Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.cer (raw, json)
Hash identifier: no2l2D7nfoUDnVP+sUesid6wZgylUOfJeCYMwFzQW30=
Subject key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE7A86B32A6B27E2D4F4EE1506DB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214423
IP: 195.95.248.0/24
IP: 2001:678:c60::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:a8:6b:32:a6:b2:7e:2d:4f:4e:e1:50:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:67:14:51:41:38:f6:4b:00:4a:9f:a9:c0:
9d:a0:36:38:c8:ea:82:c1:89:b6:26:07:5c:1d:c2:
e8:54:39:27:83:8f:05:67:cd:93:95:fc:19:37:0f:
25:09:20:b6:2f:fd:1c:52:4f:30:c4:65:22:5d:a8:
f3:0f:a2:01:e3:2c:9e:96:cd:48:c1:c8:fd:75:17:
29:cd:e2:dd:3a:a8:f8:c0:70:47:4b:d0:7e:c3:aa:
93:a3:38:68:f3:8d:44:79:3f:9c:fc:7a:a2:49:31:
08:dc:9e:98:cb:d0:63:84:51:9c:2e:a6:d6:90:12:
f1:ad:56:78:3a:62:2d:31:c3:d7:2f:66:56:49:f8:
3e:6c:09:0c:c0:db:a1:d6:4c:21:9e:e0:d8:b5:51:
5f:b0:77:8a:12:81:cb:dd:fd:92:c6:6f:28:aa:9a:
ed:7c:d6:31:d8:bf:4e:26:c6:fe:43:00:e5:1a:9f:
ab:81:6c:07:d3:6d:57:1e:55:0f:22:d0:bf:cf:eb:
1f:06:76:bf:42:8e:25:ca:e1:3d:29:d0:80:66:15:
9d:04:cb:a1:e7:a0:ff:1d:9b:15:ee:f6:ea:1f:1c:
aa:a4:27:87:eb:6e:9d:8a:63:d5:89:c7:e2:90:ee:
3b:e6:bd:97:d1:27:8b:4a:6f:e9:0f:d6:30:a3:d0:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.248.0/24
IPv6:
2001:678:c60::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214423
Signature Algorithm: sha256WithRSAEncryption
08:10:d2:3c:92:68:6f:08:53:57:02:45:cc:a6:9b:2a:99:64:
4c:98:de:95:57:da:9b:dc:9a:c0:3d:6b:d3:52:85:d5:99:3c:
46:7f:cb:66:fe:be:12:49:c4:f6:59:12:65:b8:6a:0c:c5:1a:
98:29:b3:22:8f:16:35:45:88:58:b1:a5:a4:dd:55:d8:2f:b2:
3a:33:40:1b:47:ff:10:16:f5:a1:f6:3a:51:15:33:86:75:e0:
d3:5e:64:48:4a:f0:f7:f1:a5:c8:ba:b9:ea:a7:21:97:cb:9f:
33:1b:4b:d4:47:87:07:3d:59:78:c2:89:2c:6c:a4:f1:71:6c:
c7:15:40:97:40:39:e6:d3:70:f1:2a:ee:13:a8:62:cf:a7:57:
31:ba:cf:1a:09:2c:a3:70:ea:1f:e8:1c:93:e2:7a:5a:92:a3:
03:cd:85:d6:5a:cb:5a:63:5b:ca:92:fd:44:b2:b1:6f:15:15:
97:c7:fb:45:f0:7e:1b:54:35:cf:6f:92:e6:f9:43:cb:39:7f:
c6:f3:87:48:ff:43:a3:06:1a:bf:45:78:03:5d:55:2b:d0:04:
71:79:ce:54:8d:83:85:45:7e:a9:b1:6a:05:6d:3e:2c:34:68:
95:8f:e6:59:da:a1:37:44:42:7d:9f:b6:5a:a6:83:1b:ea:7b:
f8:bc:8d:bb
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQiH+eoazKmsn4tT07hUG2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc2ODkxY2YyYjFkOGVjNTZjMDNiYzdhOTZkZTk1OGEwZTAwMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRBnFFFBOPZLAEqfqcCdoDY4yOqC
wYm2JgdcHcLoVDkng48FZ82TlfwZNw8lCSC2L/0cUk8wxGUiXajzD6IB4yyels1I
wcj9dRcpzeLdOqj4wHBHS9B+w6qTozho841EeT+c/HqiSTEI3J6Yy9BjhFGcLqbW
kBLxrVZ4OmItMcPXL2ZWSfg+bAkMwNuh1kwhnuDYtVFfsHeKEoHL3f2Sxm8oqprt
fNYx2L9OJsb+QwDlGp+rgWwH021XHlUPItC/z+sfBna/Qo4lyuE9KdCAZhWdBMuh
56D/HZsV7vbqHxyqpCeH626dimPVicfikO475r2X0SeLSm/pD9Ywo9ACQwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFBV2iRzysdjsVsA7x6lt6Vig4AAyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzFiZjVm
YS1mNjliLTQxN2MtYmMwYi01ZDViYjdmZTU3MWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMWJmNWZh
LWY2OWItNDE3Yy1iYzBiLTVkNWJiN2ZlNTcxYS8xL0ZYYUpIUEt4Mk94V3dEdkhx
VzNwV0tEZ0FESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAw1/4MA8EAgACMAkDBwAgAQZ4DGAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDA0WXMA0GCSqGSIb3DQEBCwUAA4IBAQAIENI8kmhv
CFNXAkXMppsqmWRMmN6VV9qb3JrAPWvTUoXVmTxGf8tm/r4SScT2WRJluGoMxRqY
KbMijxY1RYhYsaWk3VXYL7I6M0AbR/8QFvWh9jpRFTOGdeDTXmRISvD38aXIurnq
pyGXy58zG0vUR4cHPVl4woksbKTxcWzHFUCXQDnm03DxKu4TqGLPp1cxus8aCSyj
cOof6ByT4npakqMDzYXWWstaY1vKkv1EsrFvFRWXx/tF8H4bVDXPb5Lm+UPLOX/G
84dI/0OjBhq/RXgDXVUr0ARxec5UjYOFRX6psWoFbT4sNGiVj+ZZ2qE3REJ9n7Za
poMb6nv4vI27
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:28:18 2025 by rpki-client