Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
File: 2fwL7GDQus4YiWd72buQGQzE_SI.cer (raw, json)
Hash identifier: 1YCA40g19Phcr9ARr3rCla6bEj5BJsbw7bOLPzR/IZg=
Subject key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521FA02FDA619EC9FA6E9EE9F07022B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25091
AS: 50327
AS: 51530
AS: 58326
IP: 5.144.32.0/21
IP: 46.20.240.0/20
IP: 85.8.128.0/24
IP: 91.106.208.0/21
IP: 91.247.176.0/24
IP: 185.1.205.0/24
IP: 185.60.52.0/22
IP: 185.66.160.0/22
IP: 185.177.88.0/22
IP: 212.102.126.0/24
IP: 2001:7f8:111::/48
IP: 2a01:80c0::/32
IP: 2a02:2528::/29
IP: 2a0c:c600::/29
IP: 2a0f:c740::/29
IP: 2a11:cac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fa:02:fd:a6:19:ec:9f:a6:e9:ee:9f:07:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:45:86:b3:33:88:db:75:13:86:bc:8f:29:
10:d8:f1:2a:82:b9:4a:5c:42:7b:a1:33:49:f8:a4:
bb:49:16:b3:f5:13:94:53:41:7e:69:04:ac:25:d7:
aa:48:17:fa:4f:ae:28:f7:8b:a2:64:57:ba:0d:16:
35:43:f1:b4:41:8d:68:40:c4:9b:4b:7c:70:df:b2:
a6:62:cf:f9:f2:f1:3a:87:4b:c1:67:45:b1:a3:26:
93:e5:bc:51:03:64:bf:75:5f:84:af:71:d5:f3:d1:
ab:89:09:10:f7:0c:3e:b8:91:d6:13:c5:89:21:d2:
df:97:c2:ec:38:f0:72:3d:18:93:3c:13:c6:eb:e6:
70:85:8e:99:ac:87:a8:9e:d2:9a:22:64:4a:67:d8:
85:d6:09:4e:3a:b8:c5:87:70:94:33:36:2d:da:f5:
74:45:f9:69:91:56:61:ed:96:b3:21:72:7d:0b:41:
67:6a:00:29:5a:86:d3:17:3e:ef:93:d4:a6:5b:bf:
dd:a3:c3:3d:1e:ba:4b:e7:14:12:1e:16:a5:3c:9e:
51:23:36:42:d5:e9:e6:31:6e:d7:a3:55:78:5b:1a:
c9:ed:d0:7d:51:45:a0:a5:2d:03:5f:67:59:20:67:
10:be:2b:fc:16:44:6f:7a:5a:d6:fc:e5:4d:b8:53:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.32.0/21
46.20.240.0/20
85.8.128.0/24
91.106.208.0/21
91.247.176.0/24
185.1.205.0/24
185.60.52.0/22
185.66.160.0/22
185.177.88.0/22
212.102.126.0/24
IPv6:
2001:7f8:111::/48
2a01:80c0::/32
2a02:2528::/29
2a0c:c600::/29
2a0f:c740::/29
2a11:cac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25091
50327
51530
58326
Signature Algorithm: sha256WithRSAEncryption
00:a4:ca:79:8f:54:42:7f:b6:03:53:ec:c0:3b:ee:74:36:37:
ee:a1:c9:05:7f:c7:25:bf:05:44:d6:a1:bd:aa:d9:8d:8d:0a:
26:f8:e4:1d:5d:7a:08:d2:91:53:fe:78:7b:a9:da:85:28:ae:
7d:0a:18:fd:15:24:9f:73:7a:3d:45:09:d7:5f:7c:a6:8b:b7:
94:fc:f8:68:a2:c2:93:d6:2d:f8:5a:9d:5a:06:57:99:22:15:
d9:39:53:75:a5:d8:39:ce:45:90:fb:b1:ec:40:43:78:55:95:
59:28:02:cc:8f:9f:42:6f:e5:ad:8f:ce:68:db:73:0f:0f:3a:
d9:64:18:2c:db:a2:d8:85:3a:56:7d:af:92:61:1a:fc:a1:7b:
dd:62:ef:ff:01:db:a8:ab:90:3b:7a:26:28:45:cb:6a:48:b4:
34:b7:9f:0e:03:fb:a1:67:7d:54:a5:45:56:41:cc:75:97:11:
75:fb:8e:45:4a:6a:e4:fb:e9:b1:3f:38:48:d0:ac:eb:4f:9a:
31:ec:e6:a2:96:f5:29:44:17:0b:7d:4f:43:2e:c4:cd:67:bd:
15:c3:9b:45:87:e8:53:d3:c4:24:a4:5e:ae:85:84:b7:41:2b:
1c:32:60:fa:eb:d1:93:70:ea:3c:a0:70:cf:39:ba:f8:75:55:
5a:32:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:01 2025 by rpki-client