Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer (raw, json)
Hash identifier: +GCo9cuTCKFnIKoObmQaRbNrMrWIgfXV+Ph6M4HH6T4=
Subject key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1D5298DC909A7AD4C8C6352F5646
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206013
IP: 80.89.160.0/20
IP: 80.94.208.0/20
IP: 88.83.128.0/19
IP: 2a00:6e80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:52:98:dc:90:9a:7a:d4:c8:c6:35:2f:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:7f:80:a7:f3:42:30:1f:7e:8f:34:75:03:
0a:c5:8f:d1:0e:d3:87:f6:39:f0:57:32:32:d4:0d:
ce:32:17:6f:6b:98:df:2a:bb:6a:cf:89:c0:85:a6:
dc:28:b5:85:11:cf:f5:e4:11:2e:0c:14:d0:cb:97:
ad:99:83:7c:b0:97:8a:ba:ac:61:f7:ef:6c:8b:b7:
a0:28:17:33:73:ac:cd:4e:71:a9:2b:15:85:94:9e:
24:8c:49:96:16:20:c6:91:34:97:9a:cb:e7:98:73:
e5:00:c2:5c:30:75:a5:0d:16:31:76:ef:54:0a:c3:
4d:19:52:92:60:31:28:2d:16:e8:30:51:c2:fe:3e:
3c:aa:0f:d1:2c:c4:c7:05:bc:1e:8c:92:26:aa:5e:
02:c6:78:82:d0:df:58:cb:15:b7:3d:69:88:f3:9d:
98:c7:d4:c3:50:bd:36:00:41:4b:22:73:7f:6a:fe:
10:03:8e:79:34:a1:1d:be:41:5b:d7:00:fd:e9:9f:
0c:5c:f5:12:d5:24:0f:e6:00:6b:4b:90:15:2d:04:
60:2f:8f:6d:a2:8f:65:f0:89:ce:35:04:6b:23:51:
3d:62:7b:21:ec:bf:10:f1:03:b6:56:3c:0e:10:e6:
8a:6b:ad:29:df:91:bd:be:10:7b:76:e2:c9:57:03:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.160.0/20
80.94.208.0/20
88.83.128.0/19
IPv6:
2a00:6e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206013
Signature Algorithm: sha256WithRSAEncryption
90:94:b9:d8:04:95:b4:c2:61:51:03:a9:49:bd:e3:56:17:82:
a9:59:50:52:b6:56:9c:b2:38:d4:fb:52:6a:ce:c5:e6:20:c6:
bb:ec:0b:4e:38:1d:6f:12:e9:00:35:d9:3b:9a:62:1e:f4:a2:
0a:c8:17:48:21:0d:47:fa:31:d4:04:2c:bb:e5:2c:5d:68:cd:
46:7b:a4:67:96:65:77:01:89:bf:4e:a7:94:d6:1e:9f:c4:78:
15:d2:e1:79:80:f9:2c:50:63:2f:b1:5e:43:f9:4f:46:52:31:
8c:44:be:37:9f:b4:04:03:8f:cd:75:65:b7:2a:f2:2a:97:05:
57:61:17:22:08:d2:a3:92:99:00:3a:f8:f2:8a:46:54:a7:d7:
f9:60:d0:6c:9e:08:4e:5b:09:6e:1f:0f:4b:12:88:cc:7b:2d:
54:49:0a:2c:bb:33:a6:50:83:99:25:c3:ee:eb:f3:45:f4:ff:
4f:95:28:ed:04:63:db:52:c1:5f:b7:8e:2e:55:47:81:4f:e3:
2b:80:9b:5b:bf:65:ec:9a:e0:67:34:eb:b8:2e:d9:83:01:29:
6e:29:b6:be:4a:55:00:8e:e0:ec:11:b9:2a:4f:eb:4e:63:b3:
01:c5:95:80:23:8d:c1:c9:f0:ba:bb:b5:1d:34:89:73:01:b9:
46:0e:c0:77
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQfjB1SmNyQmnrUyMY1L1ZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTY5YjQwMmI2N2Q3NTkzNmY0NWRjOGJjNTRiODY4MTRlMDYzNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbl/gKfzQjAffo80dQMKxY/RDtOH
9jnwVzIy1A3OMhdva5jfKrtqz4nAhabcKLWFEc/15BEuDBTQy5etmYN8sJeKuqxh
9+9si7egKBczc6zNTnGpKxWFlJ4kjEmWFiDGkTSXmsvnmHPlAMJcMHWlDRYxdu9U
CsNNGVKSYDEoLRboMFHC/j48qg/RLMTHBbwejJImql4CxniC0N9YyxW3PWmI852Y
x9TDUL02AEFLInN/av4QA455NKEdvkFb1wD96Z8MXPUS1SQP5gBrS5AVLQRgL49t
oo9l8InONQRrI1E9Ynsh7L8Q8QO2VjwOEOaKa60p35G9vhB7duLJVwNwYwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFE5ptAK2fXWTb0Xci8VLhoFOBja6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzY4OWFi
NS0zMGQyLTQ2YTMtOGM1NC0xNmI0MTk2ZmEyOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNjg5YWI1
LTMwZDItNDZhMy04YzU0LTE2YjQxOTZmYTI5NC8xL1RtbTBBclo5ZFpOdlJkeUx4
VXVHZ1U0R05yby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQEUF7QAwQFWFOAMA0EAgACMAcDBQAq
AG6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkvTANBgkqhkiG9w0BAQsFAAOC
AQEAkJS52ASVtMJhUQOpSb3jVheCqVlQUrZWnLI41PtSas7F5iDGu+wLTjgdbxLp
ADXZO5piHvSiCsgXSCENR/ox1AQsu+UsXWjNRnukZ5ZldwGJv06nlNYen8R4FdLh
eYD5LFBjL7FeQ/lPRlIxjES+N5+0BAOPzXVltyryKpcFV2EXIgjSo5KZADr48opG
VKfX+WDQbJ4ITlsJbh8PSxKIzHstVEkKLLszplCDmSXD7uvzRfT/T5Uo7QRj21LB
X7eOLlVHgU/jK4CbW79l7JrgZzTruC7ZgwEpbim2vkpVAI7g7BG5Kk/rTmOzAcWV
gCONwcnwuru1HTSJcwG5Rg7Adw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:08 2025 by rpki-client