Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
File: I7oexPA1py36OekwrY7FQ2jrevQ.cer (raw, json)
Hash identifier: rRTzrzVHuoh0VQpjzzDyUkgJUPAO/LR8yKmWMo/ijX8=
Subject key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A94CD519384522FE9755580C2DFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29576
IP: 93.157.24.0/21
IP: 194.146.132.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a9:4c:d5:19:38:45:22:fe:97:55:58:0c:2d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:e8:2b:b3:d3:e2:74:34:6f:bf:20:71:ea:
74:6d:bd:16:9d:7b:82:41:8d:a1:15:2f:cf:ae:af:
49:8a:9e:ea:58:3b:fd:34:68:a3:e5:fa:a6:cc:e3:
97:e1:f2:5b:b3:7b:b6:cf:49:11:07:c7:17:c9:21:
87:15:e1:8f:84:69:7b:91:4d:13:3c:f7:64:85:30:
d6:45:ef:e3:9d:d0:d2:f1:13:6d:e4:26:d1:83:18:
a2:72:ea:d6:6a:d9:28:9e:0f:c3:83:5e:da:13:7e:
73:26:3f:81:82:2b:2b:38:3e:e9:79:fe:a4:f3:f8:
b6:d2:e6:69:87:8a:6a:80:b8:7a:49:f4:d5:39:a5:
c3:94:5e:21:46:0d:1c:db:d0:d4:ba:90:e5:4c:e7:
ff:09:bb:f7:a8:cf:d9:d7:c7:4b:e9:86:d9:07:37:
9a:09:83:21:86:9b:3d:12:7b:b9:05:37:4e:5f:08:
60:5f:2c:c5:11:70:0e:22:af:33:56:20:87:38:fc:
28:43:bb:08:d7:ab:2c:9f:89:79:78:54:a2:fd:a9:
9e:6d:c4:a0:c5:73:12:f8:3b:bf:d0:c8:7c:b9:da:
26:88:20:b1:df:f5:2f:6d:4e:2f:57:2b:83:aa:af:
03:0b:f3:c5:b3:7b:99:7e:fb:7d:9d:0f:c0:d2:67:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
194.146.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29576
Signature Algorithm: sha256WithRSAEncryption
17:b2:68:4d:90:fa:af:a2:d3:bf:e3:e3:37:d2:3f:db:e3:71:
fe:35:bc:d3:90:22:ad:28:70:16:c2:a9:29:ff:cb:e8:d3:a0:
a9:7a:25:01:ad:7b:6f:ce:c5:16:e3:44:23:07:50:d0:de:71:
f7:a5:d0:1b:84:65:83:ed:95:5e:eb:38:2e:88:ea:c0:74:7d:
ca:ba:68:be:87:ae:db:bf:9b:46:c8:b3:a1:9b:2d:fd:f7:61:
be:6b:27:cb:7d:3e:87:bc:e3:45:fa:2c:73:a6:79:44:cd:c0:
29:72:94:c0:eb:82:f3:1b:6b:e4:85:af:cb:ce:63:db:84:28:
1b:cf:a4:72:88:af:53:70:3d:de:d6:52:0a:51:b8:c5:0a:4a:
c4:75:14:cf:30:c6:bf:fe:4a:f7:b0:2e:74:1a:71:93:64:99:
5b:ca:95:9e:34:8d:53:15:13:92:c5:02:ae:a8:a7:76:5e:29:
de:13:a6:7c:95:6c:3a:93:74:db:e8:5b:4c:23:32:70:40:73:
d6:6d:4d:0d:61:5f:ae:fb:b8:ba:a9:05:96:d0:c1:a0:85:e6:
72:01:00:df:0a:71:8b:1f:78:bc:8f:cf:d0:d4:42:4a:2d:cb:
85:c1:44:99:0a:18:f9:82:9c:f9:48:1d:d8:cd:b4:2d:a3:27:
58:53:67:3b
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZQg1alM1Rk4RSL+l1VYDC39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JhMWVjNGYwMzVhNzJkZmEzOWU5MzBhZDhlYzU0MzY4ZWI3YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquPoK7PT4nQ0b78gcep0bb0WnXuC
QY2hFS/Prq9Jip7qWDv9NGij5fqmzOOX4fJbs3u2z0kRB8cXySGHFeGPhGl7kU0T
PPdkhTDWRe/jndDS8RNt5CbRgxiicurWatkong/Dg17aE35zJj+BgisrOD7pef6k
8/i20uZph4pqgLh6SfTVOaXDlF4hRg0c29DUupDlTOf/Cbv3qM/Z18dL6YbZBzea
CYMhhps9Enu5BTdOXwhgXyzFEXAOIq8zViCHOPwoQ7sI16ssn4l5eFSi/amebcSg
xXMS+Du/0Mh8udomiCCx3/UvbU4vVyuDqq8DC/PFs3uZfvt9nQ/A0mfd6wIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFCO6HsTwNact+jnpMK2OxUNo63r0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzYwZWQy
ZC0xNmQ1LTRkMGMtYTk0Ny1iZGU2NDQ4Yjc4NmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNjBlZDJk
LTE2ZDUtNGQwYy1hOTQ3LWJkZTY0NDhiNzg2Yy8xL0k3b2V4UEExcHkzNk9la3dy
WTdGUTJqcmV2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDXZ0YAwQCwpKEMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAnOIMA0GCSqGSIb3DQEBCwUAA4IBAQAXsmhNkPqvotO/4+M30j/b43H+
NbzTkCKtKHAWwqkp/8vo06CpeiUBrXtvzsUW40QjB1DQ3nH3pdAbhGWD7ZVe6zgu
iOrAdH3Kumi+h67bv5tGyLOhmy3992G+ayfLfT6HvONF+ixzpnlEzcApcpTA64Lz
G2vkha/LzmPbhCgbz6RyiK9TcD3e1lIKUbjFCkrEdRTPMMa//kr3sC50GnGTZJlb
ypWeNI1TFROSxQKuqKd2XineE6Z8lWw6k3Tb6FtMIzJwQHPWbU0NYV+u+7i6qQWW
0MGgheZyAQDfCnGLH3i8j8/Q1EJKLcuFwUSZChj5gpz5SB3YzbQtoydYU2c7
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:24:33 2025 by rpki-client