Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.cer (raw, json)
Hash identifier: f5FPGvaZkdoKLrHqSo70o2ewofM+yTY92mjyYU4Nroc=
Subject key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5240EB0FF380CE54D4CBEAC402057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 171.25.216.0/24
IP: 2a13:a600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:24:0e:b0:ff:38:0c:e5:4d:4c:be:ac:40:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:6e:f0:c3:ae:17:33:f6:e0:20:a1:36:ed:
47:06:5a:7f:b5:48:e0:5e:e4:b7:21:68:6f:8a:92:
ba:3c:a9:f2:c2:fe:37:a3:be:bf:50:3e:26:15:3a:
e0:5a:b0:64:fa:8c:52:38:32:ed:2d:ad:20:81:69:
f7:78:32:29:90:fd:3a:94:34:9f:7c:03:1f:29:e1:
d7:11:f7:ca:fa:cb:9b:d6:2c:c0:02:cc:39:84:79:
25:94:5e:1b:41:1b:22:45:dc:01:fa:5e:ab:6d:65:
0a:70:5d:63:f2:2e:9a:94:bf:cb:32:cf:c9:97:0f:
fa:33:dc:ec:bf:69:90:27:45:90:e4:59:21:16:54:
5c:7a:e1:95:8e:fb:6e:09:93:2c:ee:f5:2b:d6:60:
6e:9b:4d:61:2d:57:2f:da:2d:56:3b:1d:8b:9c:0a:
c2:45:da:f8:9f:0a:e2:db:c7:bf:85:56:6f:01:4f:
fa:7f:3e:68:d1:20:cd:57:fe:b8:01:4b:a6:d6:8f:
4a:83:22:61:39:4a:aa:41:1e:b8:98:39:af:fd:a6:
dc:2e:44:cf:a6:b8:66:13:f4:24:e7:8a:9b:c7:07:
ca:ac:b5:55:af:41:58:54:2c:e6:df:d4:7d:74:81:
5a:6f:2a:db:ae:11:b6:9e:da:ef:a6:5a:b1:24:c1:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.216.0/24
IPv6:
2a13:a600::/29
Signature Algorithm: sha256WithRSAEncryption
29:33:c3:d8:55:57:7d:f0:21:ac:e0:5a:03:ae:44:da:5c:ae:
9d:7a:b7:11:c0:8f:49:cb:7a:31:2d:42:e0:c8:c8:19:eb:d2:
70:3b:d0:9f:fc:16:8f:24:82:c9:e1:38:84:6c:af:78:ad:2e:
22:6a:41:17:b7:c0:70:df:da:40:e4:21:c3:2c:cd:0b:9c:e3:
58:64:04:09:28:d9:8d:9e:62:b6:c0:f1:18:33:df:21:72:2d:
9e:9c:58:f2:4d:27:0e:9c:64:33:8d:06:bb:d1:ae:0c:ea:dd:
0d:01:e5:9a:4c:01:6a:b5:ef:dd:9c:12:56:7c:eb:ad:8c:e4:
eb:65:f5:90:06:85:48:c9:90:30:01:b6:7b:76:06:a5:10:99:
8e:e8:e7:03:56:b7:f0:fa:53:d8:4e:98:43:31:24:1c:24:1c:
ef:57:d4:70:59:27:c7:0c:67:db:44:cb:69:ca:3a:a1:3f:cc:
6a:12:5d:0a:9d:94:34:5f:37:4b:13:c2:5a:9e:eb:fc:7b:e1:
f1:b4:6a:1b:fc:5b:9b:7c:ea:3d:71:81:e5:b7:d8:87:a7:ab:
e6:04:61:ea:c1:12:81:3b:03:23:96:be:59:68:68:13:59:92:
6e:fb:d7:f0:1b:f7:c8:5e:92:52:4d:5c:9d:9b:e3:ae:7d:35:
ab:09:4e:a1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQntSQOsP84DOVNTL6sQCBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzE2MjdiOTIzOWZlYTM0NTdjZDg3Y2I5MzdhYjRjNzk4NmNhYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpu8MOuFzP24CChNu1HBlp/tUjg
XuS3IWhvipK6PKnywv43o76/UD4mFTrgWrBk+oxSODLtLa0ggWn3eDIpkP06lDSf
fAMfKeHXEffK+sub1izAAsw5hHkllF4bQRsiRdwB+l6rbWUKcF1j8i6alL/LMs/J
lw/6M9zsv2mQJ0WQ5FkhFlRceuGVjvtuCZMs7vUr1mBum01hLVcv2i1WOx2LnArC
Rdr4nwri28e/hVZvAU/6fz5o0SDNV/64AUum1o9KgyJhOUqqQR64mDmv/abcLkTP
prhmE/Qk54qbxwfKrLVVr0FYVCzm39R9dIFabyrbrhG2ntrvplqxJMGj6QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzVlNDZj
MS1mNDNiLTRlMTItYmI3ZC1hNWZlYjM5NzM1MTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNWU0NmMx
LWY0M2ItNGUxMi1iYjdkLWE1ZmViMzk3MzUxMi8xL3R4WW51U09mNmpSWHpZZkxr
M3EweDVoc3JBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAqxnYMA0EAgACMAcDBQMqE6YAMA0GCSqGSIb3
DQEBCwUAA4IBAQApM8PYVVd98CGs4FoDrkTaXK6dercRwI9Jy3oxLULgyMgZ69Jw
O9Cf/BaPJILJ4TiEbK94rS4iakEXt8Bw39pA5CHDLM0LnONYZAQJKNmNnmK2wPEY
M98hci2enFjyTScOnGQzjQa70a4M6t0NAeWaTAFqte/dnBJWfOutjOTrZfWQBoVI
yZAwAbZ7dgalEJmO6OcDVrfw+lPYTphDMSQcJBzvV9RwWSfHDGfbRMtpyjqhP8xq
El0KnZQ0XzdLE8Januv8e+HxtGob/FubfOo9cYHlt9iHp6vmBGHqwRKBOwMjlr5Z
aGgTWZJu+9fwG/fIXpJSTVydm+OufTWrCU6h
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:06:07 2025 by rpki-client