Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer (raw, json)
Hash identifier: /3SXsdBpFTcfw+E2yvdKQSstftOs3GsCLBnY6YWCYTE=
Subject key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B62FA29A5E46587D4E3F92F34E1A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16356
IP: 217.144.32.0/20
IP: 2a02:2a10::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:62:fa:29:a5:e4:65:87:d4:e3:f9:2f:34:e1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc75052b50256ba562904e6f134350d3e75ded58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:c6:aa:c2:4f:3b:d6:c3:43:d6:fb:aa:e0:
49:f8:71:a4:3f:2e:ca:c7:57:52:3f:a7:68:40:2d:
56:69:9f:c8:d6:5c:11:d5:b1:ef:24:dd:13:73:aa:
db:0d:ee:2b:1c:72:a8:11:99:9e:09:a9:f4:1d:59:
f4:a3:dd:f5:0e:2c:9f:b7:d3:56:c2:7e:47:c0:77:
42:e8:64:18:11:bd:99:90:19:89:ac:fc:f0:82:70:
42:14:eb:47:10:b3:c9:c0:d6:51:4a:13:45:88:56:
76:14:98:90:5e:07:c3:b5:f3:4e:37:68:91:ba:ae:
f4:16:a7:7e:23:59:72:f0:fb:0f:1b:3c:14:42:d4:
17:2a:95:bf:c8:d3:28:5b:54:ef:85:5b:4b:9c:91:
0a:ba:07:dd:a4:f1:e1:b0:84:1e:55:e9:6e:06:01:
af:fe:45:cf:b7:7e:ac:c0:12:6e:ad:9d:bf:d9:9b:
88:02:e2:b8:c1:b7:de:e8:04:5a:b7:7e:5e:8c:8d:
f2:b8:59:97:bc:72:67:af:e3:0a:8c:04:24:48:11:
58:21:40:9c:a0:f5:04:46:41:bc:3e:61:60:f5:84:
10:22:29:1e:73:64:22:75:10:bf:a0:43:54:f3:e4:
fd:b7:8d:93:68:0b:47:cd:28:75:0e:dc:50:4e:c0:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.32.0/20
IPv6:
2a02:2a10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16356
Signature Algorithm: sha256WithRSAEncryption
48:ae:cf:3a:d1:43:71:c0:07:f6:14:18:03:34:36:57:3e:e0:
81:01:a0:33:15:01:54:d3:ee:9e:61:d7:99:6a:67:fb:fb:99:
f3:48:f9:90:a1:a8:32:02:5f:8d:38:22:82:14:af:c5:f4:e7:
5a:82:b1:3b:be:01:86:8f:c6:83:eb:bf:ef:00:30:e6:ed:97:
c4:7f:ed:c9:94:65:76:e9:61:60:69:c8:47:51:ae:e4:74:0b:
fe:4c:20:2f:9e:8e:aa:ed:09:9f:46:58:b1:d6:67:18:59:10:
9e:91:44:e4:98:71:b1:1f:b2:0e:4c:cc:70:82:34:dd:18:f8:
57:33:43:d0:be:44:e4:94:25:b4:39:70:57:94:32:94:dc:22:
c4:8a:38:b8:14:3c:a1:8a:8e:be:04:fe:2d:18:30:b7:b7:e9:
c6:cb:3e:b5:ca:88:79:e6:2b:4e:37:f1:56:a2:3a:1b:3b:c7:
c8:78:23:be:72:63:54:0f:f7:0e:55:5b:41:91:bc:0a:8a:c4:
f7:38:2b:25:13:42:b6:fe:64:3a:a2:56:ed:23:4f:90:72:01:
27:18:fc:e3:14:55:d7:3a:0d:24:c8:64:0b:70:a5:91:67:6c:
78:95:3a:53:84:5b:14:36:c5:3f:6d:bc:35:53:0f:28:58:7f:
cc:77:a1:61
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQma2L6KaXkZYfU4/kvNOGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzc1MDUyYjUwMjU2YmE1NjI5MDRlNmYxMzQzNTBkM2U3NWRlZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvnGqsJPO9bDQ9b7quBJ+HGkPy7K
x1dSP6doQC1WaZ/I1lwR1bHvJN0Tc6rbDe4rHHKoEZmeCan0HVn0o931Diyft9NW
wn5HwHdC6GQYEb2ZkBmJrPzwgnBCFOtHELPJwNZRShNFiFZ2FJiQXgfDtfNON2iR
uq70Fqd+I1ly8PsPGzwUQtQXKpW/yNMoW1TvhVtLnJEKugfdpPHhsIQeVeluBgGv
/kXPt36swBJurZ2/2ZuIAuK4wbfe6ARat35ejI3yuFmXvHJnr+MKjAQkSBFYIUCc
oPUERkG8PmFg9YQQIikec2QidRC/oENU8+T9t42TaAtHzSh1DtxQTsD0OwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFLx1BStQJWulYpBObxNDUNPnXe1YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzhmZTgy
Zi1lNmNmLTRhNjItODdkZC1lYTEzZWI3OTdlOGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOGZlODJm
LWU2Y2YtNGE2Mi04N2RkLWVhMTNlYjc5N2U4Yy8xL3ZIVUZLMUFsYTZWaWtFNXZF
ME5RMC1kZDdWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQE2ZAgMA0EAgACMAcDBQAqAioQMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAj/kMA0GCSqGSIb3DQEBCwUAA4IBAQBIrs860UNxwAf2
FBgDNDZXPuCBAaAzFQFU0+6eYdeZamf7+5nzSPmQoagyAl+NOCKCFK/F9OdagrE7
vgGGj8aD67/vADDm7ZfEf+3JlGV26WFgachHUa7kdAv+TCAvno6q7QmfRlix1mcY
WRCekUTkmHGxH7IOTMxwgjTdGPhXM0PQvkTklCW0OXBXlDKU3CLEiji4FDyhio6+
BP4tGDC3t+nGyz61yoh55itON/FWojobO8fIeCO+cmNUD/cOVVtBkbwKisT3OCsl
E0K2/mQ6olbtI0+QcgEnGPzjFFXXOg0kyGQLcKWRZ2x4lTpThFsUNsU/bbw1Uw8o
WH/Md6Fh
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:49 2025 by rpki-client