Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
File: FrGYtu469o3rwjR6Xpj3Efsw8os.cer (raw, json)
Hash identifier: qsLgSPA28+vdqTu2oIzKdgOjPIqkaU4cr74x7LcsVsY=
Subject key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EDC3B6CE5620FE7BB2C11A0BB9D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214058
IP: 62.68.78.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ed:c3:b6:ce:56:20:fe:7b:b2:c1:1a:0b:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:f1:08:8a:d8:49:29:6c:86:0a:55:c8:d2:
15:e6:6a:09:69:f4:04:3b:6b:5e:68:02:77:e2:4c:
49:ae:b2:f9:b0:c6:eb:1d:3b:6a:d2:52:f9:4d:17:
64:85:5a:84:48:4f:23:45:1b:46:cd:08:1e:81:56:
5a:93:f3:31:26:a2:d4:49:e9:4a:df:77:c9:f0:9e:
ea:3e:b9:f7:16:a5:f4:50:e4:1b:d5:5d:35:fc:0b:
35:2c:97:e8:9c:61:7f:60:c0:2d:f0:1c:7d:36:2e:
bc:19:84:7d:6f:4a:1f:6c:e5:50:9b:61:49:7e:6f:
8c:63:f5:e1:15:c6:04:96:c6:a6:84:78:8d:78:8d:
d3:da:e8:03:0b:ce:11:8b:14:ae:10:90:98:39:15:
92:46:76:b3:54:ca:73:71:2c:77:c7:85:54:b2:72:
06:8f:0d:61:5d:6c:da:68:3a:2d:f6:a0:06:6c:1b:
b0:d6:23:21:f6:8c:83:07:d3:2d:76:de:02:54:18:
3a:96:7c:b1:c2:05:d6:e4:83:68:81:8c:6f:c2:74:
3b:32:97:11:fb:81:c5:c7:fd:cd:8b:2c:56:b4:cc:
ea:0c:90:90:c8:d5:9c:58:07:b1:1b:07:60:5a:4f:
f6:54:bb:82:97:93:92:60:8a:e9:6b:e5:fe:d2:9b:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.78.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214058
Signature Algorithm: sha256WithRSAEncryption
8a:a7:71:87:49:75:5b:57:c5:bd:94:0e:12:11:2d:6d:5c:7d:
04:60:22:96:c7:56:b9:f7:1b:67:91:31:6e:58:71:c9:e8:d7:
26:ab:64:12:d1:ac:87:c1:19:70:f8:70:d1:8f:4e:6e:c1:8d:
bf:f4:a1:ca:91:c2:b2:9a:7d:97:b5:fe:e8:b9:20:ee:84:e7:
73:af:bd:13:19:0a:73:7f:47:f4:8b:e0:30:65:02:02:6f:9f:
ca:ce:91:85:1b:d2:de:c8:90:c8:fa:f1:3e:75:7d:c3:41:1b:
bb:2d:f4:34:64:fa:d7:65:14:89:42:b0:3b:29:b5:c4:f1:7e:
e7:ac:a8:9c:a9:b9:81:96:b7:c9:56:d5:7a:a4:37:93:ec:70:
3d:80:05:64:59:fb:61:00:b9:f1:1e:f9:82:e5:d3:d1:84:95:
51:26:bf:e4:03:b0:32:b9:f2:4e:cd:da:ac:0d:f4:d0:4e:43:
03:37:b7:cb:e5:29:a1:ba:03:f4:27:ec:67:15:80:69:d0:63:
1d:c9:d0:f2:55:69:35:6e:7d:c4:58:ca:f3:e7:35:17:ac:5a:
2f:f0:32:c4:44:27:a6:c7:00:6b:ee:76:5c:59:08:25:96:bd:
1a:02:1d:07:a5:13:69:21:59:dc:df:4e:f3:0c:fe:e6:be:d5:
39:63:ca:2e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQks+3Dts5WIP57ssEaC7nYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIxOThiNmVlM2FmNjhkZWJjMjM0N2E1ZTk4ZjcxMWZiMzBmMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp67xCIrYSSlshgpVyNIV5moJafQE
O2teaAJ34kxJrrL5sMbrHTtq0lL5TRdkhVqESE8jRRtGzQgegVZak/MxJqLUSelK
33fJ8J7qPrn3FqX0UOQb1V01/As1LJfonGF/YMAt8Bx9Ni68GYR9b0ofbOVQm2FJ
fm+MY/XhFcYElsamhHiNeI3T2ugDC84RixSuEJCYORWSRnazVMpzcSx3x4VUsnIG
jw1hXWzaaDot9qAGbBuw1iMh9oyDB9Mtdt4CVBg6lnyxwgXW5INogYxvwnQ7MpcR
+4HFx/3NiyxWtMzqDJCQyNWcWAexGwdgWk/2VLuCl5OSYIrpa+X+0pthYwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBaxmLbuOvaN68I0el6Y9xH7MPKLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIyYWUx
NC1lNDVlLTRlZWUtYmQwNy00NDgyYWRhMjMyZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjJhZTE0
LWU0NWUtNGVlZS1iZDA3LTQ0ODJhZGEyMzJlMy8xL0ZyR1l0dTQ2OW8zcndqUjZY
cGozRWZzdzhvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPkROMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNEKjANBgkqhkiG9w0BAQsFAAOCAQEAiqdxh0l1W1fFvZQOEhEtbVx9BGAilsdW
ufcbZ5ExblhxyejXJqtkEtGsh8EZcPhw0Y9ObsGNv/ShypHCspp9l7X+6Lkg7oTn
c6+9ExkKc39H9IvgMGUCAm+fys6RhRvS3siQyPrxPnV9w0Ebuy30NGT612UUiUKw
Oym1xPF+56yonKm5gZa3yVbVeqQ3k+xwPYAFZFn7YQC58R75guXT0YSVUSa/5AOw
MrnyTs3arA300E5DAze3y+UpoboD9CfsZxWAadBjHcnQ8lVpNW59xFjK8+c1F6xa
L/AyxEQnpscAa+52XFkIJZa9GgIdB6UTaSFZ3N9O8wz+5r7VOWPKLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:40 2025 by rpki-client