Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer (raw, json)
Hash identifier: UbyovEDiaMas7BKVkD1pYksY7/JvpHQh9zV56FQkw7I=
Subject key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424456B05A1D347A2EFFA40D5D196F7B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212077
IP: 195.234.80.0/24
IP: 2a13:7b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6b:05:a1:d3:47:a2:ef:fa:40:d5:d1:96:f7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:5b:be:72:25:3d:5f:57:53:ae:2c:b8:27:
33:24:af:7e:dd:46:21:18:ca:0b:bd:d7:19:c7:d9:
a2:11:32:c2:16:1a:ad:62:41:4f:c2:d6:a1:0e:43:
70:64:16:fe:9a:c8:a2:07:b7:90:c5:79:78:31:65:
f4:4e:a1:34:67:06:62:1a:73:a6:42:df:10:b6:8e:
66:5d:2c:2c:e0:ab:4e:11:7e:60:c6:62:1c:bc:b4:
c3:50:5e:44:f8:dd:7f:fe:fd:c0:54:2e:aa:51:f1:
27:b5:4f:67:22:c1:15:29:cc:11:9a:2d:ec:85:a1:
dd:9f:a5:66:6c:04:6e:ad:6a:fc:fd:c9:59:5d:dd:
94:5a:ba:cb:c4:b6:fa:04:e2:34:55:16:eb:aa:25:
88:d3:b8:1a:98:00:77:cd:89:a8:af:0f:73:a2:61:
72:9b:91:94:b6:d6:41:27:bd:01:b7:bd:4e:3b:9e:
05:d2:00:08:03:79:e8:fc:16:dd:8b:a3:43:a0:cd:
7a:b0:44:a4:69:d3:0a:ba:e8:fe:f8:9f:fa:a0:67:
c7:98:fd:ed:33:74:62:1a:9c:00:16:7a:1b:29:80:
cd:89:15:f5:db:e6:1b:6c:24:b0:ce:bb:09:69:42:
7b:78:cb:6f:87:6d:d6:59:69:d6:51:c4:56:63:9a:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.80.0/24
IPv6:
2a13:7b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212077
Signature Algorithm: sha256WithRSAEncryption
49:9d:b6:85:34:44:8a:17:62:8b:cc:6e:07:f7:c6:2d:69:10:
83:ec:e2:bf:1d:d6:2e:f9:e6:c3:d7:7c:81:d5:2b:0c:7d:9c:
ce:b6:e1:25:62:ba:d0:a2:03:72:9f:4d:16:0b:e4:0b:ad:7c:
eb:d5:6a:e9:d1:c7:46:a0:fb:fa:cf:b5:2e:42:5f:97:00:c9:
6b:13:21:d4:c7:46:02:33:f2:68:ae:bb:a5:10:d1:2f:0d:a0:
66:bc:ff:ac:6f:de:3a:3c:07:93:1f:11:91:2c:3d:31:6a:48:
2a:05:94:85:f1:11:7c:b2:68:27:4c:21:65:88:9f:f1:db:49:
e0:26:33:1a:c8:6a:54:c3:64:6b:76:ba:e6:42:90:de:8c:2b:
7f:d9:35:f2:62:f8:81:8b:ab:d9:23:7e:48:b5:e0:0e:5f:67:
f7:bc:cb:33:3a:db:45:26:a2:e7:ad:8a:16:1e:eb:dd:14:27:
1d:2c:bc:0c:3d:59:de:1f:8b:cf:d2:9c:3a:77:e8:f8:38:cd:
d5:b4:2c:49:41:6d:de:c9:31:25:04:8b:e5:d3:8f:15:da:cb:
47:7a:59:83:af:6f:8f:a0:e7:b5:a7:87:6e:d7:8c:c3:2c:76:
8f:de:4c:98:9c:bf:65:d0:2a:c8:2b:ee:a1:a6:8c:1b:e7:7c:
a9:29:4a:c5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQkRWsFodNHou/6QNXRlveyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg4YjQyMTc1ZDYyMTRhMzFhNTQwN2RiOGI2Yzk1ZjFlYzYwZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQtbvnIlPV9XU64suCczJK9+3UYh
GMoLvdcZx9miETLCFhqtYkFPwtahDkNwZBb+msiiB7eQxXl4MWX0TqE0ZwZiGnOm
Qt8Qto5mXSws4KtOEX5gxmIcvLTDUF5E+N1//v3AVC6qUfEntU9nIsEVKcwRmi3s
haHdn6VmbARurWr8/clZXd2UWrrLxLb6BOI0VRbrqiWI07gamAB3zYmorw9zomFy
m5GUttZBJ70Bt71OO54F0gAIA3no/Bbdi6NDoM16sESkadMKuuj++J/6oGfHmP3t
M3RiGpwAFnobKYDNiRX12+YbbCSwzrsJaUJ7eMtvh23WWWnWUcRWY5p25wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFaItCF11iFKMaVAfbi2yV8exg1OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzgzZDZm
YS00NjFkLTRhNTYtYTg0NC05Zjk0MmJjMTJhN2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvODNkNmZh
LTQ2MWQtNGE1Ni1hODQ0LTlmOTQyYmMxMmE3ZS8xL1ZvaTBJWFhXSVVveHBVQjl1
TGJKWHg3R0RVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw+pQMA0EAgACMAcDBQMqE3tAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8bTANBgkqhkiG9w0BAQsFAAOCAQEASZ22hTREihdi
i8xuB/fGLWkQg+zivx3WLvnmw9d8gdUrDH2czrbhJWK60KIDcp9NFgvkC61869Vq
6dHHRqD7+s+1LkJflwDJaxMh1MdGAjPyaK67pRDRLw2gZrz/rG/eOjwHkx8RkSw9
MWpIKgWUhfERfLJoJ0whZYif8dtJ4CYzGshqVMNka3a65kKQ3owrf9k18mL4gYur
2SN+SLXgDl9n97zLMzrbRSai562KFh7r3RQnHSy8DD1Z3h+Lz9KcOnfo+DjN1bQs
SUFt3skxJQSL5dOPFdrLR3pZg69vj6DntaeHbteMwyx2j95MmJy/ZdAqyCvuoaaM
G+d8qSlKxQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:33:52 2025 by rpki-client