Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
File: k1AwYeGuUD7GPZcLMIdd2T_6u98.cer (raw, json)
Hash identifier: 2ORUXEwszJkRB5Ws0WshsaUVLmBE6XhQtQ/g4L8g5EA=
Subject key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FBF071D45ACD71EB79C97CB5DFFB51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61969
AS: 206834
IP: 185.53.176.0/22
IP: 2a01:bb20::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f0:71:d4:5a:cd:71:eb:79:c9:7c:b5:df:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:ed:90:d7:0d:77:9f:8e:9a:b2:d6:0e:58:
cb:93:fe:ad:e7:a7:0c:81:14:20:3c:80:e2:a0:29:
d0:bb:fa:64:12:37:93:ac:ff:85:62:52:aa:34:98:
26:a9:7f:96:c4:41:56:d9:92:97:4c:29:2c:56:6b:
23:81:f0:d5:dd:96:bf:2e:81:0b:4b:97:8e:02:8b:
ad:23:65:7e:4d:1f:b4:d7:73:ab:3e:a3:e1:ac:e8:
63:ca:85:f7:b0:3a:35:0e:26:04:a9:ba:ef:1b:d5:
9f:ca:fd:2b:97:92:e8:eb:08:98:b7:d7:fa:f2:d9:
ec:c9:49:aa:f2:f9:ca:1a:88:f9:e5:0b:4e:a6:b5:
9c:48:57:dd:16:6a:ab:b3:d0:3e:17:52:3f:d8:d2:
0a:cf:a8:02:e3:66:79:c0:77:77:b2:30:a5:19:f1:
d9:ed:bd:2c:e6:d0:80:9c:e0:75:b7:a1:a5:b1:fd:
41:f0:04:f8:15:2e:cb:f9:02:2b:04:62:7a:04:36:
57:3c:9a:cb:85:b7:ae:c0:a4:41:fa:4e:97:f9:69:
2d:35:f8:81:08:22:4d:a5:d5:f0:60:2c:32:71:ba:
a1:66:10:b2:6f:2e:a6:ce:e3:75:c4:32:1a:c5:b9:
cd:0f:bb:08:fc:14:9c:39:a3:f6:8b:de:43:33:58:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.176.0/22
IPv6:
2a01:bb20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61969
206834
Signature Algorithm: sha256WithRSAEncryption
00:52:2b:1e:dc:36:cb:dd:59:8d:cb:16:d9:c2:67:88:89:e4:
72:55:13:b7:2f:11:ec:67:d6:3d:ea:1d:79:ca:33:6c:25:65:
70:f5:80:2d:ba:97:78:93:bf:77:0a:6e:62:94:19:78:db:33:
0e:5a:5f:cf:ce:97:05:87:f6:56:12:04:2f:f6:89:4b:7a:e5:
c0:51:8f:72:78:24:05:37:d5:ed:13:f3:34:59:c8:cc:b0:ad:
59:d0:b0:6c:11:0a:0c:f6:90:c8:be:b8:29:42:55:2e:07:d1:
a3:67:17:95:53:a1:2e:41:90:e3:45:42:9b:8e:11:3c:68:5e:
a6:91:e6:6b:97:fd:44:f3:e7:99:9f:e7:c3:12:69:22:50:22:
05:43:89:38:fd:dc:87:01:8f:68:0a:98:c5:1d:99:bb:19:17:
c9:f4:87:57:2a:88:15:7c:5d:e0:b4:35:9e:0c:74:9f:93:86:
a7:b3:c8:07:1d:b3:90:b1:0c:a0:d6:5e:0f:3f:e7:7d:64:d5:
39:7f:a6:1d:86:c5:07:df:88:92:6b:95:8e:1c:a7:d7:42:15:
38:3b:a4:cb:19:f0:79:b8:a0:06:e2:b6:90:d0:73:56:7c:0a:
27:e5:91:30:77:82:8a:df:94:72:99:24:6f:cb:00:33:a1:65:
2f:9b:7e:59
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQl+/Bx1FrNcet5yXy13/tRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzUwMzA2MWUxYWU1MDNlYzYzZDk3MGIzMDg3NWRkOTNmZmFiYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxztkNcNd5+OmrLWDljLk/6t56cM
gRQgPIDioCnQu/pkEjeTrP+FYlKqNJgmqX+WxEFW2ZKXTCksVmsjgfDV3Za/LoEL
S5eOAoutI2V+TR+013OrPqPhrOhjyoX3sDo1DiYEqbrvG9Wfyv0rl5Lo6wiYt9f6
8tnsyUmq8vnKGoj55QtOprWcSFfdFmqrs9A+F1I/2NIKz6gC42Z5wHd3sjClGfHZ
7b0s5tCAnOB1t6Glsf1B8AT4FS7L+QIrBGJ6BDZXPJrLhbeuwKRB+k6X+WktNfiB
CCJNpdXwYCwycbqhZhCyby6mzuN1xDIaxbnND7sI/BScOaP2i95DM1gH1QIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFJNQMGHhrlA+xj2XCzCHXdk/+rvfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2E3NmFj
MS01ZjIyLTQ3ZDEtYjhjMS1jNjIzZWQ4ZjJmMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvYTc2YWMx
LTVmMjItNDdkMS1iOGMxLWM2MjNlZDhmMmYyOC8xL2sxQXdZZUd1VUQ3R1BaY0xN
SWRkMlRfNnU5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTWwMA0EAgACMAcDBQMqAbsgMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDyEQIDAyfyMA0GCSqGSIb3DQEBCwUAA4IBAQAAUise
3DbL3VmNyxbZwmeIieRyVRO3LxHsZ9Y96h15yjNsJWVw9YAtupd4k793Cm5ilBl4
2zMOWl/PzpcFh/ZWEgQv9olLeuXAUY9yeCQFN9XtE/M0WcjMsK1Z0LBsEQoM9pDI
vrgpQlUuB9GjZxeVU6EuQZDjRUKbjhE8aF6mkeZrl/1E8+eZn+fDEmkiUCIFQ4k4
/dyHAY9oCpjFHZm7GRfJ9IdXKogVfF3gtDWeDHSfk4ans8gHHbOQsQyg1l4PP+d9
ZNU5f6YdhsUH34iSa5WOHKfXQhU4O6TLGfB5uKAG4raQ0HNWfAon5ZEwd4KK35Ry
mSRvywAzoWUvm35Z
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:00:48 2025 by rpki-client