Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
File: egoGVk08cX0tbaoegzxJWXawuto.cer (raw, json)
Hash identifier: WyZZHUTEAU8QwcWoEvHDqGVJAvJnAC8AflqCBv3MZpw=
Subject key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62BFB99B64ADC662843B40FB49BEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.249.0.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:fb:99:b6:4a:dc:66:28:43:b4:0f:b4:9b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:6c:2a:70:8a:6e:44:2c:dc:0b:b6:a4:43:
d6:82:68:47:c6:81:67:2a:bb:f2:af:77:ac:8e:44:
0d:dd:3d:98:2e:76:3c:c8:8c:a7:c3:16:21:9f:02:
b1:9d:38:65:7a:19:4a:11:65:28:f3:bb:86:f2:00:
04:5e:f2:00:e8:2b:39:d8:6c:1b:2d:e8:e9:29:e5:
66:43:07:e0:81:80:72:cd:0a:30:da:fa:ad:4c:14:
e6:bf:38:a6:60:bd:14:46:55:35:eb:ef:a4:da:9e:
13:b1:02:15:db:2a:f6:3e:a1:7e:04:93:41:f1:99:
14:ab:07:f1:1a:ec:c1:4d:b7:13:6a:ce:0e:5a:0b:
9f:76:6e:54:26:9e:b2:b1:ca:52:4e:4f:b6:19:c4:
45:fe:12:f9:c9:0e:ca:b3:23:80:3d:5a:12:0c:e8:
f0:af:4b:29:35:46:62:52:80:6f:de:f2:8b:f7:bf:
c0:30:8f:8d:7c:35:5e:b7:76:1e:42:57:34:b6:f5:
e2:15:27:f8:08:c5:14:f8:e5:cd:cb:43:84:dc:0e:
99:b4:16:bb:3d:40:0a:be:87:8c:2b:02:18:f1:43:
13:a9:0c:56:31:ff:50:9e:da:f9:d5:2a:b5:6c:c1:
cc:4c:52:5e:31:79:e8:48:7a:0c:de:fa:0b:f7:bb:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.0.0/21
Signature Algorithm: sha256WithRSAEncryption
14:dd:27:be:be:54:b6:d0:56:17:e5:2e:be:b0:61:ae:a6:90:
a2:96:8f:f9:3c:e0:ba:fb:c2:97:3b:fd:26:73:7b:07:72:04:
cd:65:14:cc:e0:ab:fc:cb:cd:c1:f4:cb:01:18:d1:22:5f:f9:
7f:a5:94:47:e1:2b:af:ab:15:20:2c:1c:9e:49:8a:cf:b7:28:
91:18:cc:1d:ad:21:56:8f:bf:30:96:64:97:a3:28:d4:a2:c4:
0f:98:aa:f3:68:b4:5d:e8:d4:84:90:cf:bd:a5:38:fe:e0:d8:
72:00:e4:70:22:da:12:8b:c7:14:c2:fc:23:70:23:f8:5d:43:
3b:11:81:2a:c8:af:cd:d6:b1:24:26:a4:1e:db:b5:93:81:f7:
10:5d:25:19:2c:eb:27:ce:02:0a:86:d9:ca:df:4d:c3:4a:3d:
14:66:e9:b3:53:c4:46:e5:d8:df:80:ef:ad:29:94:76:71:20:
f5:c3:41:f8:ef:99:15:87:37:35:63:97:5f:b5:94:01:f2:44:
8b:0b:d1:35:79:e3:8c:7c:80:c2:c1:e8:b1:62:c5:35:2e:a9:
68:8f:73:1f:1c:77:9a:5a:34:66:8f:39:14:cb:3e:df:34:5e:
cb:73:5d:b1:16:7c:9e:fc:a3:12:c8:1a:25:2a:b7:05:7c:c7:
6f:4a:6e:24
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQg1iv7mbZK3GYoQ7QPtJvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTBhMDY1NjRkM2M3MTdkMmQ2ZGFhMWU4MzNjNDk1OTc2YjBiYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwixsKnCKbkQs3Au2pEPWgmhHxoFn
Krvyr3esjkQN3T2YLnY8yIynwxYhnwKxnThlehlKEWUo87uG8gAEXvIA6Cs52Gwb
LejpKeVmQwfggYByzQow2vqtTBTmvzimYL0URlU16++k2p4TsQIV2yr2PqF+BJNB
8ZkUqwfxGuzBTbcTas4OWgufdm5UJp6yscpSTk+2GcRF/hL5yQ7KsyOAPVoSDOjw
r0spNUZiUoBv3vKL97/AMI+NfDVet3YeQlc0tvXiFSf4CMUU+OXNy0OE3A6ZtBa7
PUAKvoeMKwIY8UMTqQxWMf9Qntr51Sq1bMHMTFJeMXnoSHoM3voL97t5OwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHoKBlZNPHF9LW2qHoM8SVl2sLraMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzZmNTk4
ZC1hNWM1LTRjOTktYTFmMC01NDgyNjNlYjZmYjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNmY1OThk
LWE1YzUtNGM5OS1hMWYwLTU0ODI2M2ViNmZiNC8xL2Vnb0dWazA4Y1gwdGJhb2Vn
enhKV1hhd3V0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDlfkAMA0GCSqGSIb3DQEBCwUAA4IBAQAU3Se+
vlS20FYX5S6+sGGuppCilo/5POC6+8KXO/0mc3sHcgTNZRTM4Kv8y83B9MsBGNEi
X/l/pZRH4SuvqxUgLByeSYrPtyiRGMwdrSFWj78wlmSXoyjUosQPmKrzaLRd6NSE
kM+9pTj+4NhyAORwItoSi8cUwvwjcCP4XUM7EYEqyK/N1rEkJqQe27WTgfcQXSUZ
LOsnzgIKhtnK303DSj0UZumzU8RG5djfgO+tKZR2cSD1w0H475kVhzc1Y5dftZQB
8kSLC9E1eeOMfIDCweixYsU1Lqloj3MfHHeaWjRmjzkUyz7fNF7Lc12xFnye/KMS
yBolKrcFfMdvSm4k
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:37:11 2025 by rpki-client