Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.cer (raw, json)
Hash identifier: eqoZjVjSED9lLC4p2otUtXJS1HoytJL920qJOXGaPHM=
Subject key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274870682125E6174F6FC03E06E1AC98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.204.228.0/22
IP: 2a0b:4c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:70:68:21:25:e6:17:4f:6f:c0:3e:06:e1:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:9a:67:a8:91:a8:28:7f:2b:2c:87:59:dd:
d0:a6:00:6d:59:a2:02:99:95:24:ae:1a:e5:13:22:
2d:c9:0c:d4:44:fb:f5:98:b8:92:d5:1f:f4:46:30:
79:ce:6d:e9:68:93:11:94:72:71:0c:bf:ce:93:bc:
90:40:71:d9:ef:f4:c3:f2:a5:39:cc:6e:ef:d1:34:
1d:fe:c2:3e:23:74:39:c2:b5:4d:a1:2d:6e:40:28:
43:5b:fc:52:d8:0f:b3:36:a7:57:0e:17:9f:83:ca:
1d:ad:c8:42:ed:66:13:8b:9f:d1:ac:74:08:c9:36:
84:70:e0:bb:c8:9d:7a:f4:55:b3:7f:55:c6:39:1e:
85:c9:4b:f6:d7:d9:13:67:04:a7:3c:7e:eb:4d:ad:
a6:da:62:e7:79:34:87:13:84:0d:52:e8:fb:b9:f5:
48:8b:ec:40:0e:63:7d:d9:9d:e5:ad:34:97:d2:9c:
85:5a:9e:64:4b:04:4e:4a:87:43:18:e6:60:4a:a6:
bf:4d:21:9f:70:a0:06:65:20:97:93:93:78:73:3d:
c0:de:d5:1d:95:05:ec:cf:ae:8f:67:3c:58:7a:19:
7a:41:06:02:46:13:1e:06:85:c4:88:77:75:e6:5b:
17:29:48:de:52:b6:97:bb:b7:f7:c8:f7:18:0b:3a:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.228.0/22
IPv6:
2a0b:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:92:5d:05:b7:66:08:3f:61:ff:2b:c0:f4:35:59:67:0e:8c:
b3:24:85:92:2a:29:71:fa:26:a6:6e:01:99:f1:49:fe:6c:ce:
cf:ff:e0:7b:17:28:fb:ae:66:4d:00:85:6b:80:02:4e:19:27:
3b:d6:d8:49:1c:3a:77:89:02:21:50:a4:7e:df:6c:02:d6:78:
a2:b6:ab:f8:9a:d7:30:32:97:3e:95:c2:47:ff:f5:f1:2a:79:
77:40:8c:08:5d:4a:23:17:09:f8:32:8f:95:32:6c:d5:f9:16:
a5:a5:f4:11:62:a3:35:c1:91:c5:bb:79:ec:9d:77:58:7f:62:
40:b4:4c:47:7d:ae:2c:9c:9f:50:33:c3:f5:51:45:9d:2a:95:
f8:da:44:c6:46:3c:09:6f:95:51:12:96:ca:14:ea:82:b2:60:
b2:81:aa:ee:bf:de:a8:2c:94:21:14:23:fc:b3:e1:21:2f:15:
c7:f6:62:c2:19:16:cf:f0:0e:49:98:62:ca:ce:38:fd:bb:f8:
a1:7e:8b:3e:73:89:c8:c2:e5:ce:6b:48:1c:a7:c2:47:6a:02:
db:13:07:0f:ca:9f:b0:5c:d5:3d:c6:a2:48:89:61:b6:df:36:
45:84:a8:d6:0a:42:25:8e:4c:8d:19:51:57:15:df:5d:58:cf:
33:19:f0:0d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQnSHBoISXmF09vwD4G4ayYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjkyMDk0ZDY5MWRmNGE3YzM4ZjE2Yjc1NTU3ZTljMjZkNGFjNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDeaZ6iRqCh/KyyHWd3QpgBtWaIC
mZUkrhrlEyItyQzURPv1mLiS1R/0RjB5zm3paJMRlHJxDL/Ok7yQQHHZ7/TD8qU5
zG7v0TQd/sI+I3Q5wrVNoS1uQChDW/xS2A+zNqdXDhefg8odrchC7WYTi5/RrHQI
yTaEcOC7yJ169FWzf1XGOR6FyUv219kTZwSnPH7rTa2m2mLneTSHE4QNUuj7ufVI
i+xADmN92Z3lrTSX0pyFWp5kSwROSodDGOZgSqa/TSGfcKAGZSCXk5N4cz3A3tUd
lQXsz66PZzxYehl6QQYCRhMeBoXEiHd15lsXKUjeUraXu7f3yPcYCzrpNwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLKSCU1pHfSnw48Wt1VX6cJtSsaSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2U3Yjkz
Mi1mYzIxLTRhNjEtYWVmMC0xNWEwOTNlMmJiOGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvZTdiOTMy
LWZjMjEtNGE2MS1hZWYwLTE1YTA5M2UyYmI4Zi8xL3NwSUpUV2tkOUtmRGp4YTNW
VmZwd20xS3hwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuczkMA0EAgACMAcDBQMqCwTAMA0GCSqGSIb3
DQEBCwUAA4IBAQAlkl0Ft2YIP2H/K8D0NVlnDoyzJIWSKilx+iambgGZ8Un+bM7P
/+B7Fyj7rmZNAIVrgAJOGSc71thJHDp3iQIhUKR+32wC1niitqv4mtcwMpc+lcJH
//XxKnl3QIwIXUojFwn4Mo+VMmzV+RalpfQRYqM1wZHFu3nsnXdYf2JAtExHfa4s
nJ9QM8P1UUWdKpX42kTGRjwJb5VREpbKFOqCsmCygaruv96oLJQhFCP8s+EhLxXH
9mLCGRbP8A5JmGLKzjj9u/ihfos+c4nIwuXOa0gcp8JHagLbEwcPyp+wXNU9xqJI
iWG23zZFhKjWCkIljkyNGVFXFd9dWM8zGfAN
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:50 2025 by rpki-client