Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.cer (raw, json)
Hash identifier: yr+NVld5NP6CW5gi7F6SxUk6TgyZ0qgVxOb3SXqhOK0=
Subject key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DA22298E2C173AA01BCB9418925A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41031
AS: 49544
AS: 57088
AS: 206570
IP: 5.180.216.0/22
IP: 5.200.0.0/19
IP: 31.204.128.0/19
IP: 89.104.168.0 -- 89.104.191.255
IP: 91.195.234.0/23
IP: 91.198.152.0/24
IP: 91.216.207.0/24
IP: 104.153.84.0/22
IP: 109.200.192.0/19
IP: 138.128.136.0/21
IP: 146.247.72.0/21
IP: 162.244.52.0/22
IP: 162.245.204.0/22
IP: 185.41.140.0/22
IP: 185.50.104.0/22
IP: 185.52.12.0/22
IP: 185.179.200.0/22
IP: 185.197.24.0/22
IP: 188.122.64.0/19
IP: 193.43.218.0/23
IP: 212.19.224.0 -- 212.19.233.255
IP: 212.19.237.0 -- 212.19.255.255
IP: 213.163.64.0/19
IP: 213.179.192.0/19
IP: 2a00:1630::/29
IP: 2a00:1d20::/29
IP: 2a01:9580::/32
IP: 2a04:c600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:da:22:29:8e:2c:17:3a:a0:1b:cb:94:18:92:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:0b:e9:3c:4f:e6:c4:27:ac:7b:fd:6e:8c:
51:8b:56:f4:24:45:ab:bd:67:83:0a:3f:56:d5:a5:
08:9f:65:a3:35:ac:53:5d:28:18:d8:24:07:8b:58:
e4:c9:b0:bb:91:27:dc:d3:95:d9:18:91:ed:59:25:
5e:9a:56:73:09:5f:ca:5c:58:8c:32:47:2b:af:76:
ed:c1:e6:0f:56:20:13:3a:19:b3:24:79:3b:e3:9d:
03:41:13:ba:cb:8d:ac:54:83:46:57:0c:ca:61:f8:
fb:eb:9b:d7:b2:03:a2:ff:7a:42:b5:04:52:1e:81:
73:2c:7e:61:6e:e0:fe:0f:05:3b:73:bc:9c:8c:44:
6d:69:0d:69:39:6d:79:53:f0:d1:4f:0e:f0:2d:ab:
19:56:7a:55:8e:b4:be:78:29:f9:c5:e6:14:c1:16:
b6:ef:59:a5:77:09:bd:c9:71:51:73:b0:59:c9:0f:
5b:34:1b:87:53:4e:f4:7f:75:d5:98:e8:e1:2c:4f:
f9:f2:2d:b9:0f:0a:9b:f0:24:5d:c1:bc:e7:d3:d9:
b0:b9:2b:eb:02:d6:20:ba:4d:1e:db:3f:74:ff:f1:
51:2a:39:2b:44:de:9b:a5:62:d9:4d:76:c7:3a:7a:
fe:f4:38:d9:94:59:e9:fd:89:e3:45:86:af:68:05:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.216.0/22
5.200.0.0/19
31.204.128.0/19
89.104.168.0-89.104.191.255
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.72.0/21
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0-212.19.233.255
212.19.237.0-212.19.255.255
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41031
49544
57088
206570
Signature Algorithm: sha256WithRSAEncryption
a8:4f:c5:86:7d:58:c3:71:bc:76:d7:ae:d1:10:45:11:9b:21:
f5:d5:85:68:a6:c6:ea:2d:fb:c1:b9:22:1c:47:e8:b2:08:50:
b4:75:72:b0:aa:b3:7b:f6:a4:bb:f7:0a:fb:4e:e6:4c:ee:f5:
