Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
File: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer (raw, json)
Hash identifier: FwqGLuZQSOIEbNbqDeyoRHJwh7AfNNubqZYEKxlQWM8=
Subject key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420686CC747A5C70A8062144E1BBC0E39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209835
IP: 83.143.108.0/22
IP: 2a05:eec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6c:c7:47:a5:c7:0a:80:62:14:4e:1b:bc:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58f7d27ebc269bf14b8d6895791affd429f70222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:5d:04:ec:20:62:f7:cb:0a:ee:9c:26:0c:
dd:3c:18:08:4d:b3:e8:d4:13:23:07:f6:1a:63:7d:
2b:b7:d3:bb:63:58:b1:cf:14:f9:4d:c6:1d:ee:0a:
1b:5b:dc:4d:71:14:e8:5d:e3:b2:fa:4f:3d:3d:97:
1e:e0:4f:1c:af:2e:48:8c:10:6e:ab:a2:0a:29:15:
ce:c1:96:2c:55:38:a5:2c:80:f5:97:50:22:cc:4c:
ff:4c:2c:4a:d6:23:9b:a5:62:2a:c4:e2:81:a8:45:
a8:33:dd:18:4e:d9:0d:d4:07:29:cc:0e:c4:8c:ce:
06:a8:7e:d6:59:1c:27:2d:21:78:e4:79:09:db:d8:
a7:fa:a4:f8:d0:0d:11:2b:00:52:66:37:19:fa:45:
81:f5:3e:4f:af:fc:c4:87:cc:de:6b:fb:96:03:15:
a2:86:b9:02:45:21:25:fd:54:6a:81:20:e4:49:3a:
28:c1:60:b4:c4:ca:a8:07:bb:2b:b0:36:9d:26:e0:
da:24:67:d2:c8:0a:9d:93:bd:ed:bb:f3:9d:34:9e:
80:9b:a2:0e:7b:c1:ea:89:2f:e8:6a:77:fb:12:0f:
22:08:ac:06:1a:7c:c0:1b:3f:31:4e:38:1d:03:af:
cf:a1:e6:dd:24:c7:c3:86:cd:8a:f0:77:7d:08:d9:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.108.0/22
IPv6:
2a05:eec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209835
Signature Algorithm: sha256WithRSAEncryption
49:05:ca:51:c6:03:e3:2c:4b:1e:00:3a:0d:bc:f2:bd:70:00:
c9:0f:48:d2:40:9f:63:56:8e:56:10:80:ff:eb:b5:d5:ec:8c:
0c:95:3c:ca:84:2c:16:4d:b7:dd:bc:2e:48:4b:db:e1:eb:e9:
d1:22:45:c8:8f:c4:32:c5:8a:f7:d0:88:08:cf:c0:4f:d2:a1:
0b:9e:89:24:c9:6a:4e:fe:1a:23:29:a6:49:9a:04:3e:17:a7:
73:b6:6f:79:64:86:87:27:af:de:5c:71:de:81:79:fc:f2:80:
c1:d5:dc:83:0b:20:e0:66:ee:b7:7a:4e:e1:9f:72:ca:e0:49:
bc:b4:0f:e4:e9:29:bc:0d:bc:e4:56:47:8e:b2:46:0c:8f:c2:
ee:70:2d:7f:56:8c:9b:7c:5b:8c:4f:75:61:e7:32:5d:04:60:
f6:69:a8:9a:ac:61:16:bb:a2:c1:d3:78:a5:f1:5a:03:9c:fa:
1e:4f:8e:1e:07:ac:ad:bc:74:12:e9:45:ef:78:1e:8b:a9:06:
c2:a5:2e:bc:49:8f:00:76:ba:91:e3:12:98:45:35:c7:2d:76:
a4:13:e3:0a:19:4b:98:eb:90:fc:fe:fa:77:2d:4f:ff:e8:3c:
e2:99:76:ce:89:b0:51:77:3a:ed:f1:2e:3f:56:82:fb:d4:85:
c5:55:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:38 2025 by rpki-client