Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer (raw, json)
Hash identifier: HeSGceu90VvbIMwMlkA3uoVmhAfl1ZxCJ6SoDoVfKmQ=
Subject key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195B318BE2E351600058CF5A8E06B00399C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Mar 2025 10:28:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60150
AS: 202592
IP: 43.240.148.0/22
IP: 45.12.100.0/22
IP: 91.109.44.0/22
IP: 147.185.196.0/23
IP: 147.185.206.0/23
IP: 185.96.56.0/22
IP: 185.136.16.0/22
IP: 193.160.220.0/22
IP: 193.168.200.0/22
IP: 194.38.48.0/22
IP: 207.244.196.0/22
IP: 207.244.208.0/22
IP: 2a05:ff00::/29
IP: 2a07:5b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:18:be:2e:35:16:00:05:8c:f5:a8:e0:6b:00:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 10:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:0f:c5:55:b0:97:04:23:34:26:e3:70:df:
6e:ee:b9:56:a9:04:0f:9a:20:08:6b:91:ee:a7:82:
f0:2a:82:12:e4:91:a8:9f:23:86:6b:de:19:4f:28:
aa:04:a4:e6:dd:27:e2:f1:31:d2:83:fb:dc:2a:81:
f4:62:1a:3a:c3:50:25:2c:d9:bb:42:d6:44:db:78:
dd:b0:ab:1a:55:ac:cc:1d:a5:cd:80:2b:b2:14:db:
78:50:2b:e0:fd:15:33:75:bd:40:ba:27:c6:69:3b:
9d:97:b3:eb:99:a2:e3:ca:fc:ea:87:5d:1d:d4:27:
33:7e:f1:ce:f6:67:1d:d1:b3:67:c4:a2:83:aa:2d:
07:52:9d:72:b4:bb:aa:59:2a:ce:f1:83:46:66:f3:
6f:8a:af:83:2b:fd:3f:2f:f4:60:c6:da:01:b0:48:
37:1e:17:da:6e:5d:26:df:25:9a:09:b7:d6:3a:7d:
23:22:f3:50:de:19:1f:7e:0b:47:ad:24:18:fb:36:
47:e7:71:6a:a6:95:17:90:de:f1:2f:48:97:04:a7:
cd:a5:a2:a7:69:1b:c2:7c:22:24:9d:01:71:3b:eb:
73:93:b5:38:e6:e0:cd:65:19:65:94:02:63:fd:48:
d7:c8:e4:f3:40:78:5e:4c:45:aa:e2:fe:b7:4f:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
91.109.44.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60150
202592
Signature Algorithm: sha256WithRSAEncryption
27:8c:a9:19:21:50:da:e7:81:92:06:52:b9:ac:dd:3e:d0:8e:
70:d2:13:16:2c:05:ab:c4:cf:3c:0d:3b:2c:af:1b:74:e8:62:
91:4f:85:ee:43:30:cb:8e:fc:01:19:17:0c:63:82:ea:c5:4e:
56:b9:52:15:a7:c5:4c:0c:25:f6:e7:0a:be:eb:95:4c:41:12:
07:6a:69:a1:a4:f0:06:15:90:17:31:11:a8:12:f7:94:10:0f:
10:03:4b:0b:74:8a:ad:d9:7e:bc:c2:55:c6:38:a0:0e:16:05:
61:78:5e:a1:4c:13:31:7c:82:4e:2c:7b:61:8c:c3:08:8d:d7:
6b:e2:81:de:a8:89:e8:9f:33:67:e6:23:3e:d6:bf:6f:39:37:
44:6c:49:9f:7f:10:ef:c6:c7:b8:14:2f:25:fd:3b:e4:2e:e6:
85:9b:2c:a9:63:14:21:84:cb:dc:04:97:15:9f:1c:21:3c:49:
ac:93:34:93:de:60:33:5f:f1:97:43:1e:a7:79:20:81:33:6a:
f5:d9:ce:09:72:65:14:7a:31:72:db:67:8d:98:72:f1:fa:06:
89:0b:cc:5f:76:02:89:b4:16:05:c4:bd:77:9e:f8:26:8d:72:
e2:92:54:4d:3c:af:10:09:e9:f1:12:7e:de:ad:0b:d9:72:c4:
be:9e:ca:9d
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgISAZWzGL4uNRYABYz1qOBrADmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzIwMTAyODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDhkYTljZjAwZDRkNThiODU0ZmZjNjIwMTBmMjM1YjA2ZGYzNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWEPxVWwlwQjNCbjcN9u7rlWqQQP
miAIa5Hup4LwKoIS5JGonyOGa94ZTyiqBKTm3Sfi8THSg/vcKoH0Yho6w1AlLNm7
QtZE23jdsKsaVazMHaXNgCuyFNt4UCvg/RUzdb1AuifGaTudl7PrmaLjyvzqh10d
1CczfvHO9mcd0bNnxKKDqi0HUp1ytLuqWSrO8YNGZvNviq+DK/0/L/RgxtoBsEg3
Hhfabl0m3yWaCbfWOn0jIvNQ3hkffgtHrSQY+zZH53FqppUXkN7xL0iXBKfNpaKn
aRvCfCIknQFxO+tzk7U45uDNZRlllAJj/UjXyOTzQHheTEWq4v63T93P5wIDAQAB
o4IC/TCCAvkwHQYDVR0OBBYEFNCNqc8A1NWLhU/8YgEPI1sG3zVKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2ZlYmVm
OC1hMGVhLTRjN2UtODgwNi0yMGUxOTc4MGNiMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZmViZWY4
LWEwZWEtNGM3ZS04ODA2LTIwZTE5NzgwY2IyZS8xLzBJMnB6d0RVMVl1RlRfeGlB
UThqV3diZk5Vby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF
BwEHAQH/BGgwZjBOBAIAATBIAwQCK/CUAwQCLQxkAwQCW20sAwQBk7nEAwQBk7nO
AwQCuWA4AwQCuYgQAwQCwaDcAwQCwajIAwQCwiYwAwQCz/TEAwQCz/TQMBQEAgAC
MA4DBQMqBf8AAwUDKgdbQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA6vYCAwMX
YDANBgkqhkiG9w0BAQsFAAOCAQEAJ4ypGSFQ2ueBkgZSuazdPtCOcNITFiwFq8TP
PA07LK8bdOhikU+F7kMwy478ARkXDGOC6sVOVrlSFafFTAwl9ucKvuuVTEESB2pp
oaTwBhWQFzERqBL3lBAPEANLC3SKrdl+vMJVxjigDhYFYXheoUwTMXyCTix7YYzD
CI3Xa+KB3qiJ6J8zZ+YjPta/bzk3RGxJn38Q78bHuBQvJf075C7mhZssqWMUIYTL
3ASXFZ8cITxJrJM0k95gM1/xl0Mep3kggTNq9dnOCXJlFHoxcttnjZhy8foGiQvM
X3YCibQWBcS9d574Jo1y4pJUTTyvEAnp8RJ+3q0L2XLEvp7KnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:12 2025 by rpki-client