Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
File: FqwWDambNJSla1R8aKjiwJGGkbU.cer (raw, json)
Hash identifier: POb8oiIbmY2A9IhLoZoJzV83U8Zkvo+Ln2QKbA3xQxA=
Subject key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068773FD398E2D3B429C32BE9D53FD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62223
IP: 185.42.192.0/22
IP: 2a04:9100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:77:3f:d3:98:e2:d3:b4:29:c3:2b:e9:d5:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:6f:ea:f1:df:36:36:e9:d4:1d:3a:57:71:
3b:24:56:48:96:6d:1f:ed:1e:30:28:d7:1b:53:98:
8f:04:a0:91:31:c0:42:cd:f8:40:f8:36:a0:18:0e:
f4:96:43:53:12:86:24:18:37:b3:57:71:25:7e:05:
bf:4b:cf:ee:01:ad:e1:29:41:f5:ec:15:ba:d5:01:
43:78:69:d0:ec:37:c2:06:d7:f8:28:54:81:8c:9e:
bd:0b:02:21:e9:f9:01:6c:a0:62:1f:10:1d:81:a5:
64:b8:25:ae:3d:1b:1d:4f:12:62:e2:1f:b9:ab:b5:
9f:e1:db:f7:e8:81:7f:36:8a:40:da:ae:3e:0b:73:
5d:25:ce:32:75:5c:46:92:74:f3:12:7d:28:49:e2:
70:e8:63:97:bc:4b:d4:f5:fe:17:20:10:24:21:25:
1d:40:c4:b5:67:b5:b2:2e:37:13:67:60:00:65:4f:
2a:c1:05:47:35:2f:fe:cb:b5:5b:fe:95:83:ec:02:
4c:6c:53:2b:3b:21:97:05:b4:5b:63:dd:21:16:a7:
fd:21:e9:79:0b:04:c1:74:8a:50:ea:0e:93:c1:35:
da:4a:6c:f9:ed:a7:78:21:48:bb:ca:ca:7e:95:b5:
c9:47:e7:ca:ef:34:04:8c:0c:2c:52:50:7c:76:99:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
IPv6:
2a04:9100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62223
Signature Algorithm: sha256WithRSAEncryption
5f:f1:54:73:2a:ae:fd:fa:5c:d5:e4:eb:5d:b1:7b:66:c3:6e:
ad:7a:0b:48:1b:6a:61:9a:8e:a5:8c:28:47:f0:7e:45:6c:28:
44:9d:92:3e:0f:33:30:f6:5f:b4:2b:3c:00:21:b6:c3:5b:67:
76:fd:91:cc:b5:ec:e8:7f:91:93:45:33:26:01:df:d8:59:e6:
e7:42:4b:de:b2:f3:d0:2d:e2:5b:b3:f7:54:26:ac:93:10:7b:
e9:3e:69:0e:f9:7d:c7:af:98:1c:cc:f7:f7:8a:a6:f9:65:90:
7d:84:c8:99:84:ea:c1:0f:04:0c:e2:6d:df:fd:06:e2:fb:41:
9e:2a:07:df:9d:73:c2:5e:70:78:42:5d:f3:e5:42:b0:2e:1b:
58:15:27:94:e8:f0:2d:2c:56:2b:df:20:97:e4:14:07:1c:d6:
8c:ad:e2:9b:96:1e:3f:6c:fc:d2:11:64:25:34:9b:28:ef:40:
bb:0f:17:72:ea:d4:3b:12:8f:e2:1e:99:bd:5a:68:3b:ec:06:
0b:6a:fc:15:e7:db:ee:00:6a:47:1e:34:e7:a2:52:33:c7:f5:
5e:0a:c1:f4:07:57:61:03:d0:34:aa:e8:84:b5:aa:62:c8:4f:
23:58:4b:3f:0b:7b:71:36:61:db:d2:4f:5e:0f:82:b1:eb:f3:
54:46:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:38 2025 by rpki-client