Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer (raw, json)
Hash identifier: lvbJTuO5ntmgP5v5cRPi/0q+qgZJZRC0nh20P1pBcBY=
Subject key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F08C11C5EAEB107F3CC71B49A8B7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30962
AS: 31243
AS: 39123
AS: 41108
IP: 45.129.240.0/22
IP: 62.108.32.0/19
IP: 84.19.0.0/19
IP: 89.107.64.0/21
IP: 91.190.144.0/21
IP: 91.228.52.0/23
IP: 91.228.104.0/22
IP: 91.229.229.0/24
IP: 91.229.248.0/24
IP: 91.230.27.0/24
IP: 91.230.47.0/24
IP: 93.190.88.0/21
IP: 185.131.207.0/24
IP: 185.147.216.0/22
IP: 185.148.68.0/22
IP: 193.25.100.0/23
IP: 194.113.216.0/23
IP: 195.62.20.0/23
IP: 195.88.44.0/23
IP: 195.110.20.0/23
IP: 195.191.114.0/23
IP: 195.225.240.0/22
IP: 2001:67c:12a0::/48
IP: 2a00:f70::/32
IP: 2a03:f200::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:08:c1:1c:5e:ae:b1:07:f3:cc:71:b4:9a:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:c7:a3:21:c3:74:ff:9f:fd:53:aa:24:e0:
a3:6f:79:d8:af:e1:84:d5:55:c5:e9:64:92:a9:0e:
a3:35:e5:50:6f:c2:62:e0:24:84:e5:bb:3c:7d:a4:
c8:b9:1a:81:59:f8:53:99:8d:a6:e5:97:02:e4:d7:
bc:35:b6:5a:5e:aa:74:75:4f:8f:63:dc:89:30:ab:
b9:62:b8:94:dd:08:23:b3:6f:6d:c1:86:9e:c7:52:
60:63:04:d9:a1:fe:03:64:9d:2a:08:57:e7:5f:5e:
d9:26:5b:11:d1:ee:8c:e0:40:b1:c6:b0:21:08:77:
77:ed:0d:45:25:f4:f9:fe:49:44:05:2b:3d:22:28:
fe:84:92:ce:e9:e5:24:0c:9e:68:74:c6:b0:6c:0b:
d6:60:fa:3b:a9:25:20:f5:44:dc:4a:11:14:2b:e6:
f0:df:d9:97:82:95:fa:89:85:32:cc:4c:08:0e:d9:
db:32:6c:c6:a7:ce:d0:9b:47:ba:f7:6c:95:bb:f4:
05:af:d5:25:0b:a9:c7:5d:f3:80:ab:6e:44:48:8d:
65:f2:34:e9:a0:80:cd:f2:1f:fe:19:0d:82:40:5d:
c9:39:00:e7:19:d6:2a:3c:8b:24:f1:f9:3b:a2:0c:
0b:36:f9:78:71:ff:49:dd:6e:ec:48:7c:34:6d:50:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/22
62.108.32.0/19
84.19.0.0/19
89.107.64.0/21
91.190.144.0/21
91.228.52.0/23
91.228.104.0/22
91.229.229.0/24
91.229.248.0/24
91.230.27.0/24
91.230.47.0/24
93.190.88.0/21
185.131.207.0/24
185.147.216.0/22
185.148.68.0/22
193.25.100.0/23
194.113.216.0/23
195.62.20.0/23
195.88.44.0/23
195.110.20.0/23
195.191.114.0/23
195.225.240.0/22
IPv6:
2001:67c:12a0::/48
2a00:f70::/32
2a03:f200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30962
31243
39123
41108
Signature Algorithm: sha256WithRSAEncryption
83:74:dc:2e:ae:6d:f4:b1:35:9a:de:f1:f6:c2:c9:85:52:5f:
63:aa:a1:ca:90:f5:16:20:30:41:69:ff:f9:31:33:99:ca:1c:
