Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer (raw, json)
Hash identifier: qEfyD8qlD1SKk8kAG1bKd6Do7ujxmAHxD9mq7usatho=
Subject key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C219BD03FB6BCC419A03CBFCE863E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42731
IP: 194.110.212.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:9b:d0:3f:b6:bc:c4:19:a0:3c:bf:ce:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:ac:0a:fe:96:63:7b:e5:82:71:aa:06:7f:
22:34:ae:70:66:92:d5:c1:a9:e1:e0:8a:11:64:a5:
44:a3:bf:cb:be:94:cf:82:e5:5e:73:64:8a:13:66:
54:93:73:e7:87:fc:bc:e0:1a:71:29:fe:b3:1f:35:
fc:e9:6f:70:32:44:02:73:fb:0e:14:fb:d1:74:75:
c6:e9:94:5e:a0:15:6a:42:b4:5d:02:01:6b:0f:11:
88:05:fb:af:8f:ba:fe:7e:61:0d:24:5b:09:19:23:
24:7c:95:e2:b3:8b:38:51:29:96:8a:de:7e:21:ab:
ac:51:3f:f3:88:de:d2:69:99:1e:fd:c5:ed:fd:27:
22:7e:c5:1f:29:18:d0:ee:1c:eb:32:b4:7e:76:c7:
16:04:93:4c:c2:9e:82:e3:96:20:55:28:03:76:6f:
9f:74:df:c2:bc:7c:7c:ce:e9:06:a3:08:2b:64:2a:
f3:a2:a3:b0:8d:6e:d4:43:5d:f6:b5:16:c9:b8:df:
c7:b0:5c:96:f9:57:64:07:51:ee:d2:6c:36:49:8a:
41:bc:05:39:9a:ae:f5:d0:65:2a:be:b3:f1:92:36:
d8:99:22:d9:f0:95:c9:b5:c5:a6:47:16:11:02:94:
e7:aa:4b:07:c4:82:d5:3c:ae:07:4c:2f:99:4a:47:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.212.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42731
Signature Algorithm: sha256WithRSAEncryption
17:45:4f:c8:40:5e:46:09:0a:53:50:7d:bf:ea:95:26:64:7e:
52:c3:17:8a:87:7e:4d:1f:0a:b5:29:de:9f:a2:34:bf:7c:c4:
42:a0:0e:e2:d7:c3:c0:d7:f1:3d:4c:08:dd:03:93:ce:45:9f:
86:a3:63:a6:0a:4d:a7:5d:56:80:b8:31:aa:0b:46:9d:b0:18:
0c:b4:a7:2d:33:d7:f1:08:1f:f4:17:e6:2d:ef:61:01:12:2f:
63:4a:73:be:55:f2:d7:71:26:25:2e:0e:1e:cb:b9:69:e6:00:
d8:90:02:0f:68:60:cb:4c:a6:da:69:bb:cb:b3:6d:f7:e4:21:
99:58:b3:e5:15:bc:42:4b:3a:1d:d9:d7:72:29:05:84:fc:38:
21:14:32:5d:34:35:60:7d:19:ee:7c:e3:af:ea:4d:9e:d1:77:
b2:f9:e8:bd:9b:eb:aa:b2:a4:28:3d:aa:fe:b9:83:cc:5f:84:
b0:33:de:e1:06:ab:83:6f:77:ed:1d:e5:83:5a:56:b1:43:5a:
26:25:6f:21:ef:db:16:ee:c5:3d:9e:f5:07:1e:a8:6b:8c:88:
ca:02:55:98:1d:1b:b1:58:a5:b4:93:f1:7b:a7:bc:5e:8a:82:
fe:38:cb:8e:46:df:a4:9a:2e:64:e5:ff:61:60:89:f3:8f:11:
a3:70:7a:59
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjCGb0D+2vMQZoDy/zoY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBhMTlkNDhjMzU0N2MyYWRiOWY4ZWZmZGVhYzZhZDllNGY5ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCusCv6WY3vlgnGqBn8iNK5wZpLV
wanh4IoRZKVEo7/LvpTPguVec2SKE2ZUk3Pnh/y84BpxKf6zHzX86W9wMkQCc/sO
FPvRdHXG6ZReoBVqQrRdAgFrDxGIBfuvj7r+fmENJFsJGSMkfJXis4s4USmWit5+
IausUT/ziN7SaZke/cXt/ScifsUfKRjQ7hzrMrR+dscWBJNMwp6C45YgVSgDdm+f
dN/CvHx8zukGowgrZCrzoqOwjW7UQ132tRbJuN/HsFyW+VdkB1Hu0mw2SYpBvAU5
mq710GUqvrPxkjbYmSLZ8JXJtcWmRxYRApTnqksHxILVPK4HTC+ZSkcdXQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFE4KGdSMNUfCrbn47/3qxq2eT50ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2NiM2U2
Yi1hNDQ0LTQ5ZGQtOWY2NC0xN2MxMjI3M2M1NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvY2IzZTZi
LWE0NDQtNDlkZC05ZjY0LTE3YzEyMjczYzU0YS8xL1Rnb1oxSXcxUjhLdHVmanZf
ZXJHclo1UG5Say5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwm7UMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCm6zANBgkqhkiG9w0BAQsFAAOCAQEAF0VPyEBeRgkKU1B9v+qVJmR+UsMXiod+
TR8KtSnen6I0v3zEQqAO4tfDwNfxPUwI3QOTzkWfhqNjpgpNp11WgLgxqgtGnbAY
DLSnLTPX8Qgf9BfmLe9hARIvY0pzvlXy13EmJS4OHsu5aeYA2JACD2hgy0ym2mm7
y7Nt9+QhmViz5RW8Qks6HdnXcikFhPw4IRQyXTQ1YH0Z7nzjr+pNntF3svnovZvr
qrKkKD2q/rmDzF+EsDPe4Qarg2937R3lg1pWsUNaJiVvIe/bFu7FPZ71Bx6oa4yI
ygJVmB0bsViltJPxe6e8XoqC/jjLjkbfpJouZOX/YWCJ848Ro3B6WQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:53 2025 by rpki-client