Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer (raw, json)
Hash identifier: N1wNKwEBhsKH6m82HrcNETS23YWnWD0GbO/hNLY0P38=
Subject key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453C1A8A3F60A7C02388A75878B1E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.223.247.0/24
IP: 2001:678:1b4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3c:1a:8a:3f:60:a7:c0:23:88:a7:58:78:b1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:aa:34:5e:f4:e5:d2:96:ea:b8:2f:a2:97:
0d:c5:fa:2f:de:17:bb:97:62:af:e1:60:c2:35:72:
30:04:e1:ec:91:c7:c8:ee:a5:c2:95:02:78:26:62:
14:e6:94:f9:6d:5f:6f:e3:9a:8d:c6:a5:3b:24:e3:
39:a5:27:3b:88:c1:22:3c:c7:48:b2:a4:55:5c:e1:
8a:33:7a:a5:d7:06:fd:bd:93:9c:e3:db:28:28:ee:
25:5f:bf:52:c6:55:f2:16:b5:75:d8:cd:7d:16:dc:
b8:43:c8:b0:bf:4c:10:d8:99:c2:cd:04:7d:e7:a0:
30:28:4a:1a:d2:c3:39:58:ef:17:33:b0:21:38:36:
25:36:45:68:16:39:7a:4a:19:18:c0:fa:2a:c8:7b:
52:46:c4:66:42:01:a2:de:a8:81:5b:8c:bd:eb:16:
db:26:d9:b5:d1:50:5b:08:66:ca:77:db:a2:45:96:
2c:80:62:42:c9:02:96:8c:39:cf:55:2f:c6:72:f5:
ef:19:0b:8e:de:df:9b:51:00:0b:4c:32:76:fc:5b:
ca:72:52:ec:f7:74:8e:a2:21:0d:1f:df:a5:09:97:
85:cf:2e:15:43:5b:c9:ab:24:08:9e:82:7b:7f:05:
f5:62:f2:81:2c:54:a3:3d:7a:7f:10:6e:29:13:4a:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.247.0/24
IPv6:
2001:678:1b4::/48
Signature Algorithm: sha256WithRSAEncryption
2a:1c:14:fb:71:83:52:78:19:ea:9c:01:35:89:b0:8c:b4:07:
60:5a:7a:1e:24:30:62:b3:a4:3d:4b:46:fd:56:91:2d:b8:b6:
43:b6:c1:72:29:91:cf:25:2e:fa:2d:86:9e:21:7f:e7:8b:dd:
de:b5:42:50:a5:1b:a1:25:ff:3f:1a:04:70:36:55:5e:92:ee:
dd:7c:a7:25:70:ef:0a:d1:54:91:02:af:1c:5c:c3:72:16:f4:
d5:1b:d6:8f:10:87:33:de:86:97:b0:9b:fe:be:ff:29:35:79:
7b:0b:33:ce:f0:f4:0f:08:c9:9b:cd:b6:69:64:a3:1a:af:13:
60:29:4b:1a:a8:ff:5d:e7:a5:f9:b2:ea:b9:f8:38:05:8f:bd:
30:f6:25:df:f1:61:fc:0a:be:d4:44:0b:ea:bc:73:e7:c2:1b:
80:98:bb:b5:c8:27:60:3f:99:bc:8f:80:2e:8a:42:f9:01:fc:
ea:a2:81:22:f6:1c:a6:8c:1b:04:96:94:ec:81:c8:cc:5a:16:
90:c1:13:26:98:34:f0:bc:ef:d8:68:a7:b2:5e:a0:42:1e:16:
d5:84:5d:17:87:4a:04:54:2c:26:9f:4c:bc:58:d0:43:81:ff:
1e:04:1e:f2:8d:59:dc:c7:29:cf:ea:99:22:4d:a8:80:89:71:
40:ce:f3:74
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQkRTwaij9gp8AjiKdYeLHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzA1MTIxNWY2ZjFiZDIyN2RiN2Y0MGRmNzQ4ZDY0YzEwNmY4NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoCqNF705dKW6rgvopcNxfov3he7
l2Kv4WDCNXIwBOHskcfI7qXClQJ4JmIU5pT5bV9v45qNxqU7JOM5pSc7iMEiPMdI
sqRVXOGKM3ql1wb9vZOc49soKO4lX79SxlXyFrV12M19Fty4Q8iwv0wQ2JnCzQR9
56AwKEoa0sM5WO8XM7AhODYlNkVoFjl6ShkYwPoqyHtSRsRmQgGi3qiBW4y96xbb
Jtm10VBbCGbKd9uiRZYsgGJCyQKWjDnPVS/GcvXvGQuO3t+bUQALTDJ2/FvKclLs
93SOoiENH9+lCZeFzy4VQ1vJqyQInoJ7fwX1YvKBLFSjPXp/EG4pE0qX5QIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFCMFEhX28b0ifbf0DfdI1kwQb4SjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzJmYjQ4
Ni03OWEwLTQzOTYtODMzYi02YzZmMGUzMTljYTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMmZiNDg2
LTc5YTAtNDM5Ni04MzNiLTZjNmYwZTMxOWNhMS8xL0l3VVNGZmJ4dlNKOXRfUU45
MGpXVEJCdmhLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9/3MA8EAgACMAkDBwAgAQZ4AbQwDQYJKoZI
hvcNAQELBQADggEBACocFPtxg1J4GeqcATWJsIy0B2Baeh4kMGKzpD1LRv1WkS24
tkO2wXIpkc8lLvothp4hf+eL3d61QlClG6El/z8aBHA2VV6S7t18pyVw7wrRVJEC
rxxcw3IW9NUb1o8QhzPehpewm/6+/yk1eXsLM87w9A8IyZvNtmlkoxqvE2ApSxqo
/13npfmy6rn4OAWPvTD2Jd/xYfwKvtREC+q8c+fCG4CYu7XIJ2A/mbyPgC6KQvkB
/OqigSL2HKaMGwSWlOyByMxaFpDBEyaYNPC879hop7JeoEIeFtWEXReHSgRULCaf
TLxY0EOB/x4EHvKNWdzHKc/qmSJNqICJcUDO83Q=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:34 2025 by rpki-client