Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
File: xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer (raw, json)
Hash identifier: koUqgXE3qomvTkWBNpAeK1eGKfAljX0TIhTal7troYw=
Subject key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AA2096FE1377B3E58211225E5569
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49821
IP: 91.202.196.0/22
IP: 91.235.184.0/22
IP: 176.108.144.0/21
IP: 176.126.48.0/21
IP: 185.244.76.0/22
IP: 2a0d:2a80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:aa:20:96:fe:13:77:b3:e5:82:11:22:5e:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:9c:73:1e:2f:0b:4a:c4:e1:ec:2b:46:91:
a4:5e:8a:20:a9:bc:b2:a2:ec:cc:62:b0:75:29:66:
2f:20:e9:93:71:6a:5d:e0:9b:c2:f1:11:2f:90:2b:
7a:b1:7b:f4:18:9c:b1:c3:8b:63:6e:ad:44:83:af:
94:1d:15:79:82:50:9f:1a:4c:51:e0:69:c2:eb:aa:
45:df:94:39:77:69:8c:a4:07:ff:86:7f:a0:f1:8a:
c9:42:8e:b6:e2:02:b1:9f:12:e3:37:c1:db:37:4a:
1e:0e:cf:02:f8:32:26:96:cd:6c:71:f9:f3:61:c9:
3f:f3:1c:8f:ee:32:44:f6:33:2c:c3:81:8f:3b:51:
b0:68:04:89:79:f0:e0:c9:5b:cc:84:6a:3a:f7:f9:
b2:8b:15:94:9c:a7:c2:28:12:d0:f7:ba:99:41:15:
3e:0c:32:d8:d3:dd:44:c3:13:ac:14:cb:10:33:0d:
f4:52:82:90:b4:47:54:e5:ce:69:2f:d9:31:31:53:
12:8c:98:e1:48:9c:aa:67:1e:3d:f3:49:b4:5a:52:
bb:51:a5:2d:a0:6f:47:59:84:ab:8f:b4:25:a1:39:
9a:57:2a:56:8d:d3:bb:a5:d6:40:c6:0e:ee:4d:69:
3d:b5:b0:87:94:3a:b0:03:71:01:c5:b1:bf:5b:38:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.196.0/22
91.235.184.0/22
176.108.144.0/21
176.126.48.0/21
185.244.76.0/22
IPv6:
2a0d:2a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49821
Signature Algorithm: sha256WithRSAEncryption
15:cc:8c:e8:ad:73:14:b2:8e:8f:a3:5b:2b:a1:8d:a3:1e:d2:
aa:1b:d2:db:52:4d:f1:1a:f0:bb:ea:d2:51:b9:3b:6f:b0:e6:
b8:18:b0:1f:7c:65:dc:20:be:06:d3:ba:06:6d:99:6f:e5:5b:
9e:96:78:dc:12:09:6a:3d:31:33:58:0b:7b:a6:4a:46:fa:f5:
d3:4a:62:2a:fc:51:06:0b:cc:08:53:d0:c3:28:fb:7b:66:87:
14:08:19:1c:ff:7a:9e:53:a4:8f:06:89:98:09:e1:97:3d:f2:
3e:53:98:d9:88:06:a2:f7:ba:23:b3:41:37:84:b8:60:c8:97:
13:b4:06:ba:1c:59:e3:8e:2e:d7:31:09:f2:b9:f2:ac:3b:23:
19:2f:99:47:2d:95:d9:16:4b:4f:d7:08:28:a8:b5:dd:01:ed:
66:82:7b:d9:36:59:ce:bc:ab:e4:f0:6b:72:23:e1:3a:b5:f7:
c4:9e:07:b3:20:12:df:4b:dd:3d:df:f9:d6:e0:da:22:b2:0c:
66:be:4f:8f:e3:53:90:21:78:ab:47:bf:86:87:3a:ba:9b:f0:
05:96:c1:35:3a:5d:e3:2b:81:23:b0:22:18:67:26:de:bc:f4:
05:15:c7:ce:55:40:77:8c:42:81:fc:c9:34:85:a5:e4:46:7b:
24:4b:51:08
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQj1qoglv4Td7PlghEiXlVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDE1ZTkyNzRlOWQxZmU0NjIwM2MxZTA2YjFiMGRjODVlNjEyNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+ccx4vC0rE4ewrRpGkXoogqbyy
ouzMYrB1KWYvIOmTcWpd4JvC8REvkCt6sXv0GJyxw4tjbq1Eg6+UHRV5glCfGkxR
4GnC66pF35Q5d2mMpAf/hn+g8YrJQo624gKxnxLjN8HbN0oeDs8C+DImls1scfnz
Yck/8xyP7jJE9jMsw4GPO1GwaASJefDgyVvMhGo69/myixWUnKfCKBLQ97qZQRU+
DDLY091EwxOsFMsQMw30UoKQtEdU5c5pL9kxMVMSjJjhSJyqZx4980m0WlK7UaUt
oG9HWYSrj7QloTmaVypWjdO7pdZAxg7uTWk9tbCHlDqwA3EBxbG/WzjfgQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFMQV6SdOnR/kYgPB4GsbDcheYSRTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzM3YjM0
ZC0xMjEyLTRlY2EtYTIzNi04ZjYyZDdkYzE2OTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMzdiMzRk
LTEyMTItNGVjYS1hMjM2LThmNjJkN2RjMTY5OS8xL3hCWHBKMDZkSC1SaUE4SGdh
eHNOeUY1aEpGTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCW8rEAwQCW+u4AwQDsGyQAwQDsH4wAwQCufRM
MA0EAgACMAcDBQMqDSqAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCnTANBgkq
hkiG9w0BAQsFAAOCAQEAFcyM6K1zFLKOj6NbK6GNox7SqhvS21JN8Rrwu+rSUbk7
b7DmuBiwH3xl3CC+BtO6Bm2Zb+VbnpZ43BIJaj0xM1gLe6ZKRvr100piKvxRBgvM
CFPQwyj7e2aHFAgZHP96nlOkjwaJmAnhlz3yPlOY2YgGove6I7NBN4S4YMiXE7QG
uhxZ444u1zEJ8rnyrDsjGS+ZRy2V2RZLT9cIKKi13QHtZoJ72TZZzryr5PBrciPh
OrX3xJ4HsyAS30vdPd/51uDaIrIMZr5Pj+NTkCF4q0e/hoc6upvwBZbBNTpd4yuB
I7AiGGcm3rz0BRXHzlVAd4xCgfzJNIWl5EZ7JEtRCA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:42 2025 by rpki-client