Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer (raw, json)
Hash identifier: fjI3YCZWt9baFWSvxaZ3k08TEdiZRek2ibkKytEcon0=
Subject key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3F1B2DB3CBC9F155945267C7232FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3331
IP: 185.106.164.0/22
IP: 2a04:ea40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f1:b2:db:3c:bc:9f:15:59:45:26:7c:72:32:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:34:da:1e:7b:bc:1e:02:a0:12:b9:3a:9d:
8b:b0:4b:f9:12:4b:28:70:eb:d4:79:d9:1c:e7:50:
3a:c1:27:3a:6b:db:ce:ae:00:6a:66:96:53:e9:96:
2c:65:5c:e8:5f:c9:89:e2:5f:6f:2e:e7:99:72:44:
24:24:ff:e1:c0:fc:94:eb:5d:8c:e5:2b:d0:9c:74:
d3:db:36:af:54:a3:9b:ac:43:48:7f:ac:6e:31:d9:
ec:be:e1:aa:3e:6f:c3:dd:1b:eb:5b:cd:02:74:61:
39:f6:b5:55:90:b9:e3:e2:c6:23:4f:95:30:da:f9:
b5:1c:46:93:d9:d4:95:6b:90:72:44:8a:20:70:08:
fe:d8:a7:a3:ab:5c:31:13:c3:b1:75:2a:92:f7:d1:
d2:f5:71:4c:c8:d0:c0:62:1c:53:46:5a:ab:a7:d9:
5f:c3:a7:ec:18:fa:94:3c:7a:d4:18:03:7a:20:99:
63:ac:63:0a:e4:b4:c0:c7:dc:b3:2f:0a:45:55:cb:
e8:b7:78:24:51:90:0e:66:7b:f2:39:2c:19:9d:ab:
ac:a9:c9:5c:9e:7f:95:71:a4:46:81:72:ef:cb:84:
a0:fc:35:62:f9:d2:41:8f:bc:06:47:77:5d:94:5f:
be:d3:1b:68:d4:6e:70:ba:a1:13:e8:9a:95:57:95:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.164.0/22
IPv6:
2a04:ea40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3331
Signature Algorithm: sha256WithRSAEncryption
02:fa:9f:d6:b7:e1:b2:a6:78:68:24:f0:30:a4:bf:eb:94:b1:
61:2a:9d:a1:b1:99:6f:b8:f0:b5:ab:6f:37:6a:c6:00:57:19:
68:cf:39:1a:f4:2b:ae:06:40:a3:30:7d:2c:a0:fe:07:89:ff:
4b:38:46:95:a8:8a:30:f3:d7:15:5f:88:c5:0e:56:f4:21:60:
ff:2d:90:3b:cb:10:df:29:db:a5:4f:a2:33:1a:32:a3:1e:db:
77:8b:f4:a7:af:a1:2e:75:65:5e:99:e9:37:af:d8:bb:48:23:
35:04:78:eb:4a:a7:56:18:75:24:19:5f:75:3a:27:bf:49:97:
4a:ee:46:88:e7:e1:84:53:3f:72:62:ba:71:c4:e1:0e:e5:fc:
6f:d7:fd:65:2a:c6:1e:15:6d:ec:8a:c2:3f:d8:b4:38:1f:c2:
c3:0f:53:f8:62:8c:eb:d2:78:9f:6a:30:2f:db:4f:39:b5:1a:
db:cb:9f:a1:c0:84:54:2c:83:2d:ef:d8:60:ee:24:a5:65:93:
26:61:96:b2:88:ec:45:b9:0c:42:a8:28:ed:b4:26:7b:93:12:
24:b4:69:24:06:0d:aa:38:2a:34:86:86:2d:fd:c1:7a:ac:7a:
dc:bc:d8:aa:47:83:d6:96:17:fa:d1:ea:9d:c9:da:e4:9f:51:
e6:da:a9:82
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQks/Gy2zy8nxVZRSZ8cjL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDIzYzMzMGViZTg1M2UxMjViMGMxYWQyYjE2ZDc5ZDI1ZTRmM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ik02h57vB4CoBK5Op2LsEv5Ekso
cOvUedkc51A6wSc6a9vOrgBqZpZT6ZYsZVzoX8mJ4l9vLueZckQkJP/hwPyU612M
5SvQnHTT2zavVKObrENIf6xuMdnsvuGqPm/D3RvrW80CdGE59rVVkLnj4sYjT5Uw
2vm1HEaT2dSVa5ByRIogcAj+2Kejq1wxE8OxdSqS99HS9XFMyNDAYhxTRlqrp9lf
w6fsGPqUPHrUGAN6IJljrGMK5LTAx9yzLwpFVcvot3gkUZAOZnvyOSwZnausqclc
nn+VcaRGgXLvy4Sg/DVi+dJBj7wGR3ddlF++0xto1G5wuqET6JqVV5UQUwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFJ0jwzDr6FPhJbDBrSsW150l5PP4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzBhOTRl
NC0wMDFjLTRkMTUtOTFlOS00N2E0MTI4MTVmYjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE5NGU0
LTAwMWMtNGQxNS05MWU5LTQ3YTQxMjgxNWZiNC8xL25TUERNT3ZvVS1FbHNNR3RL
eGJYblNYazhfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWqkMA0EAgACMAcDBQMqBOpAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAg0DMA0GCSqGSIb3DQEBCwUAA4IBAQAC+p/Wt+Gypnho
JPAwpL/rlLFhKp2hsZlvuPC1q283asYAVxlozzka9CuuBkCjMH0soP4Hif9LOEaV
qIow89cVX4jFDlb0IWD/LZA7yxDfKdulT6IzGjKjHtt3i/Snr6EudWVemek3r9i7
SCM1BHjrSqdWGHUkGV91Oie/SZdK7kaI5+GEUz9yYrpxxOEO5fxv1/1lKsYeFW3s
isI/2LQ4H8LDD1P4Yozr0nifajAv2085tRrby5+hwIRULIMt79hg7iSlZZMmYZay
iOxFuQxCqCjttCZ7kxIktGkkBg2qOCo0hoYt/cF6rHrcvNiqR4PWlhf60eqdydrk
n1Hm2qmC
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:53 2025 by rpki-client