Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.cer (raw, json)
Hash identifier: YygUSoE5tUJMggawI0f3ufoWAsNfR9qsDzUGDrubyik=
Subject key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144202D8FFAD3A99D5ECE7971FC7512
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.72.20.0/22
IP: 2a05:3d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:20:2d:8f:fa:d3:a9:9d:5e:ce:79:71:fc:75:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:62:a9:29:a4:61:36:4d:1f:08:10:4f:6c:
1c:96:c8:d7:81:c6:7a:76:98:13:66:e2:c8:04:4d:
9d:18:ba:68:ef:c9:83:3a:54:41:bb:09:cb:20:2f:
0d:06:51:95:ad:77:74:35:5a:71:ed:eb:8b:49:1f:
ef:80:c3:79:7f:c9:88:8d:8b:66:80:81:45:e1:2d:
0e:10:94:cb:eb:87:01:5c:ae:e3:0f:22:ad:76:d8:
ec:8b:00:d6:5e:1b:16:bb:ab:37:14:c9:c1:a7:f1:
dc:79:1f:30:b8:93:a0:e8:02:fc:1b:1d:50:2b:de:
45:fe:68:37:54:0e:97:49:75:55:f5:12:07:92:c5:
17:73:1a:27:ab:80:73:61:7d:01:56:5e:0f:40:84:
00:06:b8:45:44:1d:fa:26:68:fd:87:bf:a2:e7:65:
fe:f1:ef:d3:70:e3:0d:bd:07:04:4c:fc:3c:9a:bd:
5b:88:3a:7a:af:dd:89:9a:bc:ad:2c:5d:0e:32:fc:
2f:8a:ec:c8:4f:87:56:f9:3c:9c:bb:50:6d:9b:22:
e1:f0:d2:2b:56:92:3b:e2:b8:8d:45:03:71:08:02:
34:b9:0f:15:72:f7:3f:09:70:04:c8:71:a7:a4:53:
a4:8b:31:83:ef:da:00:88:df:7b:d3:e7:2d:74:ff:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.20.0/22
IPv6:
2a05:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
36:1c:b1:07:35:c6:62:34:a4:a1:22:28:69:cc:d9:b5:5d:c0:
23:d5:35:d7:af:46:9b:fc:bf:1a:4f:1d:c9:4e:32:d0:95:c8:
8a:80:58:57:17:99:ae:2a:0c:d4:4e:33:ad:4a:4d:6b:8f:e8:
5f:31:a9:5f:df:d8:c0:3b:31:a6:06:2b:be:4f:f1:5f:03:d0:
54:45:3b:46:bc:15:f3:d0:52:f5:c6:50:46:64:99:1e:da:1d:
9a:9a:f0:74:ce:d5:b4:38:bc:08:89:c4:e0:36:52:f0:38:6c:
92:a0:64:1c:62:62:35:f0:b9:92:70:b8:41:17:ee:54:f5:f3:
7a:97:13:ba:38:d8:d4:c6:02:cf:92:07:79:1f:34:d3:be:48:
44:7a:b3:3a:bb:a0:df:9b:56:2c:fc:ba:3c:29:72:0f:6b:a0:
31:56:89:16:5c:e5:40:e2:80:eb:4f:8e:a0:ff:91:cb:bb:f8:
18:68:e4:45:9d:cf:93:1e:4c:9c:9f:c9:3b:c0:b2:53:ac:52:
97:43:c2:ea:c9:d3:63:c5:7e:2e:33:49:b5:06:7d:32:50:7b:
20:73:dd:70:db:3b:ca:dd:fa:c1:83:9b:83:84:06:74:a1:78:
13:e7:d0:a0:b3:83:d1:14:08:42:6f:90:79:d4:a5:4f:ad:24:
db:dd:69:49
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhRCAtj/rTqZ1eznlx/HUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDIyODdjNjg0NThmOTgwY2E5YjdjMzZkNjFmNmFmNTg2NDY0YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlpiqSmkYTZNHwgQT2wclsjXgcZ6
dpgTZuLIBE2dGLpo78mDOlRBuwnLIC8NBlGVrXd0NVpx7euLSR/vgMN5f8mIjYtm
gIFF4S0OEJTL64cBXK7jDyKtdtjsiwDWXhsWu6s3FMnBp/HceR8wuJOg6AL8Gx1Q
K95F/mg3VA6XSXVV9RIHksUXcxonq4BzYX0BVl4PQIQABrhFRB36Jmj9h7+i52X+
8e/TcOMNvQcETPw8mr1biDp6r92JmrytLF0OMvwviuzIT4dW+Tycu1BtmyLh8NIr
VpI74riNRQNxCAI0uQ8Vcvc/CXAEyHGnpFOkizGD79oAiN970+ctdP+SQwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMQih8aEWPmAypt8NtYfavWGRksoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzQ1ZjNi
Yy05M2M4LTRiYjktOGQ0Yy1iMTJkN2Y4OTJmNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNDVmM2Jj
LTkzYzgtNGJiOS04ZDRjLWIxMmQ3Zjg5MmY1Yi8xL3hDS0h4b1JZLVlES20zdzIx
aDlxOVlaR1N5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUgUMA0EAgACMAcDBQMqBT2AMA0GCSqGSIb3
DQEBCwUAA4IBAQA2HLEHNcZiNKShIihpzNm1XcAj1TXXr0ab/L8aTx3JTjLQlciK
gFhXF5muKgzUTjOtSk1rj+hfMalf39jAOzGmBiu+T/FfA9BURTtGvBXz0FL1xlBG
ZJke2h2amvB0ztW0OLwIicTgNlLwOGySoGQcYmI18LmScLhBF+5U9fN6lxO6ONjU
xgLPkgd5HzTTvkhEerM6u6Dfm1Ys/Lo8KXIPa6AxVokWXOVA4oDrT46g/5HLu/gY
aORFnc+THkycn8k7wLJTrFKXQ8LqydNjxX4uM0m1Bn0yUHsgc91w2zvK3frBg5uD
hAZ0oXgT59Cgs4PRFAhCb5B51KVPrSTb3WlJ
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:29 2025 by rpki-client