Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer (raw, json)
Hash identifier: XLSu6TCXMFjY8SjYt9RRwTzZ1j7gwnky0Vf825NwYBk=
Subject key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDD121A3A378954A06A3E0CF982D6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21060
AS: 44433
AS: 51251
IP: 80.82.96.0/20
IP: 80.89.16.0/20
IP: 91.195.58.0/23
IP: 91.213.70.0/24
IP: 92.43.232.0/21
IP: 185.134.252.0/22
IP: 185.155.36.0/22
IP: 188.244.64.0/20
IP: 194.8.244.0/23
IP: 2a02:6c0::/32
IP: 2a02:7c00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d1:21:a3:a3:78:95:4a:06:a3:e0:cf:98:2d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b478410224904494e9c0f7d35650a260e5fb6193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:1d:6b:e4:50:a4:a1:de:3e:92:c4:ea:e8:
46:aa:7d:07:6e:f7:28:ab:0a:93:74:a7:78:d9:3e:
e3:59:91:41:82:a4:9e:9d:82:bb:77:04:2b:c8:01:
0d:50:0f:58:4d:66:98:01:ed:f7:2a:00:0f:b7:e9:
e1:7d:2d:dc:34:65:3c:74:ea:32:33:51:c0:f3:2b:
18:d9:42:24:8a:ba:89:12:62:b8:29:e4:3e:58:3e:
82:b2:ae:fc:9d:35:8f:d3:5c:f0:da:86:1c:d8:ad:
33:7d:9a:6b:40:21:bf:47:7b:00:18:62:e6:11:f6:
61:34:f1:f6:15:33:7a:aa:f5:a9:2b:58:6c:85:e2:
0f:24:7f:ee:1d:88:02:29:74:f3:90:ac:f7:ce:1d:
80:12:af:6d:d5:e6:22:48:c7:26:d4:71:0d:98:93:
39:d1:ec:a9:7e:db:ef:aa:e1:23:f1:bb:73:35:53:
27:79:76:4b:5a:d5:e5:d9:6f:4b:7f:c5:c0:b4:ab:
c2:08:d2:4e:ac:87:cc:d7:02:2c:2d:24:9d:be:48:
39:dc:35:7a:86:2f:c9:fd:7a:a8:e3:d6:68:af:0b:
67:93:a7:94:09:03:8c:7f:d3:ea:66:39:36:49:02:
b2:62:b3:bf:c4:d2:f6:a0:7f:9c:84:f9:d2:41:57:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.96.0/20
80.89.16.0/20
91.195.58.0/23
91.213.70.0/24
92.43.232.0/21
185.134.252.0/22
185.155.36.0/22
188.244.64.0/20
194.8.244.0/23
IPv6:
2a02:6c0::/32
2a02:7c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21060
44433
51251
Signature Algorithm: sha256WithRSAEncryption
33:1b:4f:95:c9:71:c2:aa:93:e7:84:51:00:4a:77:a1:15:ec:
2c:f5:a8:78:16:5a:77:89:e6:07:96:86:7f:96:53:f7:66:01:
26:35:f4:6e:6c:9e:0a:25:fe:00:0f:5e:47:db:8c:f3:f9:36:
dd:f8:88:f2:8e:d5:26:e3:24:fa:43:b9:73:81:c9:f7:57:f0:
24:bd:62:f8:22:e1:25:74:ad:d1:0e:1c:6e:15:ea:17:b8:a9:
99:72:67:69:5b:e8:25:66:89:0e:2a:d9:6a:99:3a:2e:ae:27:
0e:f3:1e:3f:b4:41:fb:55:76:6d:cc:c4:d8:ee:e0:df:4b:b5:
d9:15:51:40:4e:48:44:d3:b8:1c:33:d0:13:87:0c:91:d8:5e:
df:87:ab:be:68:2b:01:b5:ee:36:12:c4:0a:f2:a5:59:be:9b:
fc:70:d1:19:f2:0d:06:c2:2d:2e:91:fc:f7:d9:ea:ca:d0:47:
32:c2:43:b9:0e:de:e7:1b:fc:07:f7:9c:27:bb:22:27:ab:9b:
f8:c5:53:02:ff:7b:04:0c:76:2d:4f:8f:54:d4:54:61:22:b5:
0a:8e:ee:7f:a1:62:32:9d:98:e6:67:54:c0:9d:74:c7:ed:62:
db:0f:a1:f2:30:40:be:f2:fa:c0:b0:69:94:b2:15:b5:c8:16:
22:60:01:e2
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZQl/dEho6N4lUoGo+DPmC1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc4NDEwMjI0OTA0NDk0ZTljMGY3ZDM1NjUwYTI2MGU1ZmI2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqUda+RQpKHePpLE6uhGqn0Hbvco
qwqTdKd42T7jWZFBgqSenYK7dwQryAENUA9YTWaYAe33KgAPt+nhfS3cNGU8dOoy
M1HA8ysY2UIkirqJEmK4KeQ+WD6Csq78nTWP01zw2oYc2K0zfZprQCG/R3sAGGLm
EfZhNPH2FTN6qvWpK1hsheIPJH/uHYgCKXTzkKz3zh2AEq9t1eYiSMcm1HENmJM5
0eypftvvquEj8btzNVMneXZLWtXl2W9Lf8XAtKvCCNJOrIfM1wIsLSSdvkg53DV6
hi/J/Xqo49Zorwtnk6eUCQOMf9PqZjk2SQKyYrO/xNL2oH+chPnSQVcnrwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFLR4QQIkkESU6cD301ZQomDl+2GTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzVjZmJm
My1lNzgyLTQwMTMtOGVlZS1kZTdkM2JiZmVlODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNWNmYmYz
LWU3ODItNDAxMy04ZWVlLWRlN2QzYmJmZWU4OC8xL3RIaEJBaVNRUkpUcHdQZlRW
bENpWU9YN1laTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF
BwEHAQH/BFYwVDA8BAIAATA2AwQEUFJgAwQEUFkQAwQBW8M6AwQAW9VGAwQDXCvo
AwQCuYb8AwQCuZskAwQEvPRAAwQBwgj0MBQEAgACMA4DBQAqAgbAAwUAKgJ8ADAj
BggrBgEFBQcBCAEB/wQUMBKgEDAOAgJSRAIDAK2RAgMAyDMwDQYJKoZIhvcNAQEL
BQADggEBADMbT5XJccKqk+eEUQBKd6EV7Cz1qHgWWneJ5geWhn+WU/dmASY19G5s
ngol/gAPXkfbjPP5Nt34iPKO1SbjJPpDuXOByfdX8CS9Yvgi4SV0rdEOHG4V6he4
qZlyZ2lb6CVmiQ4q2WqZOi6uJw7zHj+0QftVdm3MxNju4N9LtdkVUUBOSETTuBwz
0BOHDJHYXt+Hq75oKwG17jYSxArypVm+m/xw0RnyDQbCLS6R/PfZ6srQRzLCQ7kO
3ucb/Af3nCe7Iierm/jFUwL/ewQMdi1Pj1TUVGEitQqO7n+hYjKdmOZnVMCddMft
YtsPofIwQL7y+sCwaZSyFbXIFiJgAeI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:04 2025 by rpki-client on console.sobornost.net