:
63:68:25:81:9a:e7:55:e1:65:05:29:c8:3b:f4:40:
c9:31:1b:9a:3f:d4:a4:8a:c3:51:6e:c4:18:c5:d0:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.136.0.0/15
81.76.0.0/14
84.64.0.0/13
90.240.0.0/12
193.32.24.0/22
193.32.45.0/24
193.193.32.0/19
193.194.22.0-193.194.31.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5378
5388
6660
8576
Signature Algorithm: sha256WithRSAEncryption
5d:57:d0:ab:89:17:67:b8:f4:4b:8a:04:e5:f2:6b:ec:c2:61:
eb:f0:2d:6c:16:28:4b:e3:10:93:14:e0:5e:8e:ac:37:57:f7:
99:3e:66:d4:c6:03:a5:95:ff:90:1b:fc:ab:fe:5c:95:1b:5d:
46:f9:fd:74:8e:39:54:d8:eb:be:3b:be:08:3d:a1:8a:2a:39:
a4:e3:e7:91:a4:4b:f2:30:48:98:c2:74:f6:13:7b:c2:98:01:
d3:23:8e:35:7c:bf:54:43:1d:bc:c2:1a:7c:6d:2a:a9:a3:a6:
c6:1d:44:c4:d5:03:09:16:6f:25:52:14:e4:fb:90:9c:db:d7:
7e:1f:94:1e:a5:61:f7:47:0c:8a:de:38:0c:8d:86:24:ed:6d:
76:aa:55:f6:bc:56:84:47:4f:da:d3:a8:0e:93:92:9a:ec:fa:
8a:7e:aa:e5:4f:32:df:44:4f:ff:a5:82:52:fd:b9:99:31:69:
e8:29:ef:b0:0c:d2:ad:77:f9:6c:ea:3b:33:c8:d3:27:3d:c3:
ee:dc:0c:90:0a:8b:1a:80:64:91:94:97:ee:69:c3:bf:a6:4c:
62:fc:b2:d2:fc:6f:26:92:5f:71:1c:14:6a:e5:05:c2:e5:eb:
28:95:4e:e4:43:50:76:c5:22:4d:8d:a6:42:d5:42:88:10:8b:
99:07:69:0f
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZRKhvbDsMnx/dZ3MHpk3KxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTA5MTAwNTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg3NDZhNzZjZGE4MzY5MDA5ZDI4OTQxZWYxNTYyMzljNmE2M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP68sPj46OYQboinHS8w+Z1T4a5X
8KUziV9R3gRinXNXQnXHiWm09yufd4gc78W9PA4bnKmTAuEXT0BIHF+KTf0JeSsr
KVvj0JMtzyDrPamEZd5vikWIBlA7AqvWVoN2fycfqwbHEf9WHrPPGS6XdGMmEQwJ
oiVYdB3YtDkTUYvdX78YVUwspp8UOV58Qn/wxL8anwwYEZT6MHgsOrXtkAD5Zlgo
QoW5G3rbpOhAaIGUJu1or+DeGmy/vPdHd2bwunqYfGCSOEdIzWOX8uwhEROWfa7O
R4q2Ym3D90h8DVJjaCWBmudV4WUFKcg79EDJMRuaP9SkisNRbsQYxdDrQQIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFHqHRqds2oNpAJ0olB7xViOcamOhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzkxM2Ux
Mi1mNWVkLTQ2ZjQtOTgyYy01MmRlZGRkZWUzOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvOTEzZTEy
LWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8xL2VvZEdwMnphZzJrQW5TaVVI
dkZXSTV4cVk2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF
BwEHAQH/BD4wPDA6BAIAATA0AwMBPogDAwJRTAMDA1RAAwMEWvADBALBIBgDBADB
IC0DBAXBwSAwDAMEAcHCFgMEBcHCADAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIV
AgICFQwCAhoEAgIhgDANBgkqhkiG9w0BAQsFAAOCAQEAXVfQq4kXZ7j0S4oE5fJr
7MJh6/AtbBYoS+MQkxTgXo6sN1f3mT5m1MYDpZX/kBv8q/5clRtdRvn9dI45VNjr
vju+CD2hiio5pOPnkaRL8jBImMJ09hN7wpgB0yOONXy/VEMdvMIafG0qqaOmxh1E
xNUDCRZvJVIU5PuQnNvXfh+UHqVh90cMit44DI2GJO1tdqpV9rxWhEdP2tOoDpOS
muz6in6q5U8y30RP/6WCUv25mTFp6CnvsAzSrXf5bOo7M8jTJz3D7twMkAqLGoBk
kZSX7mnDv6ZMYvyy0vxvJpJfcRwUauUFwuXrKJVO5ENQdsUiTY2mQtVCiBCLmQdp
Dw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:15 2025 by rpki-client