Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
File: 2cm69G1slNJ84SjaO2W1o7Bts4s.cer (raw, json)
Hash identifier: G2iJ0JMeRq65zrL+Kf+G7sO7h6P4x3RQLSjv/8TatYU=
Subject key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427481308F6E51D5C1B691E2BC131A31C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212122
IP: 185.228.249.0/24
IP: 2a10:ab80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:13:08:f6:e5:1d:5c:1b:69:1e:2b:c1:31:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:59:40:a5:14:cb:24:ea:6d:4b:97:d0:f2:
e5:d1:08:0c:a7:0d:7e:4e:a1:6e:35:24:8a:18:08:
0c:32:7b:66:8d:3e:be:8a:14:b6:5d:a8:cf:ec:83:
aa:34:b1:50:05:e5:53:6b:ec:aa:c5:68:1d:c8:cc:
92:c9:4b:a8:a8:11:91:b6:44:ea:ad:ea:17:3a:52:
c6:be:a6:30:17:e3:5b:02:d0:b9:7b:0c:8e:1e:f1:
c6:a9:1b:61:58:0f:63:91:04:83:fe:3d:d3:05:65:
9c:47:c0:9a:34:e6:32:d8:7c:d8:28:1e:3f:2c:54:
1d:9c:8b:26:58:0e:39:ed:17:d0:31:59:d2:8c:60:
8b:3f:9b:58:5d:ed:8b:79:4d:84:f7:94:6c:12:72:
7e:48:ba:18:d0:00:5b:72:04:83:b3:11:e4:48:ee:
45:18:9c:48:d3:15:d5:18:0f:ce:e2:49:0e:e7:a6:
e1:b0:40:01:6e:7b:8d:fc:73:b3:fa:a9:98:42:ef:
f8:9c:8e:11:ab:de:50:1a:16:6d:66:7f:dc:12:56:
b7:66:af:41:b4:6c:87:f8:b8:b7:3a:2f:55:e6:da:
f9:84:99:d4:2c:73:50:42:94:bf:aa:2b:59:be:5b:
a3:64:ab:3a:a3:e3:2e:ca:27:ba:fc:11:db:88:33:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
IPv6:
2a10:ab80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212122
Signature Algorithm: sha256WithRSAEncryption
16:e9:6e:0d:07:fd:c7:50:4d:b1:c6:e9:c3:0e:1d:a3:a0:3d:
01:d0:31:87:bf:8f:00:a9:10:e9:88:61:37:ee:d7:e8:d4:69:
26:a9:7b:23:df:97:ff:6a:2c:3c:1f:9f:bd:45:29:58:ed:07:
b2:0d:25:dd:aa:9b:68:a7:94:db:10:83:60:82:48:00:a9:c4:
e3:26:af:01:31:eb:75:07:63:08:ab:b5:12:05:27:a5:53:b3:
d3:70:b1:b7:dd:01:7e:8e:52:80:7e:39:0f:3e:d1:b2:e2:63:
09:c6:80:94:a1:69:94:5f:5c:37:b8:c9:f8:a6:33:62:d1:12:
dd:f1:f4:f4:d6:6a:7b:6c:4a:51:2e:39:37:20:03:86:89:a2:
84:c1:b4:01:16:31:8e:36:a1:91:15:a1:70:1d:0b:7a:04:5f:
c3:88:97:f3:f1:a0:49:c8:9a:f0:f1:b7:7c:7d:a5:f5:8b:65:
e3:0c:38:4f:63:73:7a:46:48:ed:56:fa:6e:e7:e4:1e:9d:77:
79:3a:91:a4:81:9b:20:2f:98:fa:9e:da:bf:f1:0d:e3:9a:cd:
0c:0c:e7:49:d7:00:94:9c:a5:8c:3c:e8:d7:49:49:54:8e:7b:
51:f2:ff:1e:87:d0:ae:9b:8c:a6:c2:58:de:65:61:f2:5b:19:
85:82:c2:35
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQnSBMI9uUdXBtpHivBMaMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWM5YmFmNDZkNmM5NGQyN2NlMTI4ZGEzYjY1YjVhM2IwNmRiMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NBZQKUUyyTqbUuX0PLl0QgMpw1+
TqFuNSSKGAgMMntmjT6+ihS2XajP7IOqNLFQBeVTa+yqxWgdyMySyUuoqBGRtkTq
reoXOlLGvqYwF+NbAtC5ewyOHvHGqRthWA9jkQSD/j3TBWWcR8CaNOYy2HzYKB4/
LFQdnIsmWA457RfQMVnSjGCLP5tYXe2LeU2E95RsEnJ+SLoY0ABbcgSDsxHkSO5F
GJxI0xXVGA/O4kkO56bhsEABbnuN/HOz+qmYQu/4nI4Rq95QGhZtZn/cEla3Zq9B
tGyH+Li3Oi9V5tr5hJnULHNQQpS/qitZvlujZKs6o+Muyie6/BHbiDMy8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNnJuvRtbJTSfOEo2jtltaOwbbOLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0Lzk0Zjk4
Yy1jMWQxLTRmZTItOWFkYy1hMDEwZDhlNGZhZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTRmOThj
LWMxZDEtNGZlMi05YWRjLWEwMTBkOGU0ZmFmMC8xLzJjbTY5RzFzbE5KODRTamFP
MlcxbzdCdHM0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAueT5MA0EAgACMAcDBQMqEKuAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8mjANBgkqhkiG9w0BAQsFAAOCAQEAFuluDQf9x1BN
scbpww4do6A9AdAxh7+PAKkQ6YhhN+7X6NRpJql7I9+X/2osPB+fvUUpWO0Hsg0l
3aqbaKeU2xCDYIJIAKnE4yavATHrdQdjCKu1EgUnpVOz03Cxt90Bfo5SgH45Dz7R
suJjCcaAlKFplF9cN7jJ+KYzYtES3fH09NZqe2xKUS45NyADhomihMG0ARYxjjah
kRWhcB0LegRfw4iX8/GgScia8PG3fH2l9Ytl4ww4T2NzekZI7Vb6bufkHp13eTqR
pIGbIC+Y+p7av/EN45rNDAznSdcAlJyljDzo10lJVI57UfL/HofQrpuMpsJY3mVh
8lsZhYLCNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:55 2025 by rpki-client