Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer (raw, json)
Hash identifier: /uCG32K/w4fyj9MVy7orqfB60LFBLp39OId+XMfunfg=
Subject key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D3BEA6E34070EB144A4BE6A35293
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213145
IP: 185.14.172.0/22
IP: 185.117.99.0/24
IP: 185.117.120.0/22
IP: 188.125.171.0 -- 188.125.173.255
IP: 188.125.175.0/24
IP: 2a10:26c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d3:be:a6:e3:40:70:eb:14:4a:4b:e6:a3:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:a4:4e:5e:87:48:e0:72:51:be:cc:c9:d6:
3e:7f:cc:ec:7d:47:0f:b7:92:90:25:00:ef:a5:89:
f2:97:01:43:63:89:e5:e2:7c:e4:dd:4e:a2:9c:10:
29:4f:ad:3e:9a:77:77:b7:85:9b:47:01:a0:5e:f6:
e1:0d:e1:28:8b:25:8d:fe:94:ff:5b:82:a7:90:10:
ca:c3:97:f8:6a:64:42:74:d4:59:e1:3e:2f:3e:0c:
ae:6d:79:b9:a4:8d:18:20:4a:6f:16:71:35:85:c2:
d8:c0:68:06:80:cf:9e:e5:0a:2d:cd:34:80:ca:35:
6f:e0:8d:fd:5f:38:83:fe:83:1c:ff:39:cf:3e:5f:
9f:0b:fd:b7:a3:7f:f2:41:f8:ac:f4:cd:7e:35:b0:
2b:7f:a2:f5:45:43:46:bd:95:c2:05:f1:2b:5b:b3:
01:04:1d:0b:14:ce:66:93:92:f6:d4:87:69:00:77:
2a:89:35:64:19:b1:79:4a:6b:d1:3f:87:ea:5c:98:
e5:21:70:44:24:30:9a:d5:60:c8:b4:e6:5f:3b:dd:
f5:8a:83:e6:b9:13:42:28:98:65:51:ed:0e:63:ab:
9d:4b:19:15:bf:77:cb:66:ee:7d:a8:10:68:72:8d:
71:9e:db:eb:3d:64:d3:ea:eb:bc:3f:6c:92:8f:33:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/22
185.117.99.0/24
185.117.120.0/22
188.125.171.0-188.125.173.255
188.125.175.0/24
IPv6:
2a10:26c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213145
Signature Algorithm: sha256WithRSAEncryption
6e:9c:15:32:5a:67:ce:55:45:19:df:c5:6d:5e:01:23:69:b4:
97:ef:ae:eb:ca:59:9d:07:c2:da:3f:fd:ef:09:fe:42:30:54:
01:63:cb:4d:e7:ef:ba:ec:e8:61:93:9c:4d:88:da:54:c1:36:
3b:27:4c:da:22:d6:d9:20:43:95:cb:66:e8:aa:91:d4:64:54:
ab:5d:77:4f:6b:d2:60:aa:9b:07:b4:5d:75:76:c5:9e:60:6c:
60:8c:dd:05:fd:70:2b:10:8d:e2:f4:a5:a9:2c:36:47:06:7c:
4c:eb:56:79:29:c3:8a:61:80:11:a4:a1:ec:97:b2:b7:eb:6d:
5f:d5:55:e2:ab:a1:4f:89:e0:a1:a9:8c:90:45:65:d3:73:54:
5a:d9:36:96:35:63:86:a9:90:d1:74:31:7f:ba:cb:5b:43:0b:
ab:91:73:9e:b0:a6:c9:b2:7f:f7:ab:9d:1d:76:7c:a1:d1:f3:
42:68:47:33:24:68:11:19:8a:38:48:a2:dd:f4:f5:1b:02:91:
87:e3:e9:15:90:af:46:a6:17:23:22:9c:df:9c:11:e3:0c:65:
6d:f8:7e:49:bb:08:e2:0b:88:82:02:96:ef:54:f0:ac:6d:e7:
f1:b7:4a:99:b6:bc:c4:5e:f7:cf:ab:b2:5a:0d:3d:04:8a:5d:
01:8b:77:ef
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAZQj1tO+puNAcOsUSkvmo1KTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTllNjg4N2VhNzU3MmE2NDExMzA2Yzg3YjBjYzA4OTM5N2E2MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOGkTl6HSOByUb7MydY+f8zsfUcP
t5KQJQDvpYnylwFDY4nl4nzk3U6inBApT60+mnd3t4WbRwGgXvbhDeEoiyWN/pT/
W4KnkBDKw5f4amRCdNRZ4T4vPgyubXm5pI0YIEpvFnE1hcLYwGgGgM+e5QotzTSA
yjVv4I39XziD/oMc/znPPl+fC/23o3/yQfis9M1+NbArf6L1RUNGvZXCBfErW7MB
BB0LFM5mk5L21IdpAHcqiTVkGbF5SmvRP4fqXJjlIXBEJDCa1WDItOZfO931ioPm
uRNCKJhlUe0OY6udSxkVv3fLZu59qBBoco1xntvrPWTT6uu8P2ySjzNuRQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFJ6eaIfqdXKmQRMGyHsMwIk5emNUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2UyYWJh
ZC01OGZhLTRjZWQtODY1MC1lYzUwOGRlYzc3OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZTJhYmFk
LTU4ZmEtNGNlZC04NjUwLWVjNTA4ZGVjNzc5My8xL25wNW9oLXAxY3FaQkV3Ykll
d3pBaVRsNlkxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF
BwEHAQH/BD8wPTAsBAIAATAmAwQCuQ6sAwQAuXVjAwQCuXV4MAwDBAC8fasDBAG8
fawDBAC8fa8wDQQCAAIwBwMFACoQJsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
A0CZMA0GCSqGSIb3DQEBCwUAA4IBAQBunBUyWmfOVUUZ38VtXgEjabSX767rylmd
B8LaP/3vCf5CMFQBY8tN5++67Ohhk5xNiNpUwTY7J0zaItbZIEOVy2boqpHUZFSr
XXdPa9JgqpsHtF11dsWeYGxgjN0F/XArEI3i9KWpLDZHBnxM61Z5KcOKYYARpKHs
l7K3621f1VXiq6FPieChqYyQRWXTc1Ra2TaWNWOGqZDRdDF/ustbQwurkXOesKbJ
sn/3q50ddnyh0fNCaEczJGgRGYo4SKLd9PUbApGH4+kVkK9GphcjIpzfnBHjDGVt
+H5JuwjiC4iCApbvVPCsbefxt0qZtrzEXvfPq7JaDT0Eil0Bi3fv
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:00 2025 by rpki-client