Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer (raw, json)
Hash identifier: OhrrqwyD4aqAN2e82ItBxuu925LZG8+jE/62LkouABE=
Subject key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D4FBF86D20C66E68283128205845C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24581
AS: 24989
AS: 34972
AS: 59991
AS: 197539
IP: 46.183.152.0/21
IP: 88.84.128.0/19
IP: 89.202.0.0/17
IP: 185.1.102.0/24
IP: 193.110.116.0/22
IP: 217.68.144.0/20
IP: 217.79.208.0/20
IP: 2001:7f8:bd::/48
IP: 2001:4c68::/32
IP: 2a01:5000::/32
IP: 2a02:20a8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4f:bf:86:d2:0c:66:e6:82:83:12:82:05:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca77c708af0ba1f81549c9f87089559390167a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:d8:ea:6a:f1:71:1d:37:4c:8b:0d:84:c3:
fa:3b:a3:34:79:60:4d:ab:87:4b:32:db:5d:61:61:
07:6d:05:de:ac:43:3c:79:ec:7c:eb:02:de:0a:e0:
e5:ae:36:13:55:4f:6b:91:3a:3d:d6:d1:6b:2a:76:
3e:6a:24:95:be:f5:54:b9:91:b6:db:b4:e3:4e:c2:
f6:d5:5b:8b:16:30:de:ee:44:50:1b:34:2f:a9:11:
18:c4:59:34:3c:13:bc:c3:f4:57:f8:47:32:a1:fc:
52:fa:d4:9f:13:f9:ed:b9:00:9e:5e:39:cc:32:aa:
76:24:90:39:c0:02:3c:b3:67:0b:5d:7b:62:46:28:
09:5f:84:ea:ce:bc:39:5f:3a:d5:1d:28:de:3d:67:
24:ef:a5:55:81:bf:58:48:be:d6:0e:68:72:b2:3c:
d1:ad:2c:46:4f:3f:82:59:72:3e:89:1c:51:39:23:
1a:40:12:e3:fa:57:41:48:44:b4:26:a7:b6:0f:f9:
e2:d3:b2:d9:b6:9b:be:96:a7:09:8b:0c:b3:b3:f9:
b1:56:75:5b:50:30:21:51:11:4f:18:e2:6d:06:62:
8e:c9:f4:ff:4a:83:4b:83:45:91:f5:b0:9b:71:2c:
df:7e:b3:c5:15:39:0e:f2:d4:15:e8:af:84:45:e7:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.152.0/21
88.84.128.0/19
89.202.0.0/17
185.1.102.0/24
193.110.116.0/22
217.68.144.0/20
217.79.208.0/20
IPv6:
2001:7f8:bd::/48
2001:4c68::/32
2a01:5000::/32
2a02:20a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24581
24989
34972
59991
197539
Signature Algorithm: sha256WithRSAEncryption
1f:f3:9b:44:55:84:93:57:9c:a8:8d:cd:04:4a:4e:c0:51:32:
25:9a:11:bf:fe:d7:fe:84:ae:a8:60:d8:ae:d5:85:bd:42:e8:
76:32:1e:96:ac:e6:ab:54:86:ce:11:5c:12:8b:ae:74:be:a0:
fa:b6:d3:df:31:fe:6a:08:f8:fd:47:e1:07:3c:14:d6:43:f4:
b5:9d:5a:34:90:f8:6c:79:d4:fa:5e:59:54:5d:09:91:e5:df:
15:33:24:83:6d:58:fb:6b:6d:47:5d:da:5a:3c:07:06:55:b3:
8f:7e:a5:3d:2b:c0:c7:3a:66:cf:16:20:d3:41:ea:f5:49:c6:
3d:ac:ba:b6:e8:cb:5d:af:3b:41:44:90:7b:32:b6:2d:e7:ec:
8b:9c:a5:da:d0:a5:e4:ce:f9:23:ce:f7:90:14:70:b3:fa:28:
9f:eb:29:1c:fb:ae:a8:0c:4a:a6:a0:d5:24:17:df:e0:3c:27:
79:06:a1:6f:f1:f8:a2:79:f3:fc:4c:b7:53:88:02:b9:7f:43:
0e:a6:e6:2c:01:7e:87:57:4c:23:c0:b1:28:2e:e1:14:36:d8:
80:91:a7:ba:0c:ea:cd:d3:5a:49:21:2e:19:08:61:b1:f1:3f:
f2:21:13:30:af:1d:bf:cd:bb:32:2d:37:d5:cf:8d:f0:92:55:
a5:ce:1a:51
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAZQijU+/htIMZuaCgxKCBYRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2E3N2M3MDhhZjBiYTFmODE1NDljOWY4NzA4OTU1OTM5MDE2N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIbY6mrxcR03TIsNhMP6O6M0eWBN
q4dLMttdYWEHbQXerEM8eex86wLeCuDlrjYTVU9rkTo91tFrKnY+aiSVvvVUuZG2
27TjTsL21VuLFjDe7kRQGzQvqREYxFk0PBO8w/RX+EcyofxS+tSfE/ntuQCeXjnM
Mqp2JJA5wAI8s2cLXXtiRigJX4Tqzrw5XzrVHSjePWck76VVgb9YSL7WDmhysjzR
rSxGTz+CWXI+iRxROSMaQBLj+ldBSES0Jqe2D/ni07LZtpu+lqcJiwyzs/mxVnVb
UDAhURFPGOJtBmKOyfT/SoNLg0WR9bCbcSzffrPFFTkO8tQV6K+ERec6iwIDAQAB
o4IC/DCCAvgwHQYDVR0OBBYEFKynfHCK8LofgVScn4cIlVk5AWelMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzhmZTdk
OC0wMTdiLTQxYWEtYTkxZi0yOGIxOWUzZmQ0YTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvOGZlN2Q4
LTAxN2ItNDFhYS1hOTFmLTI4YjE5ZTNmZDRhNi8xL3JLZDhjSXJ3dWgtQlZKeWZo
d2lWV1RrQlo2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF
BwEHAQH/BFowWDAwBAIAATAqAwQDLreYAwQFWFSAAwQHWcoAAwQAuQFmAwQCwW50
AwQE2USQAwQE2U/QMCQEAgACMB4DBwAgAQf4AL0DBQAgAUxoAwUAKgFQAAMFAyoC
IKgwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwICYAUCAmGdAgMAiJwCAwDqVwIDAwOj
MA0GCSqGSIb3DQEBCwUAA4IBAQAf85tEVYSTV5yojc0ESk7AUTIlmhG//tf+hK6o
YNiu1YW9Quh2Mh6WrOarVIbOEVwSi650vqD6ttPfMf5qCPj9R+EHPBTWQ/S1nVo0
kPhsedT6XllUXQmR5d8VMySDbVj7a21HXdpaPAcGVbOPfqU9K8DHOmbPFiDTQer1
ScY9rLq26MtdrztBRJB7MrYt5+yLnKXa0KXkzvkjzveQFHCz+iif6ykc+66oDEqm
oNUkF9/gPCd5BqFv8fiiefP8TLdTiAK5f0MOpuYsAX6HV0wjwLEoLuEUNtiAkae6
DOrN01pJIS4ZCGGx8T/yIRMwrx2/zbsyLTfVz43wklWlzhpR
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:00 2025 by rpki-client