ba:44:27:46:7c:2d:f1:8f:c2:c5:48:bc:84:eb:97:c6:ab:2a:
ed:de:d4:0b:25:62:01:6b:3d:c1:c7:a7:29:db:1d:27:30:b6:
5b:21:94:ae:37:5f:87:04:02:ae:f0:1c:7a:3b:4c:8b:04:0e:
c7:91:9e:1e:96:ad:82:14:3f:3d:0d:b1:31:5b:cc:62:cd:7a:
1f:4d:74:25:ae:b0:d4:36:42:90:86:5f:8b:3d:20:4e:a8:f9:
65:cf:cb:3c:02:7f:07:dc:83:fb:ca:d8:e0:27:0f:3c:a6:fd:
86:b8:72:9c:66:9e:24:e7:28:05:11:c8:4d:97:f3:20:cb:84:
60:92:a1:09:ce:ea:b1:46:e7:05:29:82:7b:01:c7:b4:c9:e9:
fe:a6:0f:75:b2:40:c7:6d:d9:f8:df:9f:ed:cd:ba:4b:4d:83:
1c:e6:8f:11:ec:cc:03:27:39:c1:83:36:5e:66:dd:69:97:38:
91:38:03:83:1f:a2:ac:ce:97:4b:c7:3e:73:c1:fa:7c:8b:50:
3d:a7:a4:0b:ff:3b:2a:20:b1:53:ce:f8:da:7e:6d:a8:d9:a3:
0d:3e:2f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgISAZQljwjBHF6usQfzzHG0mot8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDI2NDdjODAxZmI1OGZjZmFhYzEzNWJiNDhmNWU2MWZlYTdlNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN/HoyHDdP+f/VOqJOCjb3nYr+GE
1VXF6WSSqQ6jNeVQb8Ji4CSE5bs8faTIuRqBWfhTmY2m5ZcC5Ne8NbZaXqp0dU+P
Y9yJMKu5YriU3Qgjs29twYaex1JgYwTZof4DZJ0qCFfnX17ZJlsR0e6M4ECxxrAh
CHd37Q1FJfT5/klEBSs9Iij+hJLO6eUkDJ5odMawbAvWYPo7qSUg9UTcShEUK+bw
39mXgpX6iYUyzEwIDtnbMmzGp87Qm0e692yVu/QFr9UlC6nHXfOAq25ESI1l8jTp
oIDN8h/+GQ2CQF3JOQDnGdYqPIsk8fk7ogwLNvl4cf9J3W7sSHw0bVAEvQIDAQAB
o4IDTzCCA0swHQYDVR0OBBYEFAAmR8gB+1j8+qwTW7SPXmH+p+VmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2NmYzA2
Zi04MmJlLTQ5ZmItYmM4Mi05NGVmYmY1Y2VjZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvY2ZjMDZm
LTgyYmUtNDlmYi1iYzgyLTk0ZWZiZjVjZWNkNC8xL0FDWkh5QUg3V1B6NnJCTmJ0
STllWWY2bjVXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHABggrBgEF
BQcBBwEB/wSBsDCBrTCBiwQCAAEwgYQDBAItgfADBAU+bCADBAVUEwADBANZa0AD
BANbvpADBAFb5DQDBAJb5GgDBABb5eUDBABb5fgDBABb5hsDBABb5i8DBANdvlgD
BAC5g88DBAK5k9gDBAK5lEQDBAHBGWQDBAHCcdgDBAHDPhQDBAHDWCwDBAHDbhQD
BAHDv3IDBALD4fAwHQQCAAIwFwMHACABBnwSoAMFACoAD3ADBQAqA/IAMCcGCCsG
AQUFBwEIAQH/BBgwFqAUMBICAnjyAgJ6CwIDAJjTAgMAoJQwDQYJKoZIhvcNAQEL
BQADggEBAIN03C6ubfSxNZre8fbCyYVSX2OqocqQ9RYgMEFp//kxM5nKHLpEJ0Z8
LfGPwsVIvITrl8arKu3e1AslYgFrPcHHpynbHScwtlshlK43X4cEAq7wHHo7TIsE
DseRnh6WrYIUPz0NsTFbzGLNeh9NdCWusNQ2QpCGX4s9IE6o+WXPyzwCfwfcg/vK
2OAnDzym/Ya4cpxmniTnKAURyE2X8yDLhGCSoQnO6rFG5wUpgnsBx7TJ6f6mD3Wy
QMdt2fjfn+3NuktNgxzmjxHszAMnOcGDNl5m3WmXOJE4A4MfoqzOl0vHPnPB+nyL
UD2npAv/OyogsVPO+Np+bajZow0+L8A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:39 2025 by rpki-client