Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer (raw, json)
Hash identifier: xziMQo8KTRX5C/XapJQ+g1GMsfOfccePK7vOHv902zw=
Subject key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423697D82EEC83D037790162F364DB1AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35482
IP: 45.66.180.0/22
IP: 2a09:69c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7d:82:ee:c8:3d:03:77:90:16:2f:36:4d:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:e6:9a:67:1b:28:2f:07:b9:3e:6f:ef:c8:
d4:37:0f:3c:67:57:00:e0:cd:94:d0:90:c7:c4:8f:
41:3a:a8:e5:0f:64:99:cd:aa:e8:ec:7c:f6:90:de:
e5:b3:b7:0c:4a:49:22:e3:75:1b:2f:01:9f:db:c9:
29:f3:96:9b:ae:21:c5:06:47:1f:d7:09:a4:f7:d7:
95:60:03:0e:c3:ba:1a:53:bb:a2:65:d8:20:16:7d:
5e:25:85:58:c5:b8:a6:25:92:ba:53:59:ba:fc:b2:
de:9d:69:60:88:a7:14:c8:cc:45:94:bd:fc:34:16:
4d:62:a2:e3:e9:a8:1e:38:c1:51:90:b4:72:dc:00:
b0:0a:1e:43:40:7d:2f:f8:5e:e7:94:8e:ba:4d:19:
3d:a0:d9:93:ce:f4:f0:63:12:40:a3:a7:96:0a:39:
1b:1f:1e:8a:4d:77:c1:72:c0:a5:a8:17:51:55:04:
11:99:85:e2:34:3c:fe:e5:81:fd:59:8d:61:1a:a0:
18:42:13:e7:ed:1a:94:8e:7a:36:7f:d3:a2:5f:17:
69:8a:8f:69:f5:b8:b7:43:9b:a9:18:4f:1e:e9:9b:
5d:18:12:fb:f1:bb:07:02:d7:46:71:c5:2f:10:ec:
ef:01:4a:b8:a8:db:86:32:d8:bd:a2:db:62:2c:85:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.180.0/22
IPv6:
2a09:69c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35482
Signature Algorithm: sha256WithRSAEncryption
75:5d:e1:63:62:eb:ca:18:36:9c:da:d0:59:96:d0:a1:8a:d2:
a4:53:72:61:a0:0f:8d:14:0a:92:bd:a0:65:51:68:73:63:13:
66:e8:b3:7c:e0:b4:49:69:d9:d0:9b:a9:0a:00:2c:84:5e:08:
6b:2a:43:02:ee:4a:2d:d3:71:7d:bf:b8:3f:e1:d6:43:84:57:
56:97:c8:68:88:e4:91:17:7a:83:de:54:74:9e:4e:94:4a:39:
76:e3:ab:41:af:b1:c1:ec:79:3c:bf:4f:44:f0:09:2e:9a:d9:
d5:4d:88:32:33:b5:8c:2f:04:d4:d5:64:3c:ee:36:c4:58:0d:
fe:53:24:59:55:dd:96:0e:1a:2e:57:97:7e:d2:6f:e2:90:ac:
1b:72:a9:59:8b:b1:73:0f:b2:8c:04:1d:9d:40:21:07:5d:73:
b9:3f:d9:87:2e:32:c5:12:ac:b2:57:6b:b6:4a:43:04:12:be:
b0:b0:5d:59:b9:1a:4c:33:2a:01:1c:b8:3e:c1:04:0e:37:a8:
57:92:d5:45:ac:05:b1:dc:85:cc:c4:45:46:90:0d:f5:bb:d9:
22:4b:bb:aa:d2:85:b3:15:56:0b:02:1e:cd:7d:b1:a6:e1:42:
91:3b:86:d2:b0:b1:1d:0a:c2:fb:dd:36:e6:c6:c2:89:38:c0:
94:76:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:08 2025 by rpki-client