Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
File: r16T-QI1TOSAS0ywSc9osg92rrI.cer (raw, json)
Hash identifier: cG+cqONuphrB8s2wTmi9SYyT52HkAFTh6ryHmR3FrvE=
Subject key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195DBDDC18598D741B867D3B5BB2436BD58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Mar 2025 08:28:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196943
IP: 45.140.26.0/23
IP: 45.140.40.0/23
IP: 91.224.74.0/23
IP: 91.228.200.0/22
IP: 91.230.247.0/24
IP: 91.231.188.0/22
IP: 2a10:d180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:dd:c1:85:98:d7:41:b8:67:d3:b5:bb:24:36:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 28 08:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:d9:99:5a:fd:86:2c:f6:8f:45:7e:6b:0c:
04:f8:f1:d8:d8:fc:5e:d0:e1:7c:48:01:62:32:34:
f4:2d:ac:1a:34:70:3e:71:78:78:4e:c3:dd:78:79:
79:ac:99:c4:68:6b:e1:1b:de:96:8d:6e:01:90:85:
94:3e:61:92:32:51:2b:f5:f9:99:cd:10:c9:63:38:
eb:1a:6d:08:12:e3:88:91:a1:27:0c:9c:0b:c2:e4:
e6:0f:26:22:04:ba:da:75:d3:56:13:b2:b2:ae:d5:
0b:07:3f:60:dc:aa:12:a4:20:37:7d:fa:e2:97:ee:
2a:ee:e5:eb:c8:12:00:f9:9d:51:2f:60:b0:70:2f:
71:c0:70:50:d6:82:9e:61:59:5a:de:41:64:a0:9a:
b3:94:c5:9c:e3:13:ee:33:56:c4:e2:f0:a8:69:c1:
2f:8b:03:ce:69:86:79:3f:9b:09:a7:a1:50:05:e1:
70:02:c0:8d:9b:6f:44:d3:2c:b4:36:59:2b:2f:6a:
df:02:3c:4c:4f:5a:dc:de:15:b3:ce:c4:94:39:e9:
d6:30:3c:26:9b:90:ea:55:21:07:e8:93:b7:7b:f6:
96:fa:bf:85:c4:7f:cf:36:32:61:9e:53:d5:7a:4e:
cd:b9:19:6a:9a:4e:e6:cb:f8:6c:79:3d:24:c6:39:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.26.0/23
45.140.40.0/23
91.224.74.0/23
91.228.200.0/22
91.230.247.0/24
91.231.188.0/22
IPv6:
2a10:d180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196943
Signature Algorithm: sha256WithRSAEncryption
37:05:4c:cf:80:ff:bf:24:6a:f9:49:5e:e5:86:4a:ee:4a:4c:
01:bc:10:f9:e2:b7:cb:a6:aa:ea:88:22:94:d6:03:13:ea:9e:
0a:7d:80:2c:86:6f:a1:de:ad:91:0e:11:88:8b:63:88:9d:ee:
0a:35:1f:2e:85:8f:48:cb:2b:f6:e8:1d:ca:31:2a:03:35:8b:
00:b0:e7:5a:a8:6a:17:ab:a8:e5:a5:e2:c6:fd:81:e3:8a:cd:
fa:9b:f0:8c:ed:c5:b2:91:de:79:f2:f3:8c:0f:06:12:d3:6b:
49:d8:2a:5d:b4:0d:c3:6c:fc:db:01:ed:f4:04:1c:9b:11:21:
b1:18:99:cb:b0:d9:2b:19:95:bf:4a:f3:ce:42:8a:89:9b:7a:
5e:8c:0e:82:c6:1c:e4:f2:76:63:a5:50:8a:35:d2:c4:1f:e7:
a7:a5:99:0e:f9:3e:d3:82:22:ab:ea:4b:e3:43:7c:99:f8:03:
74:b2:ed:d6:d7:19:6a:ff:9e:e9:39:bd:f0:a4:26:c5:23:b0:
0a:2d:45:b6:2c:47:39:9c:9a:68:9d:ac:3a:d8:4e:df:8f:7d:
fc:1b:f2:40:18:2a:ef:55:73:e9:d0:23:8c:9b:f6:55:a3:8c:
05:39:50:46:fc:9d:de:d5:22:e2:79:d5:dd:d3:16:f0:19:31:
41:d7:e5:bc
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZXb3cGFmNdBuGfTtbskNr1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI4MDgyODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjVlOTNmOTAyMzU0Y2U0ODA0YjRjYjA0OWNmNjhiMjBmNzZhZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7bZmVr9hiz2j0V+awwE+PHY2Pxe
0OF8SAFiMjT0LawaNHA+cXh4TsPdeHl5rJnEaGvhG96WjW4BkIWUPmGSMlEr9fmZ
zRDJYzjrGm0IEuOIkaEnDJwLwuTmDyYiBLraddNWE7KyrtULBz9g3KoSpCA3ffri
l+4q7uXryBIA+Z1RL2CwcC9xwHBQ1oKeYVla3kFkoJqzlMWc4xPuM1bE4vCoacEv
iwPOaYZ5P5sJp6FQBeFwAsCNm29E0yy0NlkrL2rfAjxMT1rc3hWzzsSUOenWMDwm
m5DqVSEH6JO3e/aW+r+FxH/PNjJhnlPVek7NuRlqmk7my/hseT0kxjkH4QIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFK9ek/kCNUzkgEtMsEnPaLIPdq6yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2Y0MDA0
Yi1kNjAyLTQ3NWQtOTMxYi03ZTA1YWQwMTkwY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZjQwMDRi
LWQ2MDItNDc1ZC05MzFiLTdlMDVhZDAxOTBjZS8xL3IxNlQtUUkxVE9TQVMweXdT
Yzlvc2c5MnJySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQBLYwaAwQBLYwoAwQBW+BKAwQCW+TIAwQAW+b3
AwQCW+e8MA0EAgACMAcDBQMqENGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMB
TzANBgkqhkiG9w0BAQsFAAOCAQEANwVMz4D/vyRq+Ule5YZK7kpMAbwQ+eK3y6aq
6ogilNYDE+qeCn2ALIZvod6tkQ4RiItjiJ3uCjUfLoWPSMsr9ugdyjEqAzWLALDn
WqhqF6uo5aXixv2B44rN+pvwjO3FspHeefLzjA8GEtNrSdgqXbQNw2z82wHt9AQc
mxEhsRiZy7DZKxmVv0rzzkKKiZt6XowOgsYc5PJ2Y6VQijXSxB/np6WZDvk+04Ii
q+pL40N8mfgDdLLt1tcZav+e6Tm98KQmxSOwCi1FtixHOZyaaJ2sOthO3499/Bvy
QBgq71Vz6dAjjJv2VaOMBTlQRvyd3tUi4nnV3dMW8BkxQdflvA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:08 2025 by rpki-client