Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
File: naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer (raw, json)
Hash identifier: gBkLKJE4eehTqQpssBq5g4iYmvBPwC2Prz6OIQko0SM=
Subject key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948D6B05215FB07C760598CFBA3B220700
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 22 Jan 2025 09:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57565
IP: 109.70.72.0/24
IP: 2a13:ee40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:6b:05:21:5f:b0:7c:76:05:98:cf:ba:3b:22:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:2d:d0:37:e9:e8:10:92:5f:2f:6c:eb:8a:
e1:38:82:a0:be:01:aa:30:54:69:5b:3b:0b:bb:8c:
e4:d8:3d:ef:05:07:26:59:3a:d4:da:db:fc:7d:db:
24:ab:d2:b0:a7:cf:e8:ab:7d:ab:c3:12:5b:f4:3d:
78:ea:f1:50:2d:c3:aa:da:e1:64:9f:27:09:6c:9b:
ac:f2:2c:02:f3:f5:11:d1:69:96:68:2e:da:87:76:
5f:ef:62:df:5f:c4:f9:77:bd:43:ce:f9:61:33:87:
79:23:aa:81:11:04:6c:97:6b:2e:b2:60:13:4c:fc:
1c:03:45:9a:80:a1:c1:25:30:47:1f:ea:0e:60:11:
ef:29:ec:e4:cf:0c:e2:24:97:bd:07:90:56:83:16:
44:57:86:ae:92:f5:11:ed:69:d6:9e:77:20:e1:f1:
94:c8:25:75:ed:1f:60:59:e9:ad:78:89:6f:c0:17:
5b:0c:0d:f8:44:f0:4b:2a:46:56:92:ec:d8:67:97:
96:33:16:0e:e8:39:36:72:36:15:28:ff:d0:67:04:
d2:15:6b:90:19:c2:3c:d5:1c:d2:57:60:1a:be:bc:
1b:8e:c4:d4:24:82:09:39:0d:b1:28:8f:96:96:bf:
bc:e3:24:60:20:c7:3f:88:a0:a4:a4:e6:c1:5b:ca:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.72.0/24
IPv6:
2a13:ee40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57565
Signature Algorithm: sha256WithRSAEncryption
5e:93:93:13:38:e9:c1:6d:74:94:84:c1:d2:44:fe:7c:c3:8e:
b3:13:54:2f:82:db:be:97:9f:c5:a5:40:b5:e3:14:d0:6c:1a:
a9:ad:87:dd:35:85:14:34:77:23:dd:cd:69:df:80:4b:bf:64:
e5:75:cb:ef:cc:1d:4f:a9:02:d6:40:dd:1b:d7:e6:9a:43:fd:
0d:8d:42:72:55:90:3f:e9:4f:5c:65:20:ac:53:ed:65:9e:5a:
80:91:b0:02:26:cd:9f:45:3f:cc:fa:be:c1:b9:ee:d4:7b:45:
9f:9b:9e:02:b1:93:83:64:80:f0:59:b4:11:2a:a7:e0:d0:6b:
02:0c:db:f7:4d:78:5d:fc:de:2b:ab:91:e8:11:27:f7:a7:78:
4d:d4:53:0e:bf:6f:8c:ab:2e:25:4f:dd:cf:9f:3c:6f:fa:f8:
e9:28:20:dd:7c:e2:86:65:1b:37:ff:90:b3:91:d5:53:ef:45:
6c:5d:38:09:81:5e:a9:e2:3e:9d:0f:e0:47:7e:83:7c:5e:f1:
27:26:76:3a:d9:02:c0:a2:90:24:84:a5:67:39:d1:04:68:26:
b0:73:96:63:f6:d1:27:c5:24:95:35:eb:4d:d9:13:ab:eb:14:
a7:41:10:68:5e:c7:78:fc:a1:46:41:c5:bb:1e:36:1b:2d:db:
0c:e2:3d:2f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAZSNawUhX7B8dgWYz7o7IgcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTIyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGEyM2NjMmNmODhhZTQ1ODVjZjhhYWY5YTcxNGE5YWQyZTZmMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8t0Dfp6BCSXy9s64rhOIKgvgGq
MFRpWzsLu4zk2D3vBQcmWTrU2tv8fdskq9Kwp8/oq32rwxJb9D146vFQLcOq2uFk
nycJbJus8iwC8/UR0WmWaC7ah3Zf72LfX8T5d71DzvlhM4d5I6qBEQRsl2susmAT
TPwcA0WagKHBJTBHH+oOYBHvKezkzwziJJe9B5BWgxZEV4aukvUR7WnWnncg4fGU
yCV17R9gWemteIlvwBdbDA34RPBLKkZWkuzYZ5eWMxYO6Dk2cjYVKP/QZwTSFWuQ
GcI81RzSV2AavrwbjsTUJIIJOQ2xKI+Wlr+84yRgIMc/iKCkpObBW8pplwIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFJ2iPMLPiK5Fhc+Kr5pxSprS5vGYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E0YzZi
ZGM1LWViNGUtNGI2ZS05NWY2LTYyNzkwZTU3ZjNiZS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRj
NmJkYzUtZWI0ZS00YjZlLTk1ZjYtNjI3OTBlNTdmM2JlLzAvOURBMjNDQzJDRjg4
QUU0NTg1Q0Y4QUFGOUE3MTRBOUFEMkU2RjE5OC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
AG1GSDANBAIAAjAHAwUDKhPuQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA4N0w
DQYJKoZIhvcNAQELBQADggEBAF6TkxM46cFtdJSEwdJE/nzDjrMTVC+C276Xn8Wl
QLXjFNBsGqmth901hRQ0dyPdzWnfgEu/ZOV1y+/MHU+pAtZA3RvX5ppD/Q2NQnJV
kD/pT1xlIKxT7WWeWoCRsAImzZ9FP8z6vsG57tR7RZ+bngKxk4NkgPBZtBEqp+DQ
awIM2/dNeF383iurkegRJ/eneE3UUw6/b4yrLiVP3c+fPG/6+OkoIN184oZlGzf/
kLOR1VPvRWxdOAmBXqniPp0P4Ed+g3xe8ScmdjrZAsCikCSEpWc50QRoJrBzlmP2
0SfFJJU1603ZE6vrFKdBEGhex3j8oUZBxbseNhst2wziPS8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:40 2025 by rpki-client