e5:d5:cb:70:13:f2:d2:42:dc:e3:6b:5f:af:da:4d:14:ec:6f:
4a:da:5a:76:8c:2c:c3:9a:ed:06:ed:a8:3f:dd:96:69:90:c6:
1b:40:66:28:25:c3:ee:8d:23:62:8f:1d:5f:83:0c:5b:25:3f:
bb:ce:f9:62:b0:c1:df:83:d2:23:37:18:45:72:0f:ef:d4:f1:
27:8b:bb:89:2e:f7:69:05:bb:80:bb:54:13:9c:ec:2f:6d:e5:
7a:29:54:75:4e:0a:7f:73:40:67:21:77:f8:20:00:3d:2a:ea:
cd:9b:ea:ab:d3:e7:40:aa:55:1d:30:89:74:3d:65:e2:e2:4a:
0d:10:81:38:9b:50:e5:46:e0:4d:0e:be:c0:10:23:9a:1f:36:
fb:33:e6:58:58:37:01:1d:0b:d2:ae:eb:3c:b4:b1:8e:bf:16:
b6:9c:64:31:f2:21:e5:9f:70:ff:4c:fe:d8:75:6f:e5:cf:1d:
93:dc:83:3a:7a:45:2d:ab:ca:92:37:5a:2a:43:8a:db:53:76:
56:bc:8f:a8
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISAZQj1toiKY4sFzqgG8uUGJJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDE3MDNkYjMwMjBjYzFlZjJmZDcxMDkxYTQ2OGY0YTY0OWMyMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj0L6TxP5sQnrHv9boxRi1b0JEWr
vWeDCj9W1aUIn2WjNaxTXSgY2CQHi1jkybC7kSfc05XZGJHtWSVemlZzCV/KXFiM
Mkcrr3btweYPViATOhmzJHk7450DQRO6y42sVINGVwzKYfj765vXsgOi/3pCtQRS
HoFzLH5hbuD+DwU7c7ycjERtaQ1pOW15U/DRTw7wLasZVnpVjrS+eCn5xeYUwRa2
71mldwm9yXFRc7BZyQ9bNBuHU070f3XVmOjhLE/58i25Dwqb8CRdwbzn09mwuSvr
AtYguk0e2z90//FRKjkrRN6bpWLZTXbHOnr+9DjZlFnp/YnjRYavaAUG2QIDAQAB
o4IDeTCCA3UwHQYDVR0OBBYEFNQXA9swIMwe8v1xCRpGj0pknCOPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzY4NTU0
Yi00Zjk3LTQwNmMtOTBhNi00OGQzMWM3NWYzMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNjg1NTRi
LTRmOTctNDA2Yy05MGE2LTQ4ZDMxYzc1ZjMxZS8xLzFCY0QyekFnekI3eV9YRUpH
a2FQU21TY0k0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHoBggrBgEF
BQcBBwEB/wSB2DCB1TCBrgQCAAEwgacDBAIFtNgDBAUFyAADBAUfzIAwDAMEA1lo
qAMEBllogAMEAVvD6gMEAFvGmAMEAFvYzwMEAmiZVAMEBW3IwAMEA4qAiAMEA5L3
SAMEAqL0NAMEAqL1zAMEArkpjAMEArkyaAMEArk0DAMEArmzyAMEArnFGAMEBbx6
QAMEAcEr2jAMAwQF1BPgAwQB1BPoMAsDBADUE+0DAwLUEAMEBdWjQAMEBdWzwDAi
BAIAAjAcAwUDKgAWMAMFAyoAHSADBQAqAZWAAwUDKgTGADApBggrBgEFBQcBCAEB
/wQaMBigFjAUAgMAoEcCAwDBiAIDAN8AAgMDJuowDQYJKoZIhvcNAQELBQADggEB
AKhPxYZ9WMNxvHbXrtEQRRGbIfXVhWimxuot+8G5IhxH6LIIULR1crCqs3v2pLv3
CvtO5kzu9eXVy3AT8tJC3ONrX6/aTRTsb0raWnaMLMOa7QbtqD/dlmmQxhtAZigl
w+6NI2KPHV+DDFslP7vO+WKwwd+D0iM3GEVyD+/U8SeLu4ku92kFu4C7VBOc7C9t
5XopVHVOCn9zQGchd/ggAD0q6s2b6qvT50CqVR0wiXQ9ZeLiSg0QgTibUOVG4E0O
vsAQI5ofNvsz5lhYNwEdC9Ku6zy0sY6/FracZDHyIeWfcP9M/th1b+XPHZPcgzp6
RS2rypI3WipDittTdla8j6g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:18 2025 by rpki-client