Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
File: 8dBXL-cpkb0yhUuscWZ269rSKs4.cer (raw, json)
Hash identifier: 3kZJ0Us9Tc3+EDIBxH9P1BpblS75/lgoYCCsyGRNEV8=
Subject key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946400377B0DD2BAACAE1A83E132DAAC5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 14 Jan 2025 08:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48280
AS: 52112
IP: 91.207.13.0/24
IP: 2a13:9640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:00:37:7b:0d:d2:ba:ac:ae:1a:83:e1:32:da:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 08:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:7f:d1:8e:19:39:9e:7b:c4:68:de:24:a3:
a0:ef:80:1b:1c:fd:14:50:ee:0b:ae:e9:d5:3c:47:
81:6b:18:75:2d:03:86:21:8b:43:4d:51:7c:f9:9f:
90:68:28:b3:fa:3d:d9:34:78:a4:fe:a9:bd:62:2d:
04:de:39:b5:5d:0c:5e:41:d7:76:d6:d7:55:fa:96:
1d:1b:1f:8a:02:b2:b7:7c:71:ca:78:75:1d:b0:2d:
ad:74:e9:ac:05:00:65:af:15:98:7c:90:f0:a5:a7:
6f:33:ea:b8:de:c3:4d:a0:a0:3f:d1:ee:66:99:08:
45:21:96:ec:54:5c:17:97:b7:63:e3:2d:0f:83:a7:
cb:7b:ea:1e:6a:1e:e6:5d:e2:17:1b:a1:48:4d:65:
5e:07:75:eb:83:ff:43:2d:72:76:87:21:45:54:38:
a3:cb:f8:8b:63:f5:d2:b1:cd:dc:3d:13:25:87:54:
70:d5:05:e5:ef:52:17:05:29:ed:58:7f:2c:9d:db:
fd:d3:78:ff:3c:1f:d4:fe:32:e0:47:4c:02:5e:00:
9c:85:49:01:2e:db:47:2a:76:63:d6:71:d8:b6:9f:
81:3a:b2:7b:b3:53:2f:bb:c0:ca:cb:b1:a4:4d:0b:
21:92:e8:ad:c3:71:c3:73:f3:bb:7e:2f:bd:04:25:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.13.0/24
IPv6:
2a13:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48280
52112
Signature Algorithm: sha256WithRSAEncryption
9a:ee:9c:75:b2:fa:6b:8a:6d:a5:54:43:49:d3:fe:ef:c9:4f:
df:ca:07:f3:88:d9:0d:c2:6e:f7:bc:66:82:e2:07:43:9d:f2:
fc:7b:6d:8c:f8:70:68:cb:40:9b:c9:9b:65:48:0b:d4:89:15:
9f:c2:f1:0f:b0:3e:1c:ff:f3:90:d7:08:c2:cc:9b:02:5d:a8:
8d:87:5f:f0:1e:17:10:2f:b0:da:5c:bb:88:88:01:d8:a5:9e:
62:6d:28:e2:c1:3a:bd:5c:48:29:37:61:f3:00:f1:55:09:43:
99:5c:91:ce:e5:c6:d1:d7:0e:f3:d9:01:0a:a5:00:bf:01:68:
76:b3:22:a7:d0:bc:14:21:34:99:30:a5:f6:cc:84:0d:30:2e:
16:8a:fc:fa:0f:a6:fa:bb:e3:b0:22:97:93:68:9f:f4:ba:3f:
2d:4c:2e:21:ce:33:27:d9:35:a8:f0:83:05:20:2e:5c:6e:30:
8b:d5:b5:55:ae:6a:ce:16:f4:f1:ed:51:33:a9:f3:84:18:72:
21:f8:4e:3a:8c:d1:5b:d6:17:17:74:12:d3:fd:64:2a:a5:a4:
f5:a9:75:7d:12:f5:1b:0c:10:12:65:07:1a:bd:dc:08:41:96:
db:a6:a7:67:ee:53:c3:d1:84:38:a1:6c:50:61:c9:af:08:7e:
a6:e4:f9:5f
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAZRkADd7DdK6rK4ag+Ey2qxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE0MDg0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWQwNTcyZmU3Mjk5MWJkMzI4NTRiYWM3MTY2NzZlYmRhZDIyYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vN/0Y4ZOZ57xGjeJKOg74AbHP0U
UO4LrunVPEeBaxh1LQOGIYtDTVF8+Z+QaCiz+j3ZNHik/qm9Yi0E3jm1XQxeQdd2
1tdV+pYdGx+KArK3fHHKeHUdsC2tdOmsBQBlrxWYfJDwpadvM+q43sNNoKA/0e5m
mQhFIZbsVFwXl7dj4y0Pg6fLe+oeah7mXeIXG6FITWVeB3Xrg/9DLXJ2hyFFVDij
y/iLY/XSsc3cPRMlh1Rw1QXl71IXBSntWH8sndv903j/PB/U/jLgR0wCXgCchUkB
LttHKnZj1nHYtp+BOrJ7s1Mvu8DKy7GkTQshkuitw3HDc/O7fi+9BCUmewIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFPHQVy/nKZG9MoVLrHFmduva0irOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzMGRl
ODRiLTQwMGEtNGZkMS1hYjhhLWU3NjE2ZTI0NWI0OS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMw
ZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvRjFEMDU3MkZFNzI5
OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
AFvPDTANBAIAAjAHAwUDKhOWQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvJgC
AwDLkDANBgkqhkiG9w0BAQsFAAOCAQEAmu6cdbL6a4ptpVRDSdP+78lP38oH84jZ
DcJu97xmguIHQ53y/HttjPhwaMtAm8mbZUgL1IkVn8LxD7A+HP/zkNcIwsybAl2o
jYdf8B4XEC+w2ly7iIgB2KWeYm0o4sE6vVxIKTdh8wDxVQlDmVyRzuXG0dcO89kB
CqUAvwFodrMip9C8FCE0mTCl9syEDTAuFor8+g+m+rvjsCKXk2if9Lo/LUwuIc4z
J9k1qPCDBSAuXG4wi9W1Va5qzhb08e1RM6nzhBhyIfhOOozRW9YXF3QS0/1kKqWk
9al1fRL1GwwQEmUHGr3cCEGW26anZ+5Tw9GEOKFsUGHJrwh+puT5Xw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:15 2025 by rpki-client