Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer (raw, json)
Hash identifier: n3bk9JzJ79lHSwQCgPuGzK12v5bC5RzoB+rnG0fkuVE=
Subject key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C40D2978FDA7CF6B584FED16C8800
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207570
IP: 91.212.6.0/24
IP: 2a0a:740::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:d2:97:8f:da:7c:f6:b5:84:fe:d1:6c:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:21:7e:fd:89:c1:68:6e:0b:13:46:2a:eb:
3c:91:fc:a3:a9:8a:82:8f:43:98:8a:b0:bc:41:86:
0d:01:28:cf:4f:52:3b:55:d9:45:34:05:c3:aa:26:
fa:65:c0:ec:3c:2a:03:40:2a:8e:c8:ab:6d:85:8c:
43:06:de:12:53:4a:2f:37:cc:2d:2a:02:4e:c1:1e:
cc:89:ac:d3:4b:10:31:14:90:49:92:25:7a:64:93:
e2:c7:0b:22:77:12:56:65:1e:19:0c:a4:fb:cc:2f:
b5:b8:c5:61:79:e9:ab:21:43:bc:3b:9c:0a:1a:bd:
27:20:a2:04:d2:54:35:29:37:a7:bf:64:71:e6:a4:
3d:07:a0:fb:f8:fc:3d:a1:55:b0:27:4b:5d:c2:f4:
d7:a4:c7:a7:f4:f3:80:95:d9:2c:26:01:bc:a8:a5:
cd:84:60:0e:d4:2e:d4:25:ad:1e:39:63:ff:6e:7f:
b4:88:65:1f:9c:ba:91:bd:66:ff:2d:09:9e:9b:36:
d2:f6:43:df:2b:ec:94:9b:70:62:c8:29:78:04:7e:
17:9e:79:07:21:04:ce:f8:c1:bc:a2:ba:9c:89:a2:
c0:76:cf:c8:50:c8:25:6f:7b:45:db:6a:08:1b:9e:
2d:bc:72:39:32:d3:f7:32:72:12:47:87:d9:fe:36:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.6.0/24
IPv6:
2a0a:740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207570
Signature Algorithm: sha256WithRSAEncryption
9d:5e:cf:8a:5d:64:83:fb:73:1d:d7:e9:ed:a7:43:7d:9f:3c:
34:9a:bc:16:45:cb:77:a5:fb:d0:92:2e:6e:d3:88:c0:a5:04:
32:6d:5f:6a:14:09:fc:9d:cd:fb:98:02:98:b1:7d:d8:a8:d5:
ff:d9:1a:1d:8f:62:49:72:4e:d2:41:3e:fc:0e:c9:9b:eb:87:
db:d8:c3:99:bc:f0:50:82:5c:37:df:7e:98:14:94:25:d0:38:
22:a9:bd:a0:2a:68:6a:1d:a5:91:69:c3:b6:8d:17:c1:b8:5f:
e3:4f:4d:77:90:4c:dc:30:7b:38:91:d6:2f:e1:a9:a3:c9:54:
de:88:39:12:2f:53:11:04:9a:11:14:6f:d3:88:bd:b0:11:8b:
f2:2c:3c:73:f4:56:4a:36:8d:91:7f:f3:39:dd:8a:52:18:15:
d1:f3:3f:24:b2:3d:8b:66:9c:a0:a0:77:45:e6:4c:00:96:fd:
b9:a2:ce:35:50:40:3e:7e:6b:c7:d4:95:3e:d9:8c:3f:3e:1f:
50:7a:16:92:94:18:f2:bc:3c:e7:1b:03:9a:0a:d4:a7:21:54:
a8:49:bb:de:a6:b5:d4:15:7f:cd:d6:46:17:99:c9:6e:38:ee:
d5:76:52:25:01:f6:e5:29:3e:78:c9:3c:78:6e:3f:40:32:a6:
4f:0e:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:07 2025 by rpki-client