Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.cer (raw, json)
Hash identifier: a6W/3e7KQ5ZkOXIOLHGXkF8JhyIFL0YIE8VG9sx/gfo=
Subject key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B3A57A47E1B64BA02344CD5B9BD89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43584
IP: 46.16.160.0/23
IP: 46.16.164.0/24
IP: 46.16.166.0/24
IP: 91.197.140.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3a:57:a4:7e:1b:64:ba:02:34:4c:d5:b9:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:93:ed:b2:fc:fb:ed:63:8a:db:76:d0:2f:
b9:ce:98:5f:4d:a2:d1:39:b5:6d:36:a2:d9:16:cb:
b9:63:99:d2:e9:79:14:08:98:f2:9f:da:77:21:f7:
a9:7d:8f:1f:ac:62:9d:7c:f3:fa:fe:b1:b1:c4:a1:
c7:bd:b3:de:2d:b8:20:71:d1:07:ed:98:9b:d2:bd:
58:fb:0b:22:ac:31:fd:46:9e:1c:a6:a9:00:25:70:
2c:61:e7:65:fc:05:de:35:4c:9f:2c:e7:3b:7a:2e:
00:63:c6:49:53:0f:72:86:a7:30:71:20:62:ba:2a:
00:fb:f3:9a:5d:09:81:d1:9c:f1:cb:88:1f:03:98:
f0:93:47:80:ac:1f:a3:90:9a:a7:c7:64:a9:ff:3c:
c9:44:f0:3a:65:6c:41:02:c4:bd:4b:f9:d9:21:56:
60:1c:30:65:0d:22:4f:c3:6f:60:42:10:f9:5a:35:
71:4d:4f:31:54:49:f7:8d:54:6e:e7:b8:77:6a:77:
8c:0d:6d:93:f8:df:1b:29:17:3c:3d:a6:5e:8e:23:
58:0e:21:06:d9:c2:6d:bc:5c:18:1d:4f:ad:ca:db:
b8:0c:eb:0b:9d:e4:a5:f6:7c:c4:ac:e5:d9:d9:bb:
5b:a7:a3:d2:b9:72:d4:5d:45:c6:ff:46:c9:4c:84:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0/24
46.16.166.0/24
91.197.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43584
Signature Algorithm: sha256WithRSAEncryption
80:ac:5d:9c:74:0c:75:ea:4a:49:9d:64:33:90:d8:b2:65:b4:
5a:35:53:8d:29:1d:25:5c:28:b3:10:a4:c2:5f:53:00:d1:30:
f1:17:43:c2:90:c7:63:4f:37:30:4a:b5:3a:16:a9:fd:e4:96:
9c:63:fb:d3:87:99:78:93:a6:d3:6c:8b:fc:12:e5:e2:45:84:
96:15:09:66:5b:ae:7e:d4:f3:35:7a:8a:2b:97:cb:36:09:a4:
34:96:f0:9a:54:bf:0d:1f:b7:19:a2:7d:6e:de:97:77:4a:75:
28:57:67:5d:ef:e8:05:83:33:af:94:17:2a:21:b7:b6:6d:d5:
0a:a2:d0:1c:e3:80:3b:a1:0a:4e:1e:7f:81:9e:a5:78:6e:69:
98:d1:c8:0b:cb:61:69:b5:e7:6a:9a:5f:a6:a3:26:f9:e8:fe:
ff:dd:a6:92:42:f2:cc:81:72:2d:bf:fe:af:1a:ad:88:a7:af:
73:2a:b0:28:5e:82:24:f2:2a:e8:8a:66:cc:f1:37:cd:f7:20:
7a:67:cb:6d:37:3f:d4:0e:eb:54:61:0a:dc:3a:d0:90:c8:cf:
0d:51:84:8c:04:ed:2b:a4:bb:6b:08:4f:dd:46:f6:df:c6:ba:
c8:97:2c:24:98:b8:d2:d4:7d:64:4c:13:d8:63:a2:f8:08:ce:
89:55:db:ee
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZQmazpXpH4bZLoCNEzVub2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjhmZjkyMjllZmQ4ZDEyYjQyNzNmMzQ2ZjhjNjQ1NGVhNTg3ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmT7bL8++1jitt20C+5zphfTaLR
ObVtNqLZFsu5Y5nS6XkUCJjyn9p3IfepfY8frGKdfPP6/rGxxKHHvbPeLbggcdEH
7Zib0r1Y+wsirDH9Rp4cpqkAJXAsYedl/AXeNUyfLOc7ei4AY8ZJUw9yhqcwcSBi
uioA+/OaXQmB0Zzxy4gfA5jwk0eArB+jkJqnx2Sp/zzJRPA6ZWxBAsS9S/nZIVZg
HDBlDSJPw29gQhD5WjVxTU8xVEn3jVRu57h3aneMDW2T+N8bKRc8PaZejiNYDiEG
2cJtvFwYHU+tytu4DOsLneSl9nzErOXZ2btbp6PSuXLUXUXG/0bJTISWkwIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFKaP+SKe/Y0StCc/NG+MZFTqWH7MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzJmZjk4
ZS02ZmY5LTQyMzMtYjlmMS0yMjdlMjFlNjkxZTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMmZmOThl
LTZmZjktNDIzMy1iOWYxLTIyN2UyMWU2OTFlNy8xL3BvXzVJcDc5alJLMEp6ODBi
NHhrVk9wWWZzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQBLhCgAwQALhCkAwQALhCmAwQCW8WMMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwCqQDANBgkqhkiG9w0BAQsFAAOCAQEAgKxdnHQM
depKSZ1kM5DYsmW0WjVTjSkdJVwosxCkwl9TANEw8RdDwpDHY083MEq1Ohap/eSW
nGP704eZeJOm02yL/BLl4kWElhUJZluuftTzNXqKK5fLNgmkNJbwmlS/DR+3GaJ9
bt6Xd0p1KFdnXe/oBYMzr5QXKiG3tm3VCqLQHOOAO6EKTh5/gZ6leG5pmNHIC8th
abXnappfpqMm+ej+/92mkkLyzIFyLb/+rxqtiKevcyqwKF6CJPIq6IpmzPE3zfcg
emfLbTc/1A7rVGEK3DrQkMjPDVGEjATtK6S7awhP3Ub238a6yJcsJJi40tR9ZEwT
2GOi+AjOiVXb7g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:19 2025 by rpki-client