Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer (raw, json)
Hash identifier: nkvoEUKjo1tkWgEVas7/QCeVCQC0F4I0kridzAjDFxM=
Subject key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B3EF84005117B2E7DD8AA509A29C67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15941
AS: 20818
AS: 39251
AS: 47624
IP: 77.76.16.0/20
IP: 85.217.224.0/19
IP: 91.92.72.0 -- 91.92.103.255
IP: 91.206.138.0/23
IP: 91.207.190.0/23
IP: 91.223.66.0/24
IP: 91.245.192.0/24
IP: 185.111.212.0/22
IP: 185.163.140.0/22
IP: 185.225.84.0/22
IP: 185.229.252.0/22
IP: 193.37.238.0/24
IP: 194.169.223.0/24
IP: 194.169.230.0/24
IP: 194.169.237.0/24
IP: 194.169.242.0/24
IP: 195.238.84.0/23
IP: 212.70.140.0 -- 212.70.147.255
IP: 213.232.88.0/22
IP: 2a0b:f800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ef:84:00:51:17:b2:e7:dd:8a:a5:09:a2:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:80:23:85:ae:18:04:5f:03:14:9c:c0:00:
95:1e:2f:7d:67:51:8f:dc:e7:11:ff:41:7f:85:d2:
26:89:bb:22:30:d7:70:70:77:f5:10:78:00:3c:5c:
fd:a5:c4:3d:0d:49:25:ad:29:01:1c:b2:5c:10:75:
45:2d:9a:80:f8:2b:db:85:c7:12:e0:d9:ca:ff:17:
e3:ae:5b:05:cc:36:c5:7b:69:b1:4e:6b:7b:9b:19:
01:54:3b:28:4b:e6:0d:45:2b:83:fa:8c:d0:02:56:
45:b1:57:d6:54:93:e5:f8:32:40:a6:55:08:aa:ee:
60:dd:77:71:45:03:02:05:cd:cd:af:d2:e3:e5:99:
e0:56:b1:fa:5d:a0:91:96:77:1a:72:ec:42:e4:cb:
ac:b3:1f:38:da:b2:bd:03:97:43:82:2c:84:24:b4:
49:13:8c:b3:b1:4f:ce:56:3d:08:06:b1:d3:50:dd:
4f:e8:1d:30:88:35:6b:8f:ee:5f:39:f4:60:04:1e:
10:f9:dc:08:a6:76:41:06:40:82:ac:02:ea:8c:63:
65:48:13:91:6f:c7:53:b6:1d:04:99:f7:8d:39:12:
76:bc:e5:c8:75:04:9c:07:81:f5:37:c9:15:3a:cc:
e7:9c:34:7c:96:b0:a3:fa:b5:60:db:2f:2a:ca:d4:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.16.0/20
85.217.224.0/19
91.92.72.0-91.92.103.255
91.206.138.0/23
91.207.190.0/23
91.223.66.0/24
91.245.192.0/24
185.111.212.0/22
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
195.238.84.0/23
212.70.140.0-212.70.147.255
213.232.88.0/22
IPv6:
2a0b:f800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15941
20818
39251
47624
Signature Algorithm: sha256WithRSAEncryption
41:c7:97:be:ef:b2:b5:c4:3c:ee:5d:ec:19:1c:51:48:82:01:
8f:21:55:46:34:9f:d2:24:cb:31:f2:bd:42:71:79:f5:18:19:
a8:02:4a:b3:8a:41:f1:43:0b:85:04:78:e4:bd:74:25:54:0b:
88:25:28:d0:95:8d:d2:0f:09:26:10:8f:4c:f5:88:0e:e4:c5:
