Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
File: itJAYD7G681i9y1G8dwAy34fCy4.cer (raw, json)
Hash identifier: L6w+Vrr4TX2PvIqw4+MZIod7/hlP+E91CdW9JViFPec=
Subject key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274716C6479D2ACB0E44668DD1879352
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3330
AS: 21013
AS: 61108
IP: 62.249.64.0/18
IP: 80.243.160.0/20
IP: 85.31.0.0/19
IP: 88.218.52.0/22
IP: 185.91.80.0/22
IP: 185.92.100.0/22
IP: 185.163.50.0/24
IP: 185.226.40.0/22
IP: 193.186.161.0/24
IP: 194.112.128.0/17
IP: 212.52.192.0/19
IP: 2a02:5e0::/29
IP: 2a02:940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:16:c6:47:9d:2a:cb:0e:44:66:8d:d1:87:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:cd:59:6b:f3:87:b2:c8:2b:52:a7:82:45:
c2:6a:67:ec:a4:a2:97:d2:10:01:51:80:72:03:55:
7d:d7:e6:a7:46:88:b6:b6:09:e7:fa:2d:b6:67:85:
c3:38:6d:0b:13:a1:6d:c0:16:b5:0a:f3:94:bb:9f:
5c:56:97:80:60:b2:29:ae:2c:2c:10:2d:45:d4:a5:
1c:69:b5:24:54:8a:6e:4b:56:2a:6c:67:fb:b8:5f:
b9:f6:f4:ac:a0:f7:73:a2:c0:f6:d5:6a:c3:81:0f:
ac:1d:a5:17:4c:f6:a8:cf:24:cb:e8:84:dc:1e:19:
65:58:3c:54:34:d1:1a:05:6b:c9:8d:37:cb:94:94:
60:a5:4c:8a:cf:9e:89:eb:22:48:dc:bf:72:1a:6b:
32:98:8a:d8:03:f9:50:d6:34:2f:40:43:58:7c:76:
30:67:ae:2d:dd:c2:ac:3f:d6:ef:38:48:f5:1f:a2:
cd:f9:05:44:51:ac:c1:31:c5:44:3c:6e:5d:57:3a:
64:28:6a:b4:f8:61:4c:7c:55:a9:a3:c2:d4:10:fd:
d6:38:47:68:15:8e:04:c5:44:5f:60:f4:06:f8:29:
99:01:ab:99:35:31:40:8b:5a:28:1a:f3:30:fa:42:
cc:e1:9f:dc:a3:71:0e:4f:a4:8e:1f:63:89:a0:fc:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.64.0/18
80.243.160.0/20
85.31.0.0/19
88.218.52.0/22
185.91.80.0/22
185.92.100.0/22
185.163.50.0/24
185.226.40.0/22
193.186.161.0/24
194.112.128.0/17
212.52.192.0/19
IPv6:
2a02:5e0::/29
2a02:940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3330
21013
61108
Signature Algorithm: sha256WithRSAEncryption
56:16:c5:f1:2e:b0:12:54:77:83:61:66:73:b3:31:9a:77:14:
0b:0d:f4:a3:83:45:c6:a6:56:69:b8:fd:c8:cf:89:e7:b9:e6:
e7:c3:9d:1f:5b:3c:ef:03:a2:6e:9d:da:b5:bc:71:75:4e:82:
15:b3:9c:f2:af:5e:08:ae:57:c1:62:0a:ec:ae:9b:dc:55:ce:
2a:1b:98:ab:ff:d5:44:36:24:18:6b:13:7e:65:b3:f2:29:4e:
6a:8d:c7:ab:3a:be:b0:ec:dc:b1:bc:a9:8d:85:86:c8:b9:75:
87:6b:18:50:6c:cc:af:67:47:1c:6a:9d:20:b3:46:54:e5:07:
e6:0e:c6:3e:05:be:6e:1d:3c:2d:ef:0e:22:bd:da:90:98:8e:
e8:dc:50:f9:b2:be:22:f6:d9:e6:9d:ce:1c:0c:16:39:e4:42:
36:91:c7:7a:f9:78:96:f8:4b:cb:94:a1:06:69:a0:f4:a0:39:
fb:18:5a:65:13:2c:79:c3:77:30:6a:65:b7:80:6c:ff:ad:08:
73:5d:05:e6:17:a2:37:56:c1:74:a5:b5:1f:db:67:1a:96:8d:
27:3c:51:29:00:76:4e:ff:cd:55:09:fe:3f:3f:78:51:05:9f:
0f:7c:17:f9:a7:e1:3e:db:3b:55:dd:0d:f2:1c:4a:3f:2b:1c:
06:e0:b5:79
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISAZQnRxbGR50qyw5EZo3Rh5NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQyNDA2MDNlYzZlYmNkNjJmNzJkNDZmMWRjMDBjYjdlMWYwYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8HNWWvzh7LIK1KngkXCamfspKKX
0hABUYByA1V91+anRoi2tgnn+i22Z4XDOG0LE6FtwBa1CvOUu59cVpeAYLIpriws
EC1F1KUcabUkVIpuS1YqbGf7uF+59vSsoPdzosD21WrDgQ+sHaUXTPaozyTL6ITc
HhllWDxUNNEaBWvJjTfLlJRgpUyKz56J6yJI3L9yGmsymIrYA/lQ1jQvQENYfHYw
Z64t3cKsP9bvOEj1H6LN+QVEUazBMcVEPG5dVzpkKGq0+GFMfFWpo8LUEP3WOEdo
FY4ExURfYPQG+CmZAauZNTFAi1ooGvMw+kLM4Z/co3EOT6SOH2OJoPwVQwIDAQAB
o4IC+jCCAvYwHQYDVR0OBBYEFIrSQGA+xuvNYvctRvHcAMt+HwsuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzQyNTE0
OS05YzY4LTQxZmItODAzNS1kNzZjOGM3Mzk4NjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvNDI1MTQ5
LTljNjgtNDFmYi04MDM1LWQ3NmM4YzczOTg2MS8xL2l0SkFZRDdHNjgxaTl5MUc4
ZHdBeTM0ZkN5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF
BwEHAQH/BGIwYDBIBAIAATBCAwQGPvlAAwQEUPOgAwQFVR8AAwQCWNo0AwQCuVtQ
AwQCuVxkAwQAuaMyAwQCueIoAwQAwbqhAwQHwnCAAwQF1DTAMBQEAgACMA4DBQMq
AgXgAwUDKgIJQDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgINAgICUhUCAwDutDAN
BgkqhkiG9w0BAQsFAAOCAQEAVhbF8S6wElR3g2Fmc7MxmncUCw30o4NFxqZWabj9
yM+J57nm58OdH1s87wOibp3atbxxdU6CFbOc8q9eCK5XwWIK7K6b3FXOKhuYq//V
RDYkGGsTfmWz8ilOao3Hqzq+sOzcsbypjYWGyLl1h2sYUGzMr2dHHGqdILNGVOUH
5g7GPgW+bh08Le8OIr3akJiO6NxQ+bK+IvbZ5p3OHAwWOeRCNpHHevl4lvhLy5Sh
Bmmg9KA5+xhaZRMsecN3MGplt4Bs/60Ic10F5heiN1bBdKW1H9tnGpaNJzxRKQB2
Tv/NVQn+Pz94UQWfD3wX+afhPts7Vd0N8hxKPyscBuC1eQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:07 2025 by rpki-client