Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
File: iBKgqAncPNH72JUaj4D2mSXhGQg.cer (raw, json)
Hash identifier: 5r+jnk5GshDqJ7ae2EnNF5o7OonMS3kHeSoFpWpCOsM=
Subject key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC486E1F97703BE19220D8E4A67A82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62292
IP: 92.118.24.0/22
IP: 185.111.88.0/22
IP: 185.140.108.0/22
IP: 193.32.232.0/22
IP: 2a06:5c80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:48:6e:1f:97:70:3b:e1:92:20:d8:e4:a6:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:fb:6e:cb:3b:36:82:e0:20:8e:df:55:ad:
1b:19:83:97:97:e5:04:4b:fd:64:c8:b4:6a:ac:7a:
d1:17:5d:f1:58:a7:51:18:f0:3b:10:6e:a2:2b:1d:
81:4c:8b:dd:cf:34:89:f1:56:81:04:1f:ec:5c:4f:
22:2a:67:c4:68:c9:ec:0e:47:66:60:22:2d:9c:ed:
97:98:59:12:72:b3:53:fd:8b:4f:9e:5b:c4:10:58:
b7:5b:8b:83:94:35:d8:e3:cd:cd:ee:0b:49:24:b8:
09:23:18:e8:3d:78:72:2e:eb:a1:5e:9f:68:ad:a5:
d2:a5:2b:5a:67:8c:0d:8c:ad:ed:db:c7:d7:b1:f6:
67:11:fc:87:82:96:77:7d:13:82:30:22:45:d6:c5:
0c:fa:34:30:a0:0d:5e:d9:7f:7e:69:5c:8c:b3:59:
3b:a2:42:0c:c5:c5:b3:c1:20:72:5d:e7:ec:18:d3:
7e:d2:87:3e:8e:26:f4:a3:52:d8:20:a0:c6:ef:8f:
77:dd:28:52:93:74:7f:c5:11:1e:de:7f:b1:b9:c8:
d3:58:26:0d:09:e3:bf:84:0b:01:b9:83:e0:ea:71:
a2:8d:56:e7:9c:15:25:f6:bc:72:a8:ac:04:c1:eb:
ff:1c:82:1c:16:36:1c:b4:25:34:b8:03:0a:01:66:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.24.0/22
185.111.88.0/22
185.140.108.0/22
193.32.232.0/22
IPv6:
2a06:5c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62292
Signature Algorithm: sha256WithRSAEncryption
67:4e:6d:4c:86:ec:07:2b:c6:e2:e8:53:9e:cb:f8:e8:7b:0e:
5e:b3:2c:ff:74:a2:31:00:d1:1d:a9:ac:e1:0e:da:62:e2:83:
2b:30:db:91:40:8d:84:bd:ed:2e:40:b5:87:5b:48:3b:e0:f6:
f9:1b:b8:b1:09:b1:73:b4:a8:2d:46:c1:05:95:d9:d8:ad:2b:
57:84:82:f5:44:6c:3c:24:cb:74:5f:9a:8e:8d:f6:89:d7:96:
df:e0:af:a1:d3:6e:ff:81:80:a1:24:e5:a1:02:17:fa:12:90:
1c:a3:00:3e:95:c5:09:eb:8b:ee:ac:13:d6:fd:a3:fa:a3:11:
cd:8a:bf:0c:39:43:6b:63:ac:0a:f0:62:7f:85:92:66:d9:6a:
82:9f:b0:f8:01:46:10:f3:71:02:ff:5f:b8:6e:74:75:51:20:
2d:f9:cc:ac:23:38:e3:ae:0e:e0:eb:a0:0a:d3:e4:8f:7e:c2:
99:1a:66:79:ec:04:db:57:8f:ae:fc:3c:9b:26:b7:4e:ca:2b:
08:5e:93:a5:57:b0:ce:6a:c5:51:e7:09:bf:d4:b0:e6:e8:6b:
eb:cf:f7:ab:48:28:09:c8:2d:1d:6d:bc:e6:22:31:d8:1d:5e:
64:55:57:f6:b3:fe:93:5d:5c:03:c0:bc:0e:ce:1d:a1:6f:45:
62:a1:29:41
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZQi/EhuH5dwO+GSINjkpnqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODEyYTBhODA5ZGMzY2QxZmJkODk1MWE4ZjgwZjY5OTI1ZTExOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjf7bss7NoLgII7fVa0bGYOXl+UE
S/1kyLRqrHrRF13xWKdRGPA7EG6iKx2BTIvdzzSJ8VaBBB/sXE8iKmfEaMnsDkdm
YCItnO2XmFkScrNT/YtPnlvEEFi3W4uDlDXY483N7gtJJLgJIxjoPXhyLuuhXp9o
raXSpStaZ4wNjK3t28fXsfZnEfyHgpZ3fROCMCJF1sUM+jQwoA1e2X9+aVyMs1k7
okIMxcWzwSByXefsGNN+0oc+jib0o1LYIKDG74933ShSk3R/xREe3n+xucjTWCYN
CeO/hAsBuYPg6nGijVbnnBUl9rxyqKwEwev/HIIcFjYctCU0uAMKAWbz7wIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFIgSoKgJ3DzR+9iVGo+A9pkl4RkIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2M4YWEw
OS1iZGZiLTQzY2EtODUyMi1mYTc1Y2JlOWJlYWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYzhhYTA5
LWJkZmItNDNjYS04NTIyLWZhNzVjYmU5YmVhZC8xL2lCS2dxQW5jUE5INzJKVWFq
NEQybVNYaEdRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCXHYYAwQCuW9YAwQCuYxsAwQCwSDoMA0EAgAC
MAcDBQMqBlyAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzVDANBgkqhkiG9w0B
AQsFAAOCAQEAZ05tTIbsByvG4uhTnsv46HsOXrMs/3SiMQDRHams4Q7aYuKDKzDb
kUCNhL3tLkC1h1tIO+D2+Ru4sQmxc7SoLUbBBZXZ2K0rV4SC9URsPCTLdF+ajo32
ideW3+CvodNu/4GAoSTloQIX+hKQHKMAPpXFCeuL7qwT1v2j+qMRzYq/DDlDa2Os
CvBif4WSZtlqgp+w+AFGEPNxAv9fuG50dVEgLfnMrCM4464O4OugCtPkj37CmRpm
eewE21ePrvw8mya3TsorCF6TpVewzmrFUecJv9Sw5uhr68/3q0goCcgtHW285iIx
2B1eZFVX9rP+k11cA8C8Ds4doW9FYqEpQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:16 2025 by rpki-client on console.sobornost.net