Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.cer (raw, json)
Hash identifier: 5B2dbF5rcb0FDhsX2lzG+ta7Mkv/ki9yLpf2EB75BwM=
Subject key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067B5302F6D11A2C3A8D0A230BFAAAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203969
IP: 185.110.152.0/22
IP: 2a06:5880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b5:30:2f:6d:11:a2:c3:a8:d0:a2:30:bf:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:ff:29:59:2d:91:50:33:42:5e:21:c6:e2:
36:f2:77:28:30:63:25:0b:83:14:e3:e2:85:6f:d8:
fc:27:d8:74:d1:af:75:45:21:64:da:cf:30:cd:51:
1d:db:c1:2a:8f:d5:a4:e4:6e:c7:98:aa:24:97:42:
6d:e2:57:d9:57:e3:9c:10:e1:d1:ee:c6:13:e8:87:
f1:83:c4:6b:d9:91:83:5a:fa:79:1d:d6:cb:86:63:
d5:75:8f:6e:ba:c3:0b:1b:3e:e1:90:8b:99:79:4e:
6b:20:50:3b:be:a9:a2:b5:58:f2:48:60:34:7b:2b:
0b:95:1c:2b:9e:24:7e:45:32:08:73:f1:69:bc:54:
cc:e5:0c:4e:62:21:ac:7c:88:84:40:4a:42:40:ee:
57:5e:d3:8e:f0:1a:4a:ad:7e:93:70:be:92:a5:d6:
94:06:ab:fd:4b:89:eb:a6:fa:f2:91:28:61:a7:f4:
fa:81:6c:aa:81:ba:c1:f2:a4:9a:fa:09:6b:11:5c:
7b:e1:9c:20:1b:8e:d3:00:45:16:c0:bb:92:a7:dc:
57:b1:ef:bc:c5:2c:1a:f3:14:e0:cc:ab:94:cf:2d:
46:bd:12:08:bd:6c:87:de:de:61:63:c2:9d:04:19:
4c:81:db:2e:cc:00:0e:7e:ba:69:74:c2:6f:58:f2:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
IPv6:
2a06:5880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203969
Signature Algorithm: sha256WithRSAEncryption
75:1a:a2:98:34:b0:7f:13:84:c5:07:5c:66:ea:fb:1c:5f:61:
4c:6a:80:8d:e2:12:64:30:52:4d:1a:66:a7:d7:ce:04:bc:1a:
28:d3:39:98:52:ce:ef:c9:10:c6:9f:9a:5d:cf:ce:f9:99:a3:
94:7a:3f:62:c5:ee:59:ba:83:0a:d5:e1:27:5e:fc:25:d3:d2:
79:11:b7:c1:3b:fd:49:9a:16:e3:ee:61:1a:c0:f8:4b:69:08:
25:8f:c8:44:ef:ef:1b:c3:ab:2e:09:c9:a3:fc:a3:0b:ac:c2:
0e:ba:ff:3e:36:f1:b0:2d:ff:0c:e2:33:66:e6:e0:1e:fc:8a:
0d:44:8b:1b:44:a0:c1:2d:eb:61:63:b4:18:93:07:99:5d:ea:
90:7a:eb:92:37:a0:38:70:bd:fb:8c:25:fe:33:75:10:73:70:
54:00:87:01:96:06:b2:7f:8f:7b:c6:e1:88:46:83:4a:c6:b6:
07:e8:c7:1c:e7:c4:65:b8:b1:7d:c9:6e:88:ab:57:24:4d:dd:
12:86:df:b0:9e:40:e2:43:fb:8b:b9:28:80:a5:ac:c8:8a:0f:
d5:28:b9:08:45:e3:69:17:ac:87:34:7c:5e:e0:e5:84:df:cf:
30:b7:48:55:b7:38:0a:82:c8:1b:3f:20:bb:c9:8c:d6:0a:08:
93:84:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:48 2025 by rpki-client