Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.cer (raw, json)
Hash identifier: YVGmjKa0fxLsjlCO7M2M7GwNLsYmnia6i1fxdtTqS8Y=
Subject key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216FE39F8D1D555B5CD80E1724F631
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205179
IP: 185.226.232.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:e3:9f:8d:1d:55:5b:5c:d8:0e:17:24:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:04:33:78:f2:27:d6:23:b0:51:06:a4:14:
5e:ff:a9:ad:58:4a:03:af:4f:08:27:6a:e9:b0:11:
3f:78:de:17:76:9a:25:92:01:ff:b5:db:6c:35:7a:
06:93:0e:87:84:02:03:9c:fe:42:a7:85:1e:c7:05:
32:88:77:95:3d:26:21:52:65:67:48:fa:64:58:bd:
47:af:bc:94:e1:a7:5b:53:86:5e:e2:1a:7a:f7:7b:
27:ef:e9:1f:bf:38:f8:af:92:93:7a:d4:db:37:4d:
b1:fd:2b:ca:a4:25:3c:52:54:0f:0c:58:e2:26:b6:
d9:7f:c5:2c:5a:63:52:d6:51:46:d9:6a:a4:21:f3:
99:91:bd:d9:69:d1:01:1a:76:fe:ad:37:51:b9:d0:
03:72:18:ca:e6:02:0b:10:fb:30:55:8b:5f:90:96:
af:c2:01:a1:6f:a7:ba:81:a4:9f:ac:52:93:1f:90:
13:65:43:ae:f9:36:11:22:dc:78:97:f3:e6:61:66:
13:2e:3f:5f:f9:6d:0b:9c:4e:ad:f2:04:80:35:75:
20:d9:f3:e7:5c:db:e9:88:2d:ce:16:c1:a4:56:8c:
15:43:24:32:c1:ef:16:a3:16:a5:c9:37:43:28:ec:
1f:7b:61:c5:72:69:5e:c7:29:a3:fb:44:2a:c2:ca:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.232.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205179
Signature Algorithm: sha256WithRSAEncryption
4f:5a:93:ca:da:32:c8:1e:fe:f0:aa:a5:44:dd:4f:fa:59:f4:
ba:d7:9d:70:8f:70:06:58:dd:1e:24:e3:7a:df:56:67:1d:e3:
2a:25:8c:77:1d:b2:d9:97:17:ba:ba:44:19:53:a9:15:ea:cd:
ac:63:c0:de:59:2b:7c:24:2e:16:a6:35:63:cb:86:ae:f1:f9:
90:df:1a:1c:36:19:0b:39:db:8d:fe:f0:7a:f1:8d:76:de:59:
90:26:2f:f0:75:e9:7e:45:50:d6:72:15:2a:a9:84:dd:7c:f1:
1d:e4:eb:5a:27:b6:31:af:e8:6b:1b:71:6c:4a:a3:6c:0e:03:
10:5f:28:e6:b8:c0:bd:94:80:e9:91:f6:08:fa:bf:19:81:36:
99:ed:1e:26:ab:c2:61:f4:16:90:8b:85:e4:54:c1:c1:c8:e5:
2a:4d:22:90:5d:c3:a4:94:f8:ec:45:af:f4:32:85:37:ae:d9:
43:f9:d3:d8:64:11:4d:2a:cf:1b:18:51:13:a7:66:ec:81:8e:
02:24:90:c9:d4:b8:b7:75:b8:3b:50:bc:7f:fd:39:df:5a:15:
a6:e9:2e:80:8d:8f:ea:e1:4f:76:50:1f:03:ea:2b:34:e3:7c:
9b:4d:6c:fe:1e:f3:39:19:09:d0:8f:eb:ed:30:fd:ba:aa:7a:
a8:a3:60:56
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQlIW/jn40dVVtc2A4XJPYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjg5YWU2MzY0OGZkMWM4OWVkNTZhMzYxYmQ4YzFlMTE5NTZiZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaAEM3jyJ9YjsFEGpBRe/6mtWEoD
r08IJ2rpsBE/eN4XdpolkgH/tdtsNXoGkw6HhAIDnP5Cp4UexwUyiHeVPSYhUmVn
SPpkWL1Hr7yU4adbU4Ze4hp693sn7+kfvzj4r5KTetTbN02x/SvKpCU8UlQPDFji
JrbZf8UsWmNS1lFG2WqkIfOZkb3ZadEBGnb+rTdRudADchjK5gILEPswVYtfkJav
wgGhb6e6gaSfrFKTH5ATZUOu+TYRItx4l/PmYWYTLj9f+W0LnE6t8gSANXUg2fPn
XNvpiC3OFsGkVowVQyQywe8WoxalyTdDKOwfe2HFcmlexymj+0QqwsrdZQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMuJrmNkj9HIntVqNhvYweEZVr+6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzFiYTZk
Zi01NDhjLTQ0ZWEtYjFkNS1mNGViMGZmNWJiNzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMWJhNmRm
LTU0OGMtNDRlYS1iMWQ1LWY0ZWIwZmY1YmI3My8xL3k0bXVZMlNQMGNpZTFXbzJH
OWpCNFJsV3Y3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCueLoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMhezANBgkqhkiG9w0BAQsFAAOCAQEAT1qTytoyyB7+8KqlRN1P+ln0utedcI9w
BljdHiTjet9WZx3jKiWMdx2y2ZcXurpEGVOpFerNrGPA3lkrfCQuFqY1Y8uGrvH5
kN8aHDYZCznbjf7wevGNdt5ZkCYv8HXpfkVQ1nIVKqmE3XzxHeTrWie2Ma/oaxtx
bEqjbA4DEF8o5rjAvZSA6ZH2CPq/GYE2me0eJqvCYfQWkIuF5FTBwcjlKk0ikF3D
pJT47EWv9DKFN67ZQ/nT2GQRTSrPGxhRE6dm7IGOAiSQydS4t3W4O1C8f/0531oV
pukugI2P6uFPdlAfA+orNON8m01s/h7zORkJ0I/r7TD9uqp6qKNgVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:38 2025 by rpki-client