Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer (raw, json)
Hash identifier: /s4VVyOZRxo+G4BXRbABmc+qG3a73wlpDFT9yMEQ3Uk=
Subject key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA08E85EB2A2492D3A75D12A13A32E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205189
IP: 185.226.216.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:08:e8:5e:b2:a2:49:2d:3a:75:d1:2a:13:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1683805319d8485584dc39cf5381583fb6431d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:56:a2:a6:69:2b:b6:a8:ee:72:57:a8:2a:
d1:1b:83:a5:4d:2a:76:f4:84:37:c5:e3:ef:af:2f:
f3:04:7a:29:bc:b7:55:21:b3:dc:2e:88:a3:83:d2:
4a:c9:11:1f:e2:68:12:c0:55:0d:ea:9e:68:e9:cf:
e1:24:07:97:ad:fd:52:e5:a2:e0:18:90:8a:62:d9:
56:32:e8:d4:80:0b:51:c7:18:74:ac:c6:28:68:5f:
e5:06:33:3f:ae:3d:ed:e0:24:62:f9:e5:cc:a8:f1:
5f:68:7c:92:e1:0e:1e:6a:e1:83:95:d1:3a:34:b3:
88:df:38:ee:df:23:b2:c2:a1:a6:71:23:80:93:a0:
ea:4b:40:d3:a6:ba:2e:b6:65:bd:7c:99:70:ac:ec:
c9:32:d4:da:c4:8c:82:63:9a:b0:41:36:e2:ac:07:
20:33:28:cc:05:78:98:d1:c8:06:88:00:93:ce:9b:
e5:0b:cd:44:0e:6e:82:60:cb:40:da:62:df:ce:76:
77:1e:1f:17:d7:4b:d6:49:a5:43:14:50:ad:14:54:
16:b7:e2:8b:f4:6a:71:f8:0e:1c:13:79:5e:31:b7:
57:51:ec:a7:10:92:ec:b6:80:45:96:53:93:50:bc:
ef:8f:6d:14:77:d2:02:85:f3:f7:44:4d:c6:b6:52:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205189
Signature Algorithm: sha256WithRSAEncryption
93:0b:32:b6:9e:fe:6a:4b:88:3f:3a:b9:81:18:a2:eb:58:b9:
1e:24:ff:0a:fd:2d:0a:63:e6:77:32:68:1d:79:be:4a:6a:9c:
4c:88:8c:13:4e:84:92:e4:11:6f:ab:b6:42:e9:07:be:cc:66:
f1:77:ef:3f:9e:76:f6:dc:e1:84:c0:ea:c3:e4:9f:22:bc:fb:
bc:f6:5e:a2:25:83:10:87:48:c0:32:25:64:40:c7:66:b8:63:
08:7f:97:2d:9c:f6:3c:fe:92:98:eb:7f:5a:40:7f:08:d3:e4:
18:1b:22:af:29:02:b5:a0:19:60:e2:19:07:7c:8f:63:38:0a:
5d:a1:4b:3c:e6:8b:ae:8d:04:47:6b:f3:59:29:3e:b0:ed:d1:
c2:ec:9a:c4:c4:a4:87:d0:17:af:e8:2f:b6:34:ef:4f:04:19:
22:f6:c2:37:fd:a5:42:05:3a:80:1a:d6:ab:c9:cb:0a:54:f2:
5e:18:4b:69:65:37:7b:15:6a:d5:f7:e0:e0:55:46:45:46:4c:
ec:27:6d:ae:47:20:58:66:e5:c4:c9:7d:b2:a0:49:dd:81:9b:
96:34:c3:f6:20:57:55:6a:4a:d7:07:3d:9d:1f:a1:9b:90:14:
18:ce:79:31:dc:91:ad:87:30:e2:57:bb:63:79:46:95:7d:6a:
13:f3:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:09 2025 by rpki-client