Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
File: 1-3grePIKbktwZDBSvRpArxWlYzg.cer (raw, json)
Hash identifier: jyd/WrAzObhceJxQdkE7RaH/VK7Lf/L+N45HNHu61jc=
Subject key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF92CC8A39C4D7F2A4A1333B486F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209689
IP: 185.174.148.0/22
IP: 212.87.208.0/22
IP: 2a09:dac0::/29
IP: 2a0a:580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f9:2c:c8:a3:9c:4d:7f:2a:4a:13:33:b4:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:8b:50:6c:a5:11:7e:1e:a0:81:60:63:27:
19:74:36:89:b0:d3:bf:50:b0:15:8c:74:43:8d:37:
10:45:b9:bf:47:d3:76:d2:dc:6d:84:91:2a:08:b4:
a0:05:87:52:78:df:dc:4f:9a:63:b7:2e:86:98:90:
47:24:6d:ea:10:a6:e8:71:2a:87:81:bc:36:d7:11:
03:5e:a4:2c:ba:17:ab:c0:23:bb:0a:09:29:d3:f8:
05:4a:d2:33:9b:25:13:8e:9c:32:56:27:e9:19:e6:
ac:38:f5:42:59:9f:c7:b7:42:b7:ca:ba:b5:95:e1:
6b:79:50:57:d6:ee:8e:6d:23:4d:e5:bf:99:95:31:
85:8e:0f:d3:a2:45:a7:0c:e6:59:85:84:ee:ab:d0:
b6:45:73:e8:47:ce:9b:e8:3b:0c:15:d6:9e:fc:e5:
24:e8:8c:d8:16:8a:1b:87:b1:3b:1c:4f:42:4a:27:
78:36:38:81:a2:6d:89:2d:78:dd:c3:84:89:05:7e:
93:a5:f1:20:d3:1f:7f:a4:e3:24:de:85:0b:84:d5:
db:1d:c8:7a:72:9e:4e:f5:19:48:4b:85:59:22:f6:
03:78:21:a4:2d:ce:53:59:29:a6:51:fc:de:8c:35:
4d:78:62:53:47:fd:8c:94:77:ca:26:06:a4:36:c2:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.148.0/22
212.87.208.0/22
IPv6:
2a09:dac0::/29
2a0a:580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209689
Signature Algorithm: sha256WithRSAEncryption
07:7a:0f:a1:41:4e:d2:0a:fc:c5:d8:db:e6:5b:99:57:9a:ff:
b1:58:48:76:51:39:9e:65:16:1c:34:52:88:5a:e8:8a:4f:68:
b3:6e:fa:9c:0f:23:a2:4d:1f:84:8b:a8:5b:5f:39:a2:b2:39:
76:05:38:56:16:c3:54:2e:46:a0:f7:c9:77:c2:fe:24:5d:fa:
46:04:3d:83:3e:56:b8:5c:55:6f:be:61:37:8f:6a:90:5c:00:
e2:e3:cc:0a:8a:a7:92:f9:27:a4:ed:f5:dd:b1:dd:97:83:9e:
7d:c4:71:83:f5:bf:90:dc:2d:30:a7:58:37:8f:0e:6e:11:6c:
5d:df:da:55:91:c3:5f:a3:a2:12:60:f1:bd:81:90:4a:09:6c:
b9:f6:dd:87:b3:50:4d:1d:df:dc:10:14:5c:e4:16:2e:65:a9:
cc:86:10:0b:7a:94:ed:c3:09:eb:1e:c0:12:2c:54:1a:3e:e4:
8e:a8:9a:27:b9:4a:92:26:f2:e2:04:1d:42:5e:47:82:ec:a8:
64:bc:a3:bd:85:7a:d1:a3:b7:23:94:9a:09:8d:c4:b9:d9:c9:
bb:8d:ec:ad:20:de:ef:0b:99:4b:85:db:b6:8d:07:03:4f:1d:
69:0d:65:fd:48:34:48:4f:31:60:b8:be:48:40:0b:9e:8a:e0:
88:fb:a1:59
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAZQiH/ksyKOcTX8qShMztIb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjc4MmI3OGYyMGE2ZTRiNzA2NDMwNTJiZDFhNDBhZjE1YTU2MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8yLUGylEX4eoIFgYycZdDaJsNO/
ULAVjHRDjTcQRbm/R9N20txthJEqCLSgBYdSeN/cT5pjty6GmJBHJG3qEKbocSqH
gbw21xEDXqQsuherwCO7Cgkp0/gFStIzmyUTjpwyVifpGeasOPVCWZ/Ht0K3yrq1
leFreVBX1u6ObSNN5b+ZlTGFjg/TokWnDOZZhYTuq9C2RXPoR86b6DsMFdae/OUk
6IzYFoobh7E7HE9CSid4NjiBom2JLXjdw4SJBX6TpfEg0x9/pOMk3oULhNXbHch6
cp5O9RlIS4VZIvYDeCGkLc5TWSmmUfzejDVNeGJTR/2MlHfKJgakNsKw5wIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFPt4K3jyCm5LcGQwUr0aQK8VpWM4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzlkYzkz
My01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMxYmUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMz
LTVjMGQtNDQ2MS1hNDVkLThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJT
dlJwQXJ4V2xZemcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEF
BQcBBwEB/wQsMCowEgQCAAEwDAMEArmulAMEAtRX0DAUBAIAAjAOAwUDKgnawAMF
AyoKBYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzMZMA0GCSqGSIb3DQEBCwUA
A4IBAQAHeg+hQU7SCvzF2NvmW5lXmv+xWEh2UTmeZRYcNFKIWuiKT2izbvqcDyOi
TR+Ei6hbXzmisjl2BThWFsNULkag98l3wv4kXfpGBD2DPla4XFVvvmE3j2qQXADi
48wKiqeS+Sek7fXdsd2Xg559xHGD9b+Q3C0wp1g3jw5uEWxd39pVkcNfo6ISYPG9
gZBKCWy59t2Hs1BNHd/cEBRc5BYuZanMhhALepTtwwnrHsASLFQaPuSOqJonuUqS
JvLiBB1CXkeC7KhkvKO9hXrRo7cjlJoJjcS52cm7jeytIN7vC5lLhdu2jQcDTx1p
DWX9SDRITzFguL5IQAueiuCI+6FZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:59 2025 by rpki-client on console.sobornost.net