Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.cer (raw, json)
Hash identifier: K4a70nkm9LBlO1xf6mnJfUs6WYGL9tSJvLeiV4JDiF8=
Subject key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3DBA0AD2E2446F85045665C09CCBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198717
IP: 37.233.96.0/20
IP: 2a00:f2c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:db:a0:ad:2e:24:46:f8:50:45:66:5c:09:cc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:5f:fe:bc:a7:1f:8b:6a:ec:18:55:8d:70:
19:b3:62:6c:1f:65:e2:05:2c:58:61:24:62:02:bc:
65:d0:12:bc:86:7c:81:29:91:e4:56:11:03:3a:aa:
e0:be:db:06:c9:5f:8c:c9:79:d9:23:bc:9d:07:48:
6d:ea:85:18:70:ea:c9:cb:3d:75:b1:4b:aa:b6:20:
b9:dd:ab:67:73:f1:55:33:b4:ab:5d:ad:ef:e7:63:
d7:a5:2d:38:f2:55:bb:d4:d6:9e:6d:9a:76:05:52:
2d:bb:62:35:30:ce:cf:65:67:7e:13:a9:9e:ea:e8:
03:bb:6e:b3:b3:cc:d0:ae:ee:57:aa:1c:f9:8e:9d:
2a:e7:a5:4c:a7:33:8a:65:e8:86:cf:6e:2d:4f:36:
63:c5:69:26:46:40:97:ea:d9:51:ea:1e:82:b8:0f:
69:d6:2d:d7:98:5f:f1:c5:b2:b5:17:93:84:d0:19:
29:a1:9d:3a:95:b5:d1:e2:3c:9f:d1:4a:b3:10:71:
ce:b9:52:23:b2:9e:a6:92:6d:bb:41:15:b4:cd:1a:
33:51:7f:46:a9:31:41:85:0f:75:03:1b:6f:78:45:
59:4f:7f:20:fc:a2:9d:1e:c4:62:62:66:1a:70:77:
fe:fe:ca:31:21:42:62:39:02:d3:79:2c:39:21:9b:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.96.0/20
IPv6:
2a00:f2c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198717
Signature Algorithm: sha256WithRSAEncryption
95:ea:d1:49:49:3d:ae:ec:b4:27:c3:c1:32:18:96:72:08:21:
a4:48:60:e7:07:ae:57:67:1b:fa:c9:39:59:f9:09:d5:a1:43:
67:19:96:97:8f:36:74:b8:f7:e7:a1:bb:27:6e:6c:4f:00:a9:
3f:b7:68:fb:01:f7:7d:06:ed:55:a8:c9:f4:57:70:e9:5b:36:
6c:c5:81:02:e1:bd:5c:c8:b2:81:68:8d:f6:83:ac:1c:96:ae:
2b:32:12:c1:8f:66:4a:ff:23:ed:42:af:bb:49:64:29:06:e8:
cf:e0:26:ee:b9:38:49:21:fb:6b:41:08:d7:2c:13:fd:b7:c2:
47:37:b5:b0:73:33:15:91:62:a5:e1:e0:f3:ae:45:a6:87:da:
9a:25:8d:e5:ab:78:ca:e3:99:5d:58:d9:43:39:32:86:d8:ae:
6e:42:71:47:5b:87:df:ed:35:15:08:59:20:ab:bf:7b:0f:1b:
ab:40:a2:72:05:90:4f:64:35:1e:74:e3:5a:5d:be:db:c6:41:
bd:67:7a:d6:57:1b:30:b7:5e:07:e6:83:49:ed:1f:0d:07:14:
33:1a:d9:a9:25:13:80:58:36:61:85:bd:16:e9:f2:cd:a4:e3:
53:30:0b:76:f4:5b:98:ea:18:0a:c4:ea:ad:95:c4:27:70:21:
fd:eb:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:59 2025 by rpki-client