Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer (raw, json)
Hash identifier: TmKoCDdF9qQ+heo4cwFXgpnQ0SMit5RgkGDA9q209Uo=
Subject key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23E97936A8CA75558D592E8629212
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9121
IP: 62.248.0.0/17
IP: 78.160.0.0/11
IP: 81.212.0.0/14
IP: 85.96.0.0/12
IP: 88.224.0.0/11
IP: 95.0.0.0/12
IP: 176.52.176.0/22
IP: 194.54.32.0/19
IP: 195.174.0.0/15
IP: 212.156.0.0/16
IP: 212.174.0.0/15
IP: 2a01:358::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3e:97:93:6a:8c:a7:55:58:d5:92:e8:62:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:03:b8:e4:02:81:49:4f:67:d7:0e:8e:30:
b5:37:8b:34:74:2b:5e:f1:60:f5:9b:9d:2a:f2:f6:
bf:90:45:da:57:f8:11:39:fc:be:99:84:e7:6b:86:
8a:db:8b:5e:c9:74:7b:94:7f:ea:b5:fa:64:e6:83:
4f:8e:59:bd:dd:55:57:38:91:c4:37:59:1c:0f:94:
16:7d:5e:b4:32:bc:f6:27:bd:e4:03:8e:38:be:30:
bc:17:d5:6b:74:89:26:3f:f8:19:3d:16:fe:10:79:
8d:3e:08:89:89:1a:e3:97:27:d4:f4:ca:0a:02:46:
02:d7:4d:bc:1a:da:2b:8e:d0:c5:46:01:d3:ef:6d:
a8:c1:ee:be:a3:2a:b1:58:06:79:53:00:d2:0b:3f:
e6:53:07:89:50:39:ce:df:44:1a:f8:f1:9e:4f:3c:
83:b6:6f:19:46:b8:8a:ea:b1:b2:eb:ec:9e:90:43:
38:22:34:33:f9:49:0f:19:a0:f2:9e:50:11:80:72:
ca:df:55:cf:25:77:9a:23:7d:0b:45:46:c2:e7:63:
10:f6:3a:bf:08:f5:6a:2f:c7:7c:48:d6:79:d2:65:
e4:70:08:a8:3e:94:3e:0f:df:47:e5:45:5f:c7:c7:
f2:35:5d:7f:38:1c:be:59:ce:18:0e:f6:fd:02:c3:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.248.0.0/17
78.160.0.0/11
81.212.0.0/14
85.96.0.0/12
88.224.0.0/11
95.0.0.0/12
176.52.176.0/22
194.54.32.0/19
195.174.0.0/15
212.156.0.0/16
212.174.0.0/15
IPv6:
2a01:358::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9121
Signature Algorithm: sha256WithRSAEncryption
55:e0:ee:64:85:e1:b3:73:f4:68:df:54:cc:49:1f:f3:ab:34:
cd:9d:7f:72:19:44:ef:8d:f1:7d:e9:db:4b:6e:91:31:91:8a:
54:70:55:7e:8e:23:fc:55:f1:4b:8f:3d:d9:71:b6:80:e7:a2:
72:53:8c:a6:a6:8e:c6:1a:cb:3f:6d:fb:67:eb:c4:05:25:db:
6c:2b:3f:47:11:33:0c:e4:a9:8b:84:93:0b:ed:ec:94:27:fc:
57:74:e9:25:c4:f2:c5:12:7a:ce:be:f9:ac:09:2e:c6:b2:c9:
34:14:4a:46:2a:cd:b5:56:d0:fa:c7:c1:7b:cb:d2:43:bb:bf:
1e:54:c3:74:22:a0:98:e9:b9:03:45:0b:11:25:27:af:09:d0:
40:a1:75:3d:c6:84:77:b9:63:ff:ba:ca:5a:12:aa:91:35:d2:
cd:4b:d2:1b:d1:59:72:a9:df:4d:78:42:23:33:97:3b:f3:eb:
2c:0c:25:79:a4:d1:ba:7c:e8:50:77:c8:cf:56:18:34:a2:bd:
02:f6:ff:05:2b:89:a1:ce:d3:61:4d:c0:b3:e0:8a:89:54:30:
9c:c4:b3:69:93:6a:ba:b2:46:bd:a9:37:3e:df:fc:69:ec:1b:
ad:22:23:c1:6a:53:5e:17:6a:85:cd:3e:db:c1:ed:51:74:d1:
ce:07:7b:11
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgISAZQhsj6Xk2qMp1VY1ZLoYpISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGVmMTFiYjhhOGQ0ODBhMDMxM2UxZjIxOGE2NmJkZjRlOTVmNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnUDuOQCgUlPZ9cOjjC1N4s0dCte
8WD1m50q8va/kEXaV/gROfy+mYTna4aK24teyXR7lH/qtfpk5oNPjlm93VVXOJHE
N1kcD5QWfV60Mrz2J73kA444vjC8F9VrdIkmP/gZPRb+EHmNPgiJiRrjlyfU9MoK
AkYC1028GtorjtDFRgHT722owe6+oyqxWAZ5UwDSCz/mUweJUDnO30Qa+PGeTzyD
tm8ZRriK6rGy6+yekEM4IjQz+UkPGaDynlARgHLK31XPJXeaI30LRUbC52MQ9jq/
CPVqL8d8SNZ50mXkcAioPpQ+D99H5UVfx8fyNV1/OBy+Wc4YDvb9AsMw5wIDAQAB
o4IC4jCCAt4wHQYDVR0OBBYEFD3vEbuKjUgKAxPh8hima99OlfYnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2QxZjE3
Mi0yZGVmLTQ3OTctODA1Zi1iNDk0NjY0NzI0YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDFmMTcy
LTJkZWYtNDc5Ny04MDVmLWI0OTQ2NjQ3MjRhZC8xL1BlOFJ1NHFOU0FvREUtSHlH
S1pyMzA2VjlpYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF
BwEHAQH/BFMwUTBABAIAATA6AwQHPvgAAwMFTqADAwJR1AMDBFVgAwMFWOADAwRf
AAMEArA0sAMEBcI2IAMDAcOuAwMA1JwDAwHUrjANBAIAAjAHAwUDKgEDWDAZBggr
BgEFBQcBCAEB/wQKMAigBjAEAgIjoTANBgkqhkiG9w0BAQsFAAOCAQEAVeDuZIXh
s3P0aN9UzEkf86s0zZ1/chlE743xfenbS26RMZGKVHBVfo4j/FXxS4892XG2gOei
clOMpqaOxhrLP237Z+vEBSXbbCs/RxEzDOSpi4STC+3slCf8V3TpJcTyxRJ6zr75
rAkuxrLJNBRKRirNtVbQ+sfBe8vSQ7u/HlTDdCKgmOm5A0ULESUnrwnQQKF1PcaE
d7lj/7rKWhKqkTXSzUvSG9FZcqnfTXhCIzOXO/PrLAwleaTRunzoUHfIz1YYNKK9
Avb/BSuJoc7TYU3As+CKiVQwnMSzaZNqurJGvak3Pt/8aewbrSIjwWpTXhdqhc0+
28HtUXTRzgd7EQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:17:49 2025 by rpki-client