Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.cer (raw, json)
Hash identifier: 4jIe3J2Cn1ITeV3zzZrn27aXqbKavATRwb5v4ILoVgo=
Subject key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB968B404765527FCD681F9DCC2BC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43667
IP: 77.91.192.0/21
IP: 94.198.128.0/21
IP: 185.32.132.0/22
IP: 2a00:be20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:96:8b:40:47:65:52:7f:cd:68:1f:9d:cc:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c49eee24deab5520119b6a3da0457d39c40641db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:5d:cb:de:2b:d3:60:4c:d3:4e:f5:8e:c1:
fe:76:4a:6a:4a:71:21:8c:ff:44:37:04:7f:05:a8:
fb:23:cc:2f:2d:42:96:6e:2a:eb:87:e8:fb:e9:a3:
02:3d:50:bf:25:cb:a1:99:b4:69:40:80:16:20:5a:
af:d3:6d:51:64:39:3f:d7:6e:ec:2a:26:a8:94:2b:
98:09:76:39:4c:ae:91:ed:fd:97:19:d4:c4:c7:0c:
01:01:ff:7b:2b:5d:db:c1:40:a5:14:c2:2d:ff:ff:
78:d1:7e:48:0c:a1:4e:0b:d2:a1:c6:24:7b:69:ef:
c8:a2:69:fe:ae:7c:90:76:bb:5f:0e:79:41:e2:99:
0e:c8:24:d8:ed:d0:ae:6d:12:87:2a:45:f6:92:dd:
21:78:a3:a8:4a:4d:b8:75:6d:63:98:b9:8e:4f:2a:
59:76:e4:81:2c:b4:25:f3:28:ac:4d:a9:46:d0:2b:
16:ae:d5:9d:48:c2:a2:83:f0:7b:57:20:6c:84:c3:
f2:5b:02:48:9b:54:49:cf:f7:ab:3d:fa:0d:34:d5:
8e:f3:ea:b7:cf:d2:67:80:22:3c:1c:c2:4d:84:9b:
9d:10:87:96:32:30:6e:09:1e:a5:51:be:ab:16:b8:
31:75:12:cd:4d:89:59:73:ff:db:60:b3:f2:33:aa:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.192.0/21
94.198.128.0/21
185.32.132.0/22
IPv6:
2a00:be20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43667
Signature Algorithm: sha256WithRSAEncryption
75:97:ce:42:b4:6b:33:c2:62:98:90:2d:d6:7b:70:32:5b:06:
5a:16:1a:5c:e1:24:81:5a:31:8a:9d:29:ae:4c:1c:de:29:51:
b5:e4:a3:e1:51:cf:38:31:21:85:16:46:7d:cb:09:bb:10:1a:
84:d9:e3:41:99:72:2e:01:ad:26:af:e4:3c:c2:6c:48:0c:66:
84:09:86:63:48:7f:ea:42:a8:c1:04:2f:78:9e:0b:8a:74:71:
f0:1a:aa:d2:68:17:d6:5e:c2:64:8a:30:af:2b:6a:ef:38:4f:
94:0b:37:f3:72:e0:db:45:6a:a7:d6:15:70:2f:a8:d9:5b:02:
c2:c7:c5:c2:d5:0e:a5:e8:d1:51:6d:30:d9:aa:30:71:2f:72:
4f:da:4a:1e:d2:8f:e6:da:4a:5f:a1:b6:5c:1f:e0:18:fe:72:
f6:89:26:fd:06:9b:a7:4e:cf:07:79:56:7a:9a:6e:5b:f5:0f:
59:4d:24:c0:e6:af:de:d7:97:d7:37:47:2b:c1:d3:9a:04:c7:
a6:05:d0:c0:d5:5e:b2:88:6b:e0:75:a5:b4:6b:36:a2:f2:b8:
85:b9:60:d7:2e:7d:1d:0f:e6:7e:06:02:ff:aa:2d:8e:11:86:
09:48:2a:aa:cc:43:e0:16:fb:d0:96:cd:26:10:28:cf:83:26:
85:24:87:54
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQi+5aLQEdlUn/NaB+dzCvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDllZWUyNGRlYWI1NTIwMTE5YjZhM2RhMDQ1N2QzOWM0MDY0MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKldy94r02BM0071jsH+dkpqSnEh
jP9ENwR/Baj7I8wvLUKWbirrh+j76aMCPVC/JcuhmbRpQIAWIFqv021RZDk/127s
KiaolCuYCXY5TK6R7f2XGdTExwwBAf97K13bwUClFMIt//940X5IDKFOC9KhxiR7
ae/Iomn+rnyQdrtfDnlB4pkOyCTY7dCubRKHKkX2kt0heKOoSk24dW1jmLmOTypZ
duSBLLQl8yisTalG0CsWrtWdSMKig/B7VyBshMPyWwJIm1RJz/erPfoNNNWO8+q3
z9JngCI8HMJNhJudEIeWMjBuCR6lUb6rFrgxdRLNTYlZc//bYLPyM6rGDQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFMSe7iTeq1UgEZtqPaBFfTnEBkHbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzk3ODZm
NC1kZDU0LTRlNDMtYWVhNC01OWM0YzEwYWViZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvOTc4NmY0
LWRkNTQtNGU0My1hZWE0LTU5YzRjMTBhZWJkOS8xL3hKN3VKTjZyVlNBUm0ybzlv
RVY5T2NRR1Fkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDTVvAAwQDXsaAAwQCuSCEMA0EAgACMAcDBQAq
AL4gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqkzANBgkqhkiG9w0BAQsFAAOC
AQEAdZfOQrRrM8JimJAt1ntwMlsGWhYaXOEkgVoxip0prkwc3ilRteSj4VHPODEh
hRZGfcsJuxAahNnjQZlyLgGtJq/kPMJsSAxmhAmGY0h/6kKowQQveJ4LinRx8Bqq
0mgX1l7CZIowrytq7zhPlAs383Lg20Vqp9YVcC+o2VsCwsfFwtUOpejRUW0w2aow
cS9yT9pKHtKP5tpKX6G2XB/gGP5y9okm/Qabp07PB3lWeppuW/UPWU0kwOav3teX
1zdHK8HTmgTHpgXQwNVesohr4HWltGs2ovK4hblg1y59HQ/mfgYC/6otjhGGCUgq
qsxD4Bb70JbNJhAoz4MmhSSHVA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:43 2025 by rpki-client