Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
File: D0fcf_SFuEE7449b7oCRczCzFzg.cer (raw, json)
Hash identifier: siOyYqjnTXpDHzMZ/3aIzOi4q7UZY32VOcqv+eCML94=
Subject key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B219D096D0A16E7F4B37F1239D3066
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44858
IP: 93.95.0.0/21
IP: 2a03:5d80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:d0:96:d0:a1:6e:7f:4b:37:f1:23:9d:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:c3:a5:4c:04:8d:a4:fb:43:92:21:cf:4a:
8d:67:d5:91:ff:8b:ab:8b:91:19:20:db:96:9d:ad:
f4:9b:bc:f0:12:ac:81:b2:92:b9:e1:e0:3b:33:44:
ba:b9:e1:93:43:e3:70:ee:b4:c6:f9:23:98:97:68:
44:a5:b0:6c:ed:38:fe:52:01:92:4f:af:3c:58:e3:
5c:04:3a:54:4d:a5:0a:c3:14:89:d7:9f:63:e5:5b:
05:07:88:15:83:fc:08:97:48:0e:ec:29:b8:da:b2:
61:e0:f1:f2:63:fa:92:ff:67:b8:4c:65:b3:f6:9b:
3e:35:f6:fa:99:1e:7f:d5:ce:d0:58:c5:da:26:1f:
72:81:cd:9e:3c:78:4d:d6:d0:2b:b2:ca:43:7a:45:
57:4f:90:a5:c9:cc:3c:e9:99:e8:aa:67:d5:28:35:
ad:3f:20:77:82:16:34:79:cd:ad:03:6f:bc:80:ea:
76:1f:63:60:d8:f2:e0:3d:27:d5:21:91:93:e5:31:
85:1e:77:9b:53:0c:fc:53:c7:57:b1:4e:ed:ec:cd:
8b:ee:d5:0b:10:99:d0:53:05:a0:cb:4c:91:e6:da:
0f:ee:b0:01:90:21:dc:98:36:c1:5d:3c:c8:f6:a4:
17:4f:82:ab:25:5c:64:e2:4b:2a:76:23:0a:48:8b:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.0.0/21
IPv6:
2a03:5d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44858
Signature Algorithm: sha256WithRSAEncryption
08:a9:97:5f:f4:c6:e1:cc:3b:32:b7:49:c1:f6:79:2b:68:3f:
e6:d3:22:70:3a:f0:fa:76:0a:7b:cc:f8:73:e9:67:bc:6b:76:
85:3b:4f:82:a9:aa:6f:4a:fd:fb:e1:6d:be:e6:df:a3:6a:ac:
8a:ce:82:78:d2:54:c8:dd:9f:5d:af:da:f3:fa:2c:bc:ca:8f:
51:0a:b3:96:70:86:10:eb:62:d3:32:45:d6:fa:ab:70:54:44:
b9:ee:08:b0:13:c6:92:83:ee:bf:60:e5:9d:23:a0:1d:cc:af:
e7:c1:2b:26:7b:8c:0d:d9:27:0d:f7:96:c6:35:3d:ee:9e:e2:
d2:19:06:61:32:55:d4:f1:87:b5:07:69:0d:4c:0a:4a:81:d3:
01:11:f9:c3:f6:ba:31:f9:50:9a:84:95:8c:28:fc:4e:a1:9d:
88:59:c3:c9:ad:25:57:a8:94:84:61:27:fa:8b:ec:6d:24:d9:
71:a0:58:5a:1e:06:3e:52:c0:ee:15:2f:67:20:a6:3f:c1:fc:
c4:cc:b0:d6:bb:d6:ae:d2:c6:e1:a1:63:30:9f:85:86:3c:a9:
30:1b:2f:59:37:e4:5f:cd:b3:12:e0:60:25:7b:81:da:15:26:
a1:99:69:4a:d2:4f:74:a4:4b:54:96:a2:b6:f3:bc:9b:d9:fb:
d2:d0:e9:42
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhshnQltChbn9LN/EjnTBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQ3ZGM3ZmY0ODViODQxM2JlMzhmNWJlZTgwOTE3MzMwYjMxNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/LDpUwEjaT7Q5Ihz0qNZ9WR/4ur
i5EZINuWna30m7zwEqyBspK54eA7M0S6ueGTQ+Nw7rTG+SOYl2hEpbBs7Tj+UgGS
T688WONcBDpUTaUKwxSJ159j5VsFB4gVg/wIl0gO7Cm42rJh4PHyY/qS/2e4TGWz
9ps+Nfb6mR5/1c7QWMXaJh9ygc2ePHhN1tArsspDekVXT5Clycw86ZnoqmfVKDWt
PyB3ghY0ec2tA2+8gOp2H2Ng2PLgPSfVIZGT5TGFHnebUwz8U8dXsU7t7M2L7tUL
EJnQUwWgy0yR5toP7rABkCHcmDbBXTzI9qQXT4KrJVxk4ksqdiMKSIudswIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFA9H3H/0hbhBO+OPW+6AkXMwsxc4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2FmNTA3
OC0yMjQzLTRmZGItYWIyYi0yZDg0N2EzZjdkMmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYWY1MDc4
LTIyNDMtNGZkYi1hYjJiLTJkODQ3YTNmN2QyZi8xL0QwZmNmX1NGdUVFNzQ0OWI3
b0NSY3pDekZ6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXV8AMA0EAgACMAcDBQAqA12AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCvOjANBgkqhkiG9w0BAQsFAAOCAQEACKmXX/TG4cw7
MrdJwfZ5K2g/5tMicDrw+nYKe8z4c+lnvGt2hTtPgqmqb0r9++Ftvubfo2qsis6C
eNJUyN2fXa/a8/osvMqPUQqzlnCGEOti0zJF1vqrcFREue4IsBPGkoPuv2DlnSOg
Hcyv58ErJnuMDdknDfeWxjU97p7i0hkGYTJV1PGHtQdpDUwKSoHTARH5w/a6MflQ
moSVjCj8TqGdiFnDya0lV6iUhGEn+ovsbSTZcaBYWh4GPlLA7hUvZyCmP8H8xMyw
1rvWrtLG4aFjMJ+FhjypMBsvWTfkX82zEuBgJXuB2hUmoZlpStJPdKRLVJaitvO8
m9n70tDpQg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:50 2025 by rpki-client