Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer (raw, json)
Hash identifier: eq/3pMU0I9aKejDlTra+I+aqLs2IdEkMIFVUZHG5lss=
Subject key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1CFD509990BE71238340757BED18B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15743
AS: 205831
IP: 37.131.240.0/21
IP: 62.48.64.0/19
IP: 185.210.208.0/22
IP: 193.35.198.0/23
IP: 193.35.218.0/23
IP: 193.98.1.0/24
IP: 217.26.224.0/21
IP: 2a00:e68::/29
IP: 2a0b:2c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cf:d5:09:99:0b:e7:12:38:34:07:57:be:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc127864cd43048550ed1699c584b5c14d80e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:99:b9:61:a4:2c:c0:95:c5:11:09:90:a8:
9b:b3:5f:a5:bc:34:55:ae:f1:46:b6:c6:e3:9a:90:
a7:4d:44:87:d7:e7:0a:2f:9d:17:c6:59:f9:21:e2:
97:46:32:2f:0e:04:70:54:30:68:ee:ff:3f:ab:d0:
0a:2c:ab:5c:a8:7e:c6:b6:ae:db:c7:ae:a5:22:91:
87:6e:23:a2:4f:3d:ef:ce:91:a1:4c:99:ce:8e:fa:
37:91:1a:b3:4f:ca:47:ab:bd:48:87:5a:9e:28:8a:
17:b0:f2:eb:e4:53:d0:c8:07:7e:dd:1f:65:c7:6e:
46:c5:bb:1a:a0:50:c0:92:e4:3b:5e:9f:89:c5:cc:
2e:81:b0:ec:94:ec:58:0f:79:91:44:08:d3:92:26:
b5:23:4d:eb:8a:e6:e8:b1:5d:e1:d3:96:3e:42:d4:
aa:b1:47:d5:5b:2b:d1:ed:4d:cc:4a:85:c1:b1:bd:
d5:0f:76:0d:7f:a5:c0:a1:a1:94:74:03:5b:0d:5e:
2c:bb:e7:e1:e5:42:b2:b8:69:79:fb:96:76:26:af:
21:3d:38:94:37:2d:ae:da:1d:3b:f4:08:ad:b8:28:
fe:b5:83:17:dd:5a:34:88:42:c2:f1:1c:69:19:28:
70:9a:c1:31:c3:91:c3:a6:2f:b1:92:59:0c:6d:11:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.240.0/21
62.48.64.0/19
185.210.208.0/22
193.35.198.0/23
193.35.218.0/23
193.98.1.0/24
217.26.224.0/21
IPv6:
2a00:e68::/29
2a0b:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15743
205831
Signature Algorithm: sha256WithRSAEncryption
a9:eb:9d:c3:fb:8b:1f:06:44:09:8a:7d:64:a4:5f:57:96:ab:
01:58:6a:0b:f6:7e:9a:38:c6:18:95:05:07:c0:86:3b:0b:b3:
99:3f:5d:4a:44:fd:e5:73:a4:7e:d0:c1:e6:ac:a6:3c:45:a9:
00:81:24:c2:e2:7f:0d:fb:b2:43:47:95:c9:c9:ee:32:e7:e9:
62:26:35:11:3d:16:f6:d9:aa:0e:f5:bd:d7:8d:c0:55:b4:fd:
09:63:10:c7:9a:86:fb:49:aa:cd:14:e4:d3:57:e7:a2:f2:f4:
bb:71:cb:5e:7c:8a:00:fa:da:8a:ad:8e:32:2a:10:a4:fd:87:
8d:7c:0b:fa:6d:9b:8f:ea:7d:db:b9:29:86:76:70:3e:26:bd:
ee:64:21:6b:1d:be:b0:7a:a7:25:a6:2b:61:9c:21:8c:a7:17:
85:ed:91:aa:c6:4a:9a:82:0f:11:7b:46:d5:79:ef:5e:34:7a:
9a:f6:f1:c0:4a:35:d2:80:cc:bc:6a:04:00:d6:6a:42:20:76:
c9:ae:9a:93:34:e1:e9:28:a5:8a:43:0c:fc:74:e2:20:99:e9:
ae:b6:b5:a7:50:4f:5c:b5:f4:57:32:1d:5b:83:7d:42:21:29:
54:06:cc:3e:db:db:0b:c5:bf:4f:15:2d:2b:a1:9a:3c:89:2a:
2a:38:42:bc
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZQhsc/VCZkL5xI4NAdXvtGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzEyNzg2NGNkNDMwNDg1NTBlZDE2OTljNTg0YjVjMTRkODBlMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOZuWGkLMCVxREJkKibs1+lvDRV
rvFGtsbjmpCnTUSH1+cKL50Xxln5IeKXRjIvDgRwVDBo7v8/q9AKLKtcqH7Gtq7b
x66lIpGHbiOiTz3vzpGhTJnOjvo3kRqzT8pHq71Ih1qeKIoXsPLr5FPQyAd+3R9l
x25GxbsaoFDAkuQ7Xp+JxcwugbDslOxYD3mRRAjTkia1I03riubosV3h05Y+QtSq
sUfVWyvR7U3MSoXBsb3VD3YNf6XAoaGUdANbDV4su+fh5UKyuGl5+5Z2Jq8hPTiU
Ny2u2h079AituCj+tYMX3Vo0iELC8RxpGShwmsExw5HDpi+xklkMbRFN8wIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFLwSeGTNQwSFUO0WmcWEtcFNgOCYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzhhM2Ji
NS05ZDk1LTQ5NTMtOTM4OC0wMzFmNDA3YjMyNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvOGEzYmI1
LTlkOTUtNDk1My05Mzg4LTAzMWY0MDdiMzI2My8xL3ZCSjRaTTFEQklWUTdSYVp4
WVMxd1UyQTRKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF
BwEHAQH/BEowSDAwBAIAATAqAwQDJYPwAwQFPjBAAwQCudLQAwQBwSPGAwQBwSPa
AwQAwWIBAwQD2RrgMBQEAgACMA4DBQMqAA5oAwUDKgsCwDAeBggrBgEFBQcBCAEB
/wQPMA2gCzAJAgI9fwIDAyQHMA0GCSqGSIb3DQEBCwUAA4IBAQCp653D+4sfBkQJ
in1kpF9XlqsBWGoL9n6aOMYYlQUHwIY7C7OZP11KRP3lc6R+0MHmrKY8RakAgSTC
4n8N+7JDR5XJye4y5+liJjURPRb22aoO9b3XjcBVtP0JYxDHmob7SarNFOTTV+ei
8vS7cctefIoA+tqKrY4yKhCk/YeNfAv6bZuP6n3buSmGdnA+Jr3uZCFrHb6weqcl
pithnCGMpxeF7ZGqxkqagg8Re0bVee9eNHqa9vHASjXSgMy8agQA1mpCIHbJrpqT
NOHpKKWKQwz8dOIgmemutrWnUE9ctfRXMh1bg31CISlUBsw+29sLxb9PFS0roZo8
iSoqOEK8
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:18 2025 by rpki-client