2c:77:be:99:37:3c:9f:36:89:30:20:a4:15:be:de:f6:41:a2:
6a:62:ec:8b:4a:0b:9d:ca:c6:07:43:a6:3c:9d:07:a4:51:b7:
69:c8:b2:99:40:0a:63:39:65:c4:29:88:8c:23:a7:4f:1c:31:
b1:04:bb:67:f0:39:e8:2b:4c:36:dc:79:f0:33:1a:bb:4c:1b:
cf:fb:4b:8d:6d:a0:54:4d:ba:90:52:c1:5c:a1:b6:a6:b7:12:
2e:56:42:cb:1d:46:0e:2d:42:86:eb:0e:d4:2e:86:d6:55:ec:
53:9b:63:d5:2f:11:cd:fd:8c:3e:0b:74:6e:46:a3:e6:41:7f:
03:4e:52:5e:f0:4d:83:a0:1e:f6:97:f9:77:5f:55:0a:34:45:
42:79:41:04:80:d1:9e:de:72:f3:fd:9d:28:0e:28:29:7b:e0:
5c:36:45:36:4f:ad:cc:1b:7a:0f:3c:fd:24:91:ea:df:9a:16:
2a:dc:7d:a8
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgISAZQns++EAFEXsufdiqUJopxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzFmNzIxYjdiN2U2ZDA0OWZiZmU1MjBlMWNhODljMWNhMjU2ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+AI4WuGARfAxScwACVHi99Z1GP
3OcR/0F/hdImibsiMNdwcHf1EHgAPFz9pcQ9DUklrSkBHLJcEHVFLZqA+CvbhccS
4NnK/xfjrlsFzDbFe2mxTmt7mxkBVDsoS+YNRSuD+ozQAlZFsVfWVJPl+DJAplUI
qu5g3XdxRQMCBc3Nr9Lj5ZngVrH6XaCRlncacuxC5Mussx842rK9A5dDgiyEJLRJ
E4yzsU/OVj0IBrHTUN1P6B0wiDVrj+5fOfRgBB4Q+dwIpnZBBkCCrALqjGNlSBOR
b8dTth0EmfeNORJ2vOXIdQScB4H1N8kVOsznnDR8lrCj+rVg2y8qytSN5QIDAQAB
o4IDPTCCAzkwHQYDVR0OBBYEFKwfcht7fm0En7/lIOHKicHKJWgTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzU2ZDI2
Ny0xYzQzLTQ3YzgtYWZiMi02NGQyOWM4NmJmM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTZkMjY3
LTFjNDMtNDdjOC1hZmIyLTY0ZDI5Yzg2YmYzZS8xL3JCOXlHM3QtYlFTZnYtVWc0
Y3FKd2NvbGFCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGuBggrBgEF
BQcBBwEB/wSBnjCBmzCBiQQCAAEwgYIDBARNTBADBAVV2eAwDAMEA1tcSAMEA1tc
YAMEAVvOigMEAVvPvgMEAFvfQgMEAFv1wAMEArlv1AMEArmjjAMEArnhVAMEArnl
/AMEAMEl7gMEAMKp3wMEAMKp5gMEAMKp7QMEAMKp8gMEAcPuVDAMAwQC1EaMAwQC
1EaQAwQC1ehYMA0EAgACMAcDBQMqC/gAMCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC
Aj5FAgJRUgIDAJlTAgMAuggwDQYJKoZIhvcNAQELBQADggEBAEHHl77vsrXEPO5d
7BkcUUiCAY8hVUY0n9IkyzHyvUJxefUYGagCSrOKQfFDC4UEeOS9dCVUC4glKNCV
jdIPCSYQj0z1iA7kxSx3vpk3PJ82iTAgpBW+3vZBompi7ItKC53KxgdDpjydB6RR
t2nIsplACmM5ZcQpiIwjp08cMbEEu2fwOegrTDbcefAzGrtMG8/7S41toFRNupBS
wVyhtqa3Ei5WQssdRg4tQobrDtQuhtZV7FObY9UvEc39jD4LdG5Go+ZBfwNOUl7w
TYOgHvaX+XdfVQo0RUJ5QQSA0Z7ecvP9nSgOKCl74Fw2RTZPrcwbeg88/SSR6t+a
Fircfag=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:23 2025 by rpki-client