Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
File: AcOKBqObILjaQACSN9dqzdKOcaU.cer (raw, json)
Hash identifier: bdCifSj+DG0YQdg7ZpPrSCL0zAEBvaNwNQShePucq4o=
Subject key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942220345AA5086E269FA809B6D07CE8C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.98.232.0/21
IP: 136.242.128.0/17
IP: 138.12.128.0/17
IP: 148.139.0.0/16
IP: 157.5.128.0/17
IP: 157.70.0.0/17
IP: 163.120.128.0/17
IP: 165.171.0.0/17
IP: 2a04:37c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:5a:a5:08:6e:26:9f:a8:09:b6:d0:7c:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:80:cc:09:91:7e:36:45:07:64:5c:76:4f:
30:2f:85:79:ca:ee:0f:35:98:d9:02:11:60:9c:92:
c9:ec:d4:43:10:7e:04:6c:45:88:84:df:8b:75:d1:
e5:b6:f9:a0:4b:4b:06:92:d8:bb:e6:e0:1b:f0:3f:
02:0f:70:9f:ea:4e:c1:67:6c:33:3c:54:4d:d0:e6:
bf:37:d7:ce:36:58:d3:51:eb:38:c5:00:30:a1:2a:
17:7d:0c:f9:e1:97:c5:36:54:f0:34:62:d9:5b:1c:
48:4e:25:04:7c:72:b4:f8:4a:15:88:75:c5:6c:61:
df:10:69:9a:09:6b:2d:b8:c4:5f:d0:6b:a2:ee:d0:
c6:be:0e:3a:f0:15:10:dc:d2:04:aa:41:43:f1:49:
ac:32:6a:8f:45:d2:27:07:ec:bd:23:88:e2:5d:aa:
d0:7e:c2:5a:5b:f7:01:ad:5a:27:d8:20:1f:9d:26:
64:a8:13:24:0b:34:be:cd:0a:11:83:a1:8f:72:a4:
74:a9:05:c5:30:63:25:b2:b5:1a:26:32:93:45:63:
32:ac:cc:28:d9:be:0a:d7:19:29:73:96:51:7c:37:
61:87:12:46:29:75:15:dc:a2:21:0c:49:eb:e7:2c:
1b:85:49:6a:5f:39:20:e9:e2:28:6d:16:62:93:c8:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:82:75:d0:2d:2b:a4:55:08:e0:17:c5:32:91:b1:d3:57:34:
89:38:88:9e:19:e9:26:ae:6f:a3:85:31:ab:9c:81:03:14:c2:
4b:3b:6a:d5:f9:10:ad:e7:e7:67:7a:03:98:d3:21:d8:b6:ce:
c8:dd:21:39:a0:b0:63:7f:31:0a:fb:42:9a:ea:e1:99:5a:54:
2d:b9:79:45:88:a2:46:2b:1a:ed:a7:d2:3d:d2:95:d7:c5:91:
73:82:02:91:1c:19:55:c6:92:86:86:a7:ce:28:1c:a7:f0:f6:
90:dd:65:5f:21:1d:22:66:7c:04:5c:60:e9:48:92:e9:e4:46:
fd:76:0a:34:d6:3d:d0:b6:5f:43:8b:be:00:4a:ab:2e:b6:6f:
ee:a5:51:98:56:8d:bc:1b:b3:7b:34:2e:70:08:2c:df:1e:3c:
58:71:be:9b:c4:33:a8:d2:fd:44:a1:ea:96:a7:54:49:0d:90:
e5:c1:96:e8:b3:5c:1f:a0:b9:55:f8:25:59:23:78:bd:14:96:
78:39:92:f8:24:92:97:3d:8d:c8:5a:7f:d3:69:f6:f8:a4:db:
c1:97:34:f6:a5:32:1c:58:3e:46:12:a7:d1:1d:e4:94:16:d6:
c4:ae:b9:fd:5b:52:04:00:76:15:94:1d:8b:71:18:9e:2b:ee:
a2:60:48:d8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQiIDRapQhuJp+oCbbQfOjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWMzOGEwNmEzOWIyMGI4ZGE0MDAwOTIzN2Q3NmFjZGQyOGU3MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmyAzAmRfjZFB2Rcdk8wL4V5yu4P
NZjZAhFgnJLJ7NRDEH4EbEWIhN+LddHltvmgS0sGkti75uAb8D8CD3Cf6k7BZ2wz
PFRN0Oa/N9fONljTUes4xQAwoSoXfQz54ZfFNlTwNGLZWxxITiUEfHK0+EoViHXF
bGHfEGmaCWstuMRf0Gui7tDGvg468BUQ3NIEqkFD8UmsMmqPRdInB+y9I4jiXarQ
fsJaW/cBrVon2CAfnSZkqBMkCzS+zQoRg6GPcqR0qQXFMGMlsrUaJjKTRWMyrMwo
2b4K1xkpc5ZRfDdhhxJGKXUV3KIhDEnr5ywbhUlqXzkg6eIobRZik8h/0wIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFAHDigajmyC42kAAkjfXas3SjnGlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzZhOGU1
ZS0zOWI2LTQ3ZTMtYmJiMC1iMjlmMTBjYzAzMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNmE4ZTVl
LTM5YjYtNDdlMy1iYmIwLWIyOWYxMGNjMDMyOC8xL0FjT0tCcU9iSUxqYVFBQ1NO
OWRxemRLT2NhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFcGCCsGAQUF
BwEHAQH/BEgwRjA1BAIAATAvAwQDJWLoAwQHiPKAAwQHigyAAwMAlIsDBAedBYAD
BAedRgADBAejeIADBAelqwAwDQQCAAIwBwMFAyoEN8AwDQYJKoZIhvcNAQELBQAD
ggEBAKuCddAtK6RVCOAXxTKRsdNXNIk4iJ4Z6Saub6OFMaucgQMUwks7atX5EK3n
52d6A5jTIdi2zsjdITmgsGN/MQr7Qprq4ZlaVC25eUWIokYrGu2n0j3SldfFkXOC
ApEcGVXGkoaGp84oHKfw9pDdZV8hHSJmfARcYOlIkunkRv12CjTWPdC2X0OLvgBK
qy62b+6lUZhWjbwbs3s0LnAILN8ePFhxvpvEM6jS/USh6panVEkNkOXBluizXB+g
uVX4JVkjeL0Ulng5kvgkkpc9jchaf9Np9vik28GXNPalMhxYPkYSp9Ed5JQW1sSu
uf1bUgQAdhWUHYtxGJ4r7qJgSNg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net