Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.cer (raw, json)
Hash identifier: 5yrnj8RVVs83lIMmh2XaSVGAStBY+tA3jHwUc15QUJI=
Subject key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F52BCB7B4E7119F6EAE0D874A605
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50289
IP: 37.123.216.0/21
IP: 62.78.32.0/19
IP: 185.142.64.0/22
IP: 2a03:a400::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:2b:cb:7b:4e:71:19:f6:ea:e0:d8:74:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:b7:0b:e2:01:1f:88:e5:67:c0:96:0e:74:
03:71:9f:36:7f:a4:62:d7:aa:d2:5c:d5:73:dc:fd:
d0:25:ae:6f:63:5d:27:30:60:28:bc:7f:41:ee:cd:
a5:1a:3d:cc:3f:8f:92:a5:f4:27:ab:3d:53:f4:02:
5a:14:e9:5b:4d:c8:56:15:55:c9:05:5f:d4:d9:3b:
b0:44:24:66:ca:8e:c4:3a:0c:a5:5e:35:1b:12:40:
20:c8:ce:c8:60:94:79:89:bc:12:ff:7b:e5:70:07:
51:2f:79:94:b3:ca:fc:c3:68:13:80:87:05:2a:30:
44:6d:0e:c0:1b:3f:9b:99:7c:f6:e8:f8:c2:ba:b5:
87:09:e7:ae:61:a2:4e:43:d6:0d:24:74:ac:dd:45:
d4:ce:bb:9a:7e:d9:e7:76:12:ed:7f:9d:cd:74:69:
53:33:bf:a6:b6:18:4f:a4:11:fe:18:3a:c2:be:30:
ce:10:01:81:e6:7e:98:95:26:e5:7d:11:2a:bc:b7:
4e:63:5b:4f:6b:6b:2f:08:8b:93:df:f1:22:af:db:
3d:09:9d:bc:71:21:98:1c:ec:c0:df:e2:f1:be:7a:
be:66:a2:ef:c5:34:8d:dd:c8:74:b4:11:f3:b4:be:
4b:1e:5c:8d:4e:01:5b:01:17:eb:c2:ec:fa:99:4e:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.216.0/21
62.78.32.0/19
185.142.64.0/22
IPv6:
2a03:a400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50289
Signature Algorithm: sha256WithRSAEncryption
80:14:00:db:ce:e3:5a:72:00:b8:29:ee:71:2e:f6:f3:89:5a:
10:55:99:c3:63:19:34:e0:bb:a3:17:1c:f7:1a:eb:09:3c:f6:
b7:d5:8c:91:10:24:94:ab:6f:82:2e:36:07:79:fb:6e:ef:3e:
2c:26:1e:06:d8:73:10:04:1b:b9:54:14:49:7f:a5:06:c1:cc:
00:eb:a1:39:88:a8:c5:44:1e:78:18:52:55:d6:59:14:5c:e1:
8e:46:57:d4:53:77:a9:82:57:ee:a4:7e:68:13:83:56:bc:c2:
f7:7c:f3:71:4e:e2:fe:32:4b:a3:06:fa:da:1b:4f:41:f3:2d:
ae:b9:fc:65:81:cf:a9:74:24:8c:59:53:97:c3:f6:86:89:f5:
46:4f:31:eb:65:b6:dc:eb:f9:39:0f:06:95:d5:e6:72:2b:10:
58:63:f5:ad:9a:cd:ee:19:3d:40:e5:f6:2a:a1:b3:64:27:c6:
f3:bd:8a:57:b7:99:e0:df:69:45:69:d0:2b:6f:e9:d0:c9:11:
c6:99:60:b8:de:b8:c7:24:d3:61:e9:b6:b0:4e:9b:3d:1d:79:
99:6c:e7:95:ff:47:ea:9f:f8:8c:4c:cc:71:00:0f:ca:2b:2b:
b6:32:bb:96:f3:37:d0:3b:65:d1:cd:f7:13:40:23:c0:f7:fa:
c4:6e:cc:1c
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQhsfUry3tOcRn26uDYdKYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzljNDA1ZjE0MmU1M2ViNjdiMWM0OTkyM2FiNzk1ZTg0MzI4YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ63C+IBH4jlZ8CWDnQDcZ82f6Ri
16rSXNVz3P3QJa5vY10nMGAovH9B7s2lGj3MP4+SpfQnqz1T9AJaFOlbTchWFVXJ
BV/U2TuwRCRmyo7EOgylXjUbEkAgyM7IYJR5ibwS/3vlcAdRL3mUs8r8w2gTgIcF
KjBEbQ7AGz+bmXz26PjCurWHCeeuYaJOQ9YNJHSs3UXUzruaftnndhLtf53NdGlT
M7+mthhPpBH+GDrCvjDOEAGB5n6YlSblfREqvLdOY1tPa2svCIuT3/Eir9s9CZ28
cSGYHOzA3+Lxvnq+ZqLvxTSN3ch0tBHztL5LHlyNTgFbARfrwuz6mU6T/QIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFLycQF8ULlPrZ7HEmSOreV6EMoybMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2I4MTZi
OS05MWIwLTQ2ZGEtOGU1OC05MTQ4OGEzNGZjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYjgxNmI5
LTkxYjAtNDZkYS04ZTU4LTkxNDg4YTM0ZmNjOC8xL3ZKeEFYeFF1VS10bnNjU1pJ
NnQ1WG9ReWpKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDJXvYAwQFPk4gAwQCuY5AMA0EAgACMAcDBQAq
A6QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEcTANBgkqhkiG9w0BAQsFAAOC
AQEAgBQA287jWnIAuCnucS7284laEFWZw2MZNOC7oxcc9xrrCTz2t9WMkRAklKtv
gi42B3n7bu8+LCYeBthzEAQbuVQUSX+lBsHMAOuhOYioxUQeeBhSVdZZFFzhjkZX
1FN3qYJX7qR+aBODVrzC93zzcU7i/jJLowb62htPQfMtrrn8ZYHPqXQkjFlTl8P2
hon1Rk8x62W23Ov5OQ8GldXmcisQWGP1rZrN7hk9QOX2KqGzZCfG872KV7eZ4N9p
RWnQK2/p0MkRxplguN64xyTTYem2sE6bPR15mWznlf9H6p/4jEzMcQAPyisrtjK7
lvM30Dtl0c33E0AjwPf6xG7MHA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:28 2025 by rpki-client