Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.cer (raw, json)
Hash identifier: dPLQKDpILp61YxN6lVoEO+LPrcCXZQxJQ4FBuW2YEO8=
Subject key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068184028283E2259BB84968A0E4B81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25353
IP: 46.235.56.0/21
IP: 81.201.192.0/20
IP: 185.183.188.0/22
IP: 2a03:2600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:18:40:28:28:3e:22:59:bb:84:96:8a:0e:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:be:67:b5:42:7e:54:66:cb:dc:4d:71:da:
3b:10:c5:49:aa:f1:6b:cc:89:cc:9a:53:e7:11:30:
f8:75:5e:03:fa:13:01:9c:77:56:d5:40:3e:ad:22:
25:3b:24:66:0f:0e:cf:23:a3:95:f5:dd:ce:ed:16:
2f:9a:33:b7:4c:2b:b5:7d:86:23:c9:28:e7:c4:56:
09:38:14:47:5f:a5:76:1e:aa:88:0a:8f:e7:eb:6c:
7b:01:34:fe:5e:9c:fc:53:a4:a0:72:5e:b9:d2:af:
c3:70:09:1b:73:d8:58:2f:7b:17:3a:aa:ae:80:b0:
a2:3e:0b:e7:73:bc:f6:36:37:46:dc:91:9f:de:16:
79:db:85:b0:af:4f:18:28:bd:44:80:ea:63:89:af:
6e:13:13:f3:d4:74:7c:bc:a9:81:d2:dd:b3:8a:5c:
37:d5:ec:06:ec:8f:cb:92:b9:d0:e4:0b:68:52:41:
c0:7a:a4:4d:b2:8e:3f:2e:ae:98:40:2b:10:5b:a2:
eb:29:72:de:ec:db:41:7a:90:11:f9:8a:cc:88:12:
08:32:88:fd:c2:d0:80:91:e5:25:5a:07:e7:9f:45:
78:d5:c8:dd:61:fb:16:5c:40:79:0d:25:8e:67:ff:
f6:e6:e3:e9:18:af:f6:dc:ad:63:7d:5e:94:c7:e0:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.56.0/21
81.201.192.0/20
185.183.188.0/22
IPv6:
2a03:2600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25353
Signature Algorithm: sha256WithRSAEncryption
3c:d3:c1:6e:55:d7:02:2a:56:ee:6c:7e:1d:e1:ff:22:3f:d6:
65:3b:bd:39:95:6d:ff:20:b9:c7:8c:23:aa:d2:ae:1a:72:65:
fa:b2:b9:0c:ee:27:3b:88:79:b8:30:95:dc:20:a7:95:56:ce:
70:61:4a:2d:81:5b:fb:4d:88:79:a8:c5:05:b0:ab:39:9c:d3:
11:47:67:61:63:91:bf:7f:7c:f9:09:5a:23:ae:ac:2d:71:bc:
a4:3e:95:be:18:d9:d3:e4:7b:d1:86:ae:4f:b1:09:cd:dc:59:
5a:e2:26:86:f3:24:ca:3b:44:79:89:82:48:49:26:5a:33:21:
18:b1:eb:8c:9a:42:33:30:da:9c:7b:4d:92:cb:bc:5a:ea:40:
cd:dd:07:fb:23:79:ce:96:1f:d8:7f:28:51:da:59:81:be:40:
e9:b9:cc:dc:30:5a:ec:dd:17:b3:d3:f4:60:67:35:4c:31:ea:
c5:fb:73:ce:01:59:7c:ee:41:15:98:11:4f:80:87:72:38:d4:
c2:f6:41:8f:05:b0:32:be:02:37:2f:26:c3:bd:0a:a2:e9:30:
2b:7d:dc:22:ae:56:0b:93:9e:6a:4a:a4:4f:8b:93:3c:d1:97:
9d:bc:86:e5:13:aa:ac:e1:23:d2:01:25:db:d8:fa:b6:d7:f6:
fb:a2:86:b2
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQgaBhAKCg+Ilm7hJaKDkuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTQ0Y2EyZDk5MmQ3Nzg1ODAwYmRkNTUyNGQzZTExMzgzZDlmMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPy+Z7VCflRmy9xNcdo7EMVJqvFr
zInMmlPnETD4dV4D+hMBnHdW1UA+rSIlOyRmDw7PI6OV9d3O7RYvmjO3TCu1fYYj
ySjnxFYJOBRHX6V2HqqICo/n62x7ATT+Xpz8U6Sgcl650q/DcAkbc9hYL3sXOqqu
gLCiPgvnc7z2NjdG3JGf3hZ524Wwr08YKL1EgOpjia9uExPz1HR8vKmB0t2zilw3
1ewG7I/LkrnQ5AtoUkHAeqRNso4/Lq6YQCsQW6LrKXLe7NtBepAR+YrMiBIIMoj9
wtCAkeUlWgfnn0V41cjdYfsWXEB5DSWOZ//25uPpGK/23K1jfV6Ux+Av+wIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2IzNGEz
My0wNjJiLTRiNzAtYmE1MS0wMmExMmI4NjE4MGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYjM0YTMz
LTA2MmItNGI3MC1iYTUxLTAyYTEyYjg2MTgwZC8xL3VVVEtMWmt0ZDRXQUM5MVZK
TlBoRTRQWjhkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDLus4AwQEUcnAAwQCube8MA0EAgACMAcDBQAq
AyYAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmMJMA0GCSqGSIb3DQEBCwUAA4IB
AQA808FuVdcCKlbubH4d4f8iP9ZlO705lW3/ILnHjCOq0q4acmX6srkM7ic7iHm4
MJXcIKeVVs5wYUotgVv7TYh5qMUFsKs5nNMRR2dhY5G/f3z5CVojrqwtcbykPpW+
GNnT5HvRhq5PsQnN3Fla4iaG8yTKO0R5iYJISSZaMyEYseuMmkIzMNqce02Sy7xa
6kDN3Qf7I3nOlh/YfyhR2lmBvkDpuczcMFrs3Rez0/RgZzVMMerF+3POAVl87kEV
mBFPgIdyONTC9kGPBbAyvgI3LybDvQqi6TArfdwirlYLk55qSqRPi5M80ZedvIbl
E6qs4SPSASXb2Pq21/b7ooay
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:48 2025 by rpki-client