Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer (raw, json)
Hash identifier: fcfl+Ppz8bOtrcwpi+xGFkd8GiHajwBrZ6uqQVhXLFA=
Subject key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65ABD3D01F6C9F22B48F9E9ACC5F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.225.248.0/22
IP: 144.2.0.0/19
IP: 144.2.176.0 -- 144.2.239.255
IP: 185.63.144.0/22
IP: 2a04:f540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:bd:3d:01:f6:c9:f2:2b:48:f9:e9:ac:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:02:01:4d:93:0f:89:b3:21:ea:de:80:5b:
12:da:c7:26:c6:1b:9c:f4:8e:95:8d:f3:04:c4:06:
29:11:3c:92:7b:ba:58:23:7a:b2:40:4c:dd:4e:ea:
9b:6c:8e:28:56:6b:56:64:00:90:bf:f8:a2:d9:04:
bc:89:4f:d3:99:93:44:52:15:d8:78:fa:99:9d:7c:
73:c6:8e:2e:6a:ec:fb:e3:1b:82:69:35:7c:27:06:
51:b8:1f:5f:44:6b:2b:88:6a:2d:c3:d6:38:4a:42:
48:10:70:fd:52:82:80:2e:4a:2e:c3:35:e1:01:e6:
99:b0:22:ca:a3:52:31:88:5c:a2:e9:fc:0c:1c:a9:
54:8c:55:30:1d:bb:7e:32:89:e0:2d:80:72:42:0d:
8f:02:64:b7:a2:ad:65:c5:46:6b:c0:12:1c:fd:ca:
e9:5f:21:9a:44:ae:c7:cc:6f:c7:8f:c5:0d:12:49:
65:25:3e:96:f4:33:34:2b:78:2c:e7:fd:a1:d1:1c:
4d:6d:48:7c:7e:41:03:ff:5c:05:b8:36:b1:48:97:
c7:3c:48:b7:43:59:5d:06:44:0f:f4:aa:b1:75:f7:
b3:85:23:92:43:cb:c5:80:8f:51:d6:7c:f8:be:fc:
36:11:11:43:4c:c7:e3:38:b6:dd:c1:5f:2e:36:97:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.248.0/22
144.2.0.0/19
144.2.176.0-144.2.239.255
185.63.144.0/22
IPv6:
2a04:f540::/29
Signature Algorithm: sha256WithRSAEncryption
87:87:0b:54:18:5a:83:cb:24:5b:c6:bf:d2:5e:82:27:5f:01:
2a:1f:9d:62:4d:d4:1f:4d:79:9b:62:47:4e:39:36:12:08:f7:
51:3e:86:12:72:df:67:99:b1:a7:d8:1e:32:5b:86:ad:e4:fe:
2f:99:0a:ce:a6:45:d4:99:95:33:85:cc:48:fb:df:86:ee:3c:
e4:67:5d:44:95:55:8c:23:51:7b:68:54:97:c9:72:48:93:64:
2a:4c:c8:c9:ea:29:ff:6d:2c:f9:30:d8:f9:b9:5c:b6:e2:53:
af:21:88:bf:1a:e4:3e:61:08:82:69:97:23:75:d4:4b:56:41:
2f:dd:de:89:67:06:25:3b:8b:da:8e:7a:14:2c:2c:e7:7e:fa:
42:8f:06:02:50:a1:68:8a:bc:06:47:79:8b:63:6e:e4:34:1f:
9a:20:6c:38:70:27:4c:98:d7:97:8f:11:12:41:4b:78:75:ca:
ba:5e:5b:ea:69:09:05:5e:18:31:1f:fc:b2:ee:2d:6e:8a:10:
03:a0:3c:16:f6:39:0a:d2:b3:80:59:8f:55:3f:7a:03:17:b3:
5b:91:5c:be:51:fa:36:64:c4:ef:fb:33:da:c3:76:f9:e3:50:
d7:43:b9:a1:bd:54:5d:12:07:89:92:f7:14:e2:d5:88:75:fd:
3a:cd:f7:58
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAZQg1lq9PQH2yfIrSPnprMX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWU4NmZmOTk3M2M5M2FiZTYzOThmMDMxOTY2YzI5ZDc1YTNiYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQCAU2TD4mzIeregFsS2scmxhuc
9I6VjfMExAYpETySe7pYI3qyQEzdTuqbbI4oVmtWZACQv/ii2QS8iU/TmZNEUhXY
ePqZnXxzxo4uauz74xuCaTV8JwZRuB9fRGsriGotw9Y4SkJIEHD9UoKALkouwzXh
AeaZsCLKo1IxiFyi6fwMHKlUjFUwHbt+MongLYByQg2PAmS3oq1lxUZrwBIc/crp
XyGaRK7HzG/Hj8UNEkllJT6W9DM0K3gs5/2h0RxNbUh8fkED/1wFuDaxSJfHPEi3
Q1ldBkQP9KqxdfezhSOSQ8vFgI9R1nz4vvw2ERFDTMfjOLbdwV8uNpdwoQIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFCHob/mXPJOr5jmPAxlmwp11o7qGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzJmNmRk
MC1iNzZmLTQ3ZDUtYTRhYi0zMmZlZWI1NjZlZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMmY2ZGQw
LWI3NmYtNDdkNS1hNGFiLTMyZmVlYjU2NmVlNi8xL0llaHYtWmM4azZ2bU9ZOERH
V2JDblhXanVvWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAmBAIAATAgAwQCW+H4AwQFkAIAMAwDBASQArADBASQAuADBAK5
P5AwDQQCAAIwBwMFAyoE9UAwDQYJKoZIhvcNAQELBQADggEBAIeHC1QYWoPLJFvG
v9JegidfASofnWJN1B9NeZtiR045NhII91E+hhJy32eZsafYHjJbhq3k/i+ZCs6m
RdSZlTOFzEj734buPORnXUSVVYwjUXtoVJfJckiTZCpMyMnqKf9tLPkw2Pm5XLbi
U68hiL8a5D5hCIJplyN11EtWQS/d3olnBiU7i9qOehQsLOd++kKPBgJQoWiKvAZH
eYtjbuQ0H5ogbDhwJ0yY15ePERJBS3h1yrpeW+ppCQVeGDEf/LLuLW6KEAOgPBb2
OQrSs4BZj1U/egMXs1uRXL5R+jZkxO/7M9rDdvnjUNdDuaG9VF0SB4mS9xTi1Yh1
/TrN91g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:15 2025 by rpki-client