Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.cer (raw, json)
Hash identifier: sWyQof4b0GWVISJ3zcQxGHTmX4ywOSRlhuIlFDZQwyM=
Subject key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBF1CB357808537719D5562F2187ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208802
IP: 45.84.200.0/22
IP: 2a0e:9f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:cb:35:78:08:53:77:19:d5:56:2f:21:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:3c:5a:75:ba:8c:a0:6f:29:18:73:8a:5a:
fc:fc:40:ef:68:39:55:81:c5:e5:39:1e:1d:18:14:
46:b2:4c:41:1f:70:c1:50:13:23:25:09:d6:56:8f:
7a:d5:35:a3:28:3d:65:9a:d6:0d:3c:98:4b:ff:ec:
6d:bc:94:f6:d2:21:bd:6b:f3:85:1c:de:8c:8b:e3:
99:b5:13:f0:c7:07:22:b1:2d:39:6b:01:a4:3f:cb:
9b:22:35:49:eb:d2:cc:29:06:c6:e2:1b:26:59:7e:
ce:26:f8:15:a3:5a:70:70:ab:a8:5f:3a:fe:e5:9b:
81:68:f9:9b:21:eb:11:7b:e9:92:87:f4:94:9a:65:
a8:83:54:c5:64:84:34:9e:39:de:bb:1a:0d:57:64:
fb:4a:75:8a:4b:aa:e9:fd:69:71:93:29:97:59:93:
3b:38:ab:31:d2:5e:5d:57:99:a9:f7:23:83:22:de:
80:90:8b:de:b3:ff:51:79:61:b0:c8:f2:6c:29:ec:
a2:c1:3c:49:99:15:82:bf:20:91:fb:01:8f:97:95:
26:82:8d:88:2d:54:44:6a:63:e5:ae:e7:72:a3:92:
15:c1:88:dd:11:8c:5b:9d:96:48:11:f2:4e:3c:eb:
46:af:a2:ef:97:84:b5:ba:8d:69:30:f8:c2:40:33:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.200.0/22
IPv6:
2a0e:9f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208802
Signature Algorithm: sha256WithRSAEncryption
8b:7c:5f:d0:ae:41:75:95:2f:58:9c:29:69:04:3e:73:10:06:
0c:1d:3e:7e:40:fa:18:3e:71:0a:8a:82:63:54:35:99:74:4b:
c2:0d:5d:7a:a6:49:bd:85:9c:0c:ce:a1:52:73:2d:a6:64:89:
e8:d1:0b:1e:32:2a:df:5b:50:f5:4d:37:4d:29:99:d1:c6:dd:
5e:8b:94:27:10:03:e6:6f:24:e6:6b:42:94:40:08:25:7f:93:
51:06:92:1c:46:39:d4:92:71:98:f5:7d:f8:39:95:e8:3b:c7:
ee:0e:98:79:83:b0:0f:cd:76:7d:75:a7:2e:2e:69:ed:38:fc:
bb:e2:56:5a:28:df:89:6a:42:ec:d9:1e:47:6e:16:2f:04:bc:
e2:b6:89:48:7d:9a:bb:8d:c2:be:2b:f4:1a:9f:fa:07:43:d7:
02:ba:ee:de:e8:70:18:35:aa:2c:3c:c6:17:29:fa:9f:79:f1:
c8:28:05:56:c3:44:fd:48:1f:bb:1b:1c:70:9e:17:36:54:60:
b2:26:5d:c4:14:0b:0e:2a:c3:83:a9:0a:c4:5e:b2:b7:e5:b3:
3a:53:8a:c7:1c:d4:cd:03:d2:2d:90:ea:08:74:51:97:48:a1:
d7:d9:92:9d:bb:0b:35:81:ce:3d:67:6f:1d:ac:5f:68:c7:3f:
ea:08:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:09 2025 by rpki-client