Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
File: B7egwbq9Yh6CINDXd4d6hEtBPBA.cer (raw, json)
Hash identifier: IFaClVhqZcpCbgZKLopSkIZOM5Tg0Ij83JLJJc3eNnI=
Subject key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73FA11E6658EF883068F652F9AC6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.203.2.0/23
IP: 193.203.16.0/23
IP: 2a0f:e280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3f:a1:1e:66:58:ef:88:30:68:f6:52:f9:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07b7a0c1babd621e8220d0d777877a844b413c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:47:8b:02:1c:2f:aa:8f:b9:af:68:59:ea:
70:26:94:01:9b:86:5f:2d:9f:fd:0b:85:a2:be:82:
7f:f6:b7:1d:2c:5a:25:1b:61:15:4a:41:6b:54:b5:
d8:f5:5b:0c:ab:45:c6:d7:98:93:41:d3:0b:b7:d3:
c5:76:e1:82:94:c8:f1:ae:4e:91:94:9e:8f:e2:b6:
ce:0c:94:9b:ee:30:26:b1:59:c0:54:f6:99:40:21:
54:6e:20:b2:e1:ce:d8:76:a4:3b:57:ae:61:dc:13:
b8:33:cd:9c:8d:70:41:91:5b:55:c7:c1:d0:eb:6d:
7d:52:5b:5a:bc:5e:d8:95:54:eb:5a:17:87:4f:f8:
62:5e:07:fa:c9:02:03:4f:a0:01:7a:b1:fb:68:28:
1a:45:3b:bf:2d:50:a3:c0:d0:d7:a1:6e:2c:f3:45:
22:e3:77:09:bc:3d:55:20:a3:d7:4f:d2:56:9c:b9:
d5:06:0a:86:04:73:ca:4a:ac:16:c3:15:bd:21:2c:
90:f6:79:56:e0:12:37:c6:05:4f:bc:3c:ce:98:12:
e3:20:11:1f:71:43:f8:82:37:d6:0f:70:b7:48:be:
22:df:46:ae:07:88:ed:97:7c:97:2d:ee:9b:a3:a2:
34:c0:25:7b:13:90:56:aa:ef:9d:b6:a4:fc:76:04:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.2.0/23
193.203.16.0/23
IPv6:
2a0f:e280::/29
Signature Algorithm: sha256WithRSAEncryption
16:62:c8:ed:3e:85:bc:3a:a2:ae:cf:5e:92:90:0a:93:1d:1d:
8e:28:3f:3c:db:4f:09:9c:ee:46:98:43:62:77:a4:7b:84:7a:
60:fb:99:46:1b:00:0c:1b:21:da:c8:c9:fb:10:3f:db:95:1a:
bb:4e:d4:56:01:49:2f:5f:25:0a:46:fc:31:31:cc:85:8f:a4:
91:ab:8c:ff:d8:d7:2d:f0:2e:38:0e:ff:4a:6c:15:1e:ce:dd:
4d:d3:0d:e9:2c:b6:65:37:0b:9a:b3:aa:cf:62:34:98:b3:3f:
8f:47:e0:9b:9b:93:7e:4e:42:c4:07:43:03:5e:b1:5b:30:ec:
a5:3a:dd:fc:f0:fe:c6:09:58:85:49:a5:a7:32:6c:71:c6:4e:
6e:5f:48:e5:25:8c:55:2f:1b:96:48:c6:72:69:33:9b:8b:7f:
22:18:25:09:b8:f8:1e:20:a1:78:a8:b6:b2:5e:64:c3:f4:24:
41:10:fe:d0:a2:67:5f:79:22:65:9b:cf:eb:da:06:40:c4:75:
f5:d9:ef:ad:42:7e:6b:e7:33:9e:aa:50:a9:33:ad:9e:36:40:
a6:be:a3:48:8f:77:2c:b2:cc:c2:b2:b1:33:8c:97:ad:07:74:
79:8b:2a:da:e4:2a:1f:c9:05:6d:81:9b:2b:de:84:0c:5c:8c:
1b:7d:68:a4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQj1z+hHmZY74gwaPZS+axsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2I3YTBjMWJhYmQ2MjFlODIyMGQwZDc3Nzg3N2E4NDRiNDEzYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy5HiwIcL6qPua9oWepwJpQBm4Zf
LZ/9C4WivoJ/9rcdLFolG2EVSkFrVLXY9VsMq0XG15iTQdMLt9PFduGClMjxrk6R
lJ6P4rbODJSb7jAmsVnAVPaZQCFUbiCy4c7YdqQ7V65h3BO4M82cjXBBkVtVx8HQ
6219UltavF7YlVTrWheHT/hiXgf6yQIDT6ABerH7aCgaRTu/LVCjwNDXoW4s80Ui
43cJvD1VIKPXT9JWnLnVBgqGBHPKSqwWwxW9ISyQ9nlW4BI3xgVPvDzOmBLjIBEf
cUP4gjfWD3C3SL4i30auB4jtl3yXLe6bo6I0wCV7E5BWqu+dtqT8dgQqFQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFAe3oMG6vWIegiDQ13eHeoRLQTwQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzVjM2Zj
My0zNWU4LTRhMGMtYTMwZi1mYjkyMTcwMjhjNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNWMzZmMz
LTM1ZTgtNGEwYy1hMzBmLWZiOTIxNzAyOGM1Yy8xL0I3ZWd3YnE5WWg2Q0lORFhk
NGQ2aEV0QlBCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBwcsCAwQBwcsQMA0EAgACMAcDBQMqD+KAMA0G
CSqGSIb3DQEBCwUAA4IBAQAWYsjtPoW8OqKuz16SkAqTHR2OKD88208JnO5GmENi
d6R7hHpg+5lGGwAMGyHayMn7ED/blRq7TtRWAUkvXyUKRvwxMcyFj6SRq4z/2Nct
8C44Dv9KbBUezt1N0w3pLLZlNwuas6rPYjSYsz+PR+Cbm5N+TkLEB0MDXrFbMOyl
Ot388P7GCViFSaWnMmxxxk5uX0jlJYxVLxuWSMZyaTObi38iGCUJuPgeIKF4qLay
XmTD9CRBEP7QomdfeSJlm8/r2gZAxHX12e+tQn5r5zOeqlCpM62eNkCmvqNIj3cs
sszCsrEzjJetB3R5iyra5CofyQVtgZsr3oQMXIwbfWik
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:53 2025 by rpki-client