![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RDrF_Pllau60kZJbuQjKHROcZiY.cer
File: RDrF_Pllau60kZJbuQjKHROcZiY.cer (raw, json)
Hash identifier: m2e/IZPXwML0Wz8cGRqChnfpZHJFYVd4awLCc26kqhE=
Subject key identifier: 44:3A:C5:FC:F9:65:6A:EE:B4:91:92:5B:B9:08:CA:1D:13:9C:66:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B07B15D648
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Apr 2022 14:33:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 24920
IP: 193.111.122.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757979272776 (0xb07b15d648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 14:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=443ac5fcf9656aeeb491925bb908ca1d139c6626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:46:a4:27:56:03:4c:e7:d6:e0:3c:94:e4:
f5:d4:ba:11:0b:00:fa:fe:ff:29:12:47:dc:25:6c:
a9:23:6b:75:3e:93:4d:93:85:5a:b9:8a:fc:75:a6:
28:9a:ba:4b:47:d6:69:29:15:bf:a6:9f:7b:45:94:
c7:6b:db:7b:40:75:10:56:17:c1:58:b8:e1:fc:29:
b1:b2:f0:ca:1d:85:10:c9:6e:8f:11:43:39:ff:7f:
6f:4e:13:69:e7:bd:ab:83:cf:36:13:36:c9:93:f8:
a4:42:57:13:10:bd:18:35:49:28:ce:c6:60:5e:d8:
3f:5b:e3:e1:1a:f4:a4:56:f1:62:e3:74:cf:23:c9:
a9:5e:85:cb:c7:ef:55:42:e7:d1:96:f4:5c:09:a8:
d4:c0:4f:f7:c6:4d:cd:d9:9f:48:2f:33:d5:3f:dd:
0b:16:09:35:d5:28:21:f6:55:2e:1b:20:28:ad:a2:
7f:fa:f5:49:7d:d4:db:3a:3f:6d:dc:79:25:f2:20:
72:0d:69:79:5b:39:5d:a3:8b:8f:6a:64:b8:05:7e:
2b:bd:04:90:55:50:ee:8d:b4:1e:ca:63:de:5e:68:
ab:fe:0d:7a:ae:15:96:7a:be:b7:04:35:72:99:48:
52:d1:cc:a6:d8:27:17:89:60:dc:92:1e:dc:4a:84:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:C5:FC:F9:65:6A:EE:B4:91:92:5B:B9:08:CA:1D:13:9C:66:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.122.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24920
Signature Algorithm: sha256WithRSAEncryption
07:36:0a:8b:29:6b:84:0e:4e:a0:a4:fa:4c:5e:47:27:7f:0e:
94:44:8a:99:13:5e:26:b0:78:8d:bf:15:1c:ec:82:39:49:e1:
92:8b:c9:3c:38:cd:13:27:cd:ac:a3:06:c6:25:59:e5:6b:94:
4f:43:fb:eb:b6:4a:9f:53:cc:8e:9f:40:25:cc:58:01:14:89:
20:34:9c:17:12:d8:91:45:a5:3e:8b:df:bd:83:dc:aa:c8:74:
18:22:a0:8f:64:f5:78:3a:c7:48:30:df:da:73:45:2b:59:d1:
bf:24:96:08:93:fa:ab:57:93:9b:8d:7c:c0:0a:9c:d9:9c:fe:
31:2a:f1:5c:df:fa:68:be:26:98:af:7d:1a:8a:97:c2:43:97:
62:87:7a:99:bb:34:d8:72:f1:b5:18:28:0a:5b:d0:ea:ad:32:
d3:b1:2f:c4:bc:61:c1:35:2f:21:ce:c0:08:8f:6b:f9:75:00:
cc:83:0c:c0:78:cf:b0:26:06:0b:b7:da:36:b0:c4:78:2c:28:
75:ac:b9:64:67:3d:2c:50:5b:a8:74:67:bd:f7:f4:1e:3b:1c:
72:ea:62:83:da:06:74:f4:a3:de:70:0c:4b:31:16:8f:0c:03:
c4:01:21:c5:4b:57:9f:7a:1a:df:26:f1:9a:0b:07:07:f0:c6:
eb:b7:06:90
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIGALB7FdZIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDIyMTQzMzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0NDNhYzVmY2Y5
NjU2YWVlYjQ5MTkyNWJiOTA4Y2ExZDEzOWM2NjI2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6G5GpCdWA0zn1uA8lOT11LoRCwD6/v8pEkfcJWypI2t1
PpNNk4VauYr8daYomrpLR9ZpKRW/pp97RZTHa9t7QHUQVhfBWLjh/CmxsvDKHYUQ
yW6PEUM5/39vThNp572rg882EzbJk/ikQlcTEL0YNUkozsZgXtg/W+PhGvSkVvFi
43TPI8mpXoXLx+9VQufRlvRcCajUwE/3xk3N2Z9ILzPVP90LFgk11Sgh9lUuGyAo
raJ/+vVJfdTbOj9t3Hkl8iByDWl5Wzldo4uPamS4BX4rvQSQVVDujbQeymPeXmir
/g16rhWWer63BDVymUhS0cym2CcXiWDckh7cSoTeHwIDAQABo4ICnzCCApswHQYD
VR0OBBYEFEQ6xfz5ZWrutJGSW7kIyh0TnGYmMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzQwNmU2MC02MWUwLTRhMzgt
OTYxNy03OTJjMjU1YmJlYWIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNDA2ZTYwLTYxZTAtNGEzOC05
NjE3LTc5MmMyNTViYmVhYi8xL1JEckZfUGxsYXU2MGtaSmJ1UWpLSFJPY1ppWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBwW96MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmFYMA0GCSqGSIb3
DQEBCwUAA4IBAQAHNgqLKWuEDk6gpPpMXkcnfw6URIqZE14msHiNvxUc7II5SeGS
i8k8OM0TJ82sowbGJVnla5RPQ/vrtkqfU8yOn0AlzFgBFIkgNJwXEtiRRaU+i9+9
g9yqyHQYIqCPZPV4OsdIMN/ac0UrWdG/JJYIk/qrV5ObjXzACpzZnP4xKvFc3/po
viaYr30aipfCQ5dih3qZuzTYcvG1GCgKW9DqrTLTsS/EvGHBNS8hzsAIj2v5dQDM
gwzAeM+wJgYLt9o2sMR4LCh1rLlkZz0sUFuodGe99/QeOxxy6mKD2gZ09KPecAxL
MRaPDAPEASHFS1efehrfJvGaCwcH8MbrtwaQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:35 2025 by rpki-client