Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer (raw, json)
Hash identifier: zIGVd9FqDpSJiF/AsVcihyOwk69VFlKNLE/KHMK2rkQ=
Subject key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D958C154516837A7E316FDBCA3F118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200615
AS: 204035
AS: 208204
IP: 37.228.132.0/24
IP: 37.228.134.0/24
IP: 37.228.148.0/22
IP: 146.19.118.0/24
IP: 185.101.92.0/22
IP: 185.107.192.0/22
IP: 185.116.156.0/22
IP: 185.245.168.0/22
IP: 193.46.24.0/22
IP: 193.56.126.0/24
IP: 193.56.129.0/24
IP: 193.56.156.0/24
IP: 193.56.173.0/24
IP: 194.125.248.0/22
IP: 2a06:1c40::/29
IP: 2a06:7f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:58:c1:54:51:68:37:a7:e3:16:fd:bc:a3:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:0a:f4:83:35:d4:09:9f:a4:8d:aa:9a:aa:
36:0a:23:7d:ad:89:1e:8a:74:90:1e:29:b3:06:88:
d6:3f:ab:58:3f:f1:36:40:cf:af:46:60:47:43:73:
35:bd:8b:fa:1b:28:ed:31:f7:94:6f:3c:94:b1:10:
55:ca:e4:a3:06:a6:35:2e:f4:6e:c7:d9:5d:14:28:
ab:93:c4:0e:cc:95:f4:40:8e:47:b1:4e:74:38:e3:
db:43:e1:10:78:90:d3:b0:34:f2:ff:56:90:30:e1:
29:ae:ff:34:9f:83:ad:6b:76:76:f3:0f:b6:8d:9d:
81:46:a2:05:cf:61:fc:79:02:41:e4:00:3f:6f:3b:
6b:d3:36:d0:62:ce:27:3a:db:2a:b2:ac:d3:88:fa:
91:94:b0:3b:6b:4c:06:34:e2:48:22:cb:a3:94:54:
f5:d3:0a:ee:d1:39:8f:00:b7:24:fb:92:2e:35:10:
e2:98:f3:8e:eb:ee:52:a7:2f:6d:b2:5a:d6:c6:af:
f1:d4:c7:d8:bb:b0:68:0d:f7:3e:8a:cb:01:c2:1a:
62:48:2e:e2:09:86:c9:b8:d3:05:ec:2c:bd:98:db:
1b:3a:4a:0f:f3:3d:cd:dc:c9:e7:d8:5c:5b:0e:41:
5b:ae:a8:7c:01:b7:32:28:17:eb:56:52:dd:86:28:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200615
204035
208204
Signature Algorithm: sha256WithRSAEncryption
35:3d:0b:96:33:0c:09:66:eb:7a:ba:07:ab:aa:4c:b1:e6:22:
41:5d:24:e8:61:22:7f:6d:a2:51:b6:c8:8c:1d:e9:32:93:65:
0b:ee:00:ce:3d:97:14:5b:30:a4:bd:62:41:13:51:37:96:b4:
33:5c:c7:d5:01:e9:cb:83:b2:73:20:80:7c:3e:4a:a9:f1:a2:
41:95:60:60:fe:df:fd:28:4d:1c:6c:dc:46:0f:8f:f3:18:09:
38:0f:b8:a9:04:c2:fb:ce:e2:07:a7:4b:ae:de:64:21:2d:d0:
a5:e0:1f:10:67:3e:e4:fe:da:2d:36:ed:b7:b5:ec:c7:4b:b0:
b7:61:57:aa:7f:a2:a7:90:b0:1d:a0:cf:5e:bd:55:f0:0b:96:
fd:74:aa:07:f6:ec:d8:15:15:c6:1d:3e:0f:2f:98:d5:82:92:
63:84:45:a8:bb:f6:96:49:11:c6:d1:02:ea:df:9e:6b:58:9f:
41:2a:36:2b:8c:28:81:9c:41:94:97:1f:44:a2:72:f9:37:03:
5c:20:34:12:69:a8:11:08:af:83:64:a2:cd:d3:f2:0c:b8:35:
1b:bb:52:06:9d:62:26:36:40:60:3f:7f:07:20:06:8e:af:10:
ec:cf:e1:0f:50:55:f5:9e:ff:2a:17:17:bb:24:e6:2e:ea:2e:
37:77:d9:98
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZQm2VjBVFFoN6fjFv28o/EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQxODE5NmIyOWY2MGU4NWQ4NzEyZGU0MDM5YTUzMWNmYzFhYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn0K9IM11AmfpI2qmqo2CiN9rYke
inSQHimzBojWP6tYP/E2QM+vRmBHQ3M1vYv6GyjtMfeUbzyUsRBVyuSjBqY1LvRu
x9ldFCirk8QOzJX0QI5HsU50OOPbQ+EQeJDTsDTy/1aQMOEprv80n4Ota3Z28w+2
jZ2BRqIFz2H8eQJB5AA/bztr0zbQYs4nOtsqsqzTiPqRlLA7a0wGNOJIIsujlFT1
0wru0TmPALck+5IuNRDimPOO6+5Spy9tslrWxq/x1MfYu7BoDfc+issBwhpiSC7i
CYbJuNMF7Cy9mNsbOkoP8z3N3Mnn2FxbDkFbrqh8AbcyKBfrVlLdhiiyLwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFFDRgZayn2DoXYcS3kA5pTHPwasxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2NiZWNm
NC1iY2VkLTRkODMtYmZjYS1iNGExODFjZDQwZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvY2JlY2Y0
LWJjZWQtNGQ4My1iZmNhLWI0YTE4MWNkNDBmNi8xL1VOR0JscktmWU9oZGh4TGVR
RG1sTWNfQnF6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF
BQcBBwEB/wR0MHIwWgQCAAEwVAMEACXkhAMEACXkhgMEAiXklAMEAJITdgMEArll
XAMEArlrwAMEArl0nAMEArn1qAMEAsEuGAMEAME4fgMEAME4gQMEAME4nAMEAME4
rQMEAsJ9+DAUBAIAAjAOAwUDKgYcQAMFAyoGf4AwJAYIKwYBBQUHAQgBAf8EFTAT
oBEwDwIDAw+nAgMDHQMCAwMtTDANBgkqhkiG9w0BAQsFAAOCAQEANT0LljMMCWbr
eroHq6pMseYiQV0k6GEif22iUbbIjB3pMpNlC+4Azj2XFFswpL1iQRNRN5a0M1zH
1QHpy4OycyCAfD5KqfGiQZVgYP7f/ShNHGzcRg+P8xgJOA+4qQTC+87iB6dLrt5k
IS3QpeAfEGc+5P7aLTbtt7Xsx0uwt2FXqn+ip5CwHaDPXr1V8AuW/XSqB/bs2BUV
xh0+Dy+Y1YKSY4RFqLv2lkkRxtEC6t+ea1ifQSo2K4wogZxBlJcfRKJy+TcDXCA0
EmmoEQivg2SizdPyDLg1G7tSBp1iJjZAYD9/ByAGjq8Q7M/hD1BV9Z7/KhcXuyTm
LuouN3fZmA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:30:36 2025 by rpki-client