Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer (raw, json)
Hash identifier: vss+m5X1OmwPlDqAPF1776SS42oeusZNYP4uFVHgKi0=
Subject key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520A05EE2ED12D89AE6D46DA02F2493
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.218.120.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a0:5e:e2:ed:12:d8:9a:e6:d4:6d:a0:2f:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:c8:88:2e:e1:07:9a:c5:11:f5:22:d9:6a:
11:f6:f4:dc:df:98:a2:b7:b5:2d:19:b5:b7:44:22:
f0:ab:fc:a1:48:27:6a:c3:e1:9f:d8:ee:b7:d3:df:
73:21:8f:66:98:eb:63:b3:10:f6:5a:3b:0d:6c:e3:
4e:ed:31:40:a4:e9:89:33:a1:e8:6d:46:cb:3d:90:
e7:18:04:ac:f0:de:00:c1:5f:b1:e9:64:78:b1:d3:
94:a3:d9:ac:6f:0f:49:ff:10:16:a5:70:3d:16:86:
31:3b:90:21:35:ec:68:c3:33:c3:5c:60:15:bb:b8:
7b:30:de:31:db:cb:6a:6b:5c:a9:6f:51:26:95:c4:
ea:85:f7:b0:1e:01:f1:72:ef:c2:5d:d4:1f:2a:4b:
4a:7f:64:a4:d4:1e:09:2f:0e:e8:84:4d:be:de:6c:
b9:e5:6a:6f:83:39:67:26:2c:99:39:06:e1:43:05:
ff:e4:c5:5c:5f:63:cf:b3:3c:b7:23:4f:98:31:68:
8e:9d:1f:c5:8e:cf:79:02:46:a7:f7:22:f8:be:0e:
17:f1:b2:f4:f2:87:ab:01:b9:d3:1b:b1:a1:36:5d:
f1:2d:c6:c6:d1:48:f2:82:19:55:74:e1:6d:64:43:
68:60:75:c8:9c:f8:9f:9f:23:54:c1:c3:0c:8f:de:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:db:6c:bf:c6:cd:a4:d3:56:14:71:3a:cd:90:09:4f:8e:18:
e5:4e:91:27:28:ae:ff:30:0d:ea:c1:13:7c:4d:d9:5e:17:ef:
c2:8c:ba:40:c0:8d:9b:5c:f1:a0:32:dd:15:09:6d:13:92:0b:
0b:71:f7:8d:22:4f:06:1f:97:8e:9e:8f:f3:61:a3:26:4a:8d:
33:a0:43:c7:27:e8:16:58:61:5d:86:c6:b9:6e:72:36:9d:87:
1f:24:cd:56:03:2d:b9:6c:57:3c:98:b0:9d:f9:db:38:fb:38:
ba:8e:9a:c0:e7:56:b1:46:13:10:03:7c:03:63:ae:30:32:bf:
2b:73:af:68:06:de:9a:d9:a8:f4:ce:2c:dc:24:f2:23:d3:36:
23:d1:54:c9:b9:52:c2:be:60:12:31:d8:bf:71:26:4f:76:5f:
ef:50:fa:2f:95:d8:ec:77:88:53:a6:82:49:e6:4b:50:3a:40:
99:b2:ba:bc:38:56:26:a4:9a:7f:5c:e6:37:27:ea:4f:99:65:
2a:0c:ab:a1:5c:b4:bf:42:39:75:2e:a4:64:10:58:f5:72:ce:
03:9f:f1:99:0a:52:4b:cf:5d:54:25:9d:03:3b:4d:f5:44:ab:
63:46:ea:55:d8:1b:58:ee:cd:82:d3:c7:3d:df:e1:94:17:b0:
87:b5:67:32
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlIKBe4u0S2Jrm1G2gLySTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjZhZDkwYjYzNjQyYjhmYWRjOTAwN2FhMzU1MjM5ZWRmYWYzNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XIiC7hB5rFEfUi2WoR9vTc35ii
t7UtGbW3RCLwq/yhSCdqw+Gf2O63099zIY9mmOtjsxD2WjsNbONO7TFApOmJM6Ho
bUbLPZDnGASs8N4AwV+x6WR4sdOUo9msbw9J/xAWpXA9FoYxO5AhNexowzPDXGAV
u7h7MN4x28tqa1ypb1EmlcTqhfewHgHxcu/CXdQfKktKf2Sk1B4JLw7ohE2+3my5
5WpvgzlnJiyZOQbhQwX/5MVcX2PPszy3I0+YMWiOnR/Fjs95Akan9yL4vg4X8bL0
8oerAbnTG7GhNl3xLcbG0UjyghlVdOFtZENoYHXInPifnyNUwcMMj95BUQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCtq2QtjZCuPrckAeqNVI57frzVOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2E2ZGIw
Ny1mNTRhLTQ0MWYtOTY0OS1iYzliNDEzYjhlZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvYTZkYjA3
LWY1NGEtNDQxZi05NjQ5LWJjOWI0MTNiOGVlZC8xL0syclpDMk5rSzQtdHlRQjZv
MVVqbnQtdk5VNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCudp4MA0GCSqGSIb3DQEBCwUAA4IBAQCp22y/
xs2k01YUcTrNkAlPjhjlTpEnKK7/MA3qwRN8TdleF+/CjLpAwI2bXPGgMt0VCW0T
kgsLcfeNIk8GH5eOno/zYaMmSo0zoEPHJ+gWWGFdhsa5bnI2nYcfJM1WAy25bFc8
mLCd+ds4+zi6jprA51axRhMQA3wDY64wMr8rc69oBt6a2aj0zizcJPIj0zYj0VTJ
uVLCvmASMdi/cSZPdl/vUPovldjsd4hTpoJJ5ktQOkCZsrq8OFYmpJp/XOY3J+pP
mWUqDKuhXLS/Qjl1LqRkEFj1cs4Dn/GZClJLz11UJZ0DO031RKtjRupV2BtY7s2C
08c93+GUF7CHtWcy
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:25:55 2025 by rpki-client