Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer (raw, json)
Hash identifier: zSJSC10RPQ/R0eyoXmBMTY0VxbxeaGMO0IMG7PU3274=
Subject key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453889F4998B2741F1621C6C8FE6FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201606
IP: 185.69.80.0/22
IP: 2a03:2fe0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:38:89:f4:99:8b:27:41:f1:62:1c:6c:8f:e6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0f:ff:21:a0:80:9b:15:3d:bf:29:33:3b:82:
d2:20:98:f3:9f:0f:9d:08:07:e5:50:f9:c8:35:4f:
87:94:3d:f8:36:94:55:9b:1e:4d:fe:3e:82:53:95:
38:70:fe:9b:97:56:b3:a1:d6:44:15:d4:0c:8e:4f:
97:ad:4b:d0:d3:92:0c:6c:af:36:58:d6:9a:cd:2a:
fd:e9:e9:b2:10:69:65:e8:fd:af:48:44:52:c5:ea:
7d:12:fa:05:8e:63:33:50:b7:58:4d:e7:8e:b9:a5:
6a:f8:fa:52:32:fd:35:03:3f:4a:15:8f:1f:dd:45:
8b:65:4a:5a:18:a7:63:09:d4:1c:cc:f1:3c:40:d9:
c4:ff:6b:c3:af:53:e2:de:40:25:3e:2a:05:42:24:
b8:36:92:81:a9:59:1b:6e:de:e3:72:b6:cb:20:08:
0c:98:57:9c:7a:f3:be:6c:a6:73:4c:ff:76:02:5a:
a8:b2:ad:b6:a3:ad:bd:a2:9e:c8:3a:36:2a:79:ed:
32:44:6b:8f:b8:0e:af:8e:4d:4e:69:35:4b:60:fb:
7d:57:5b:3f:13:fc:ac:48:d4:a6:7c:45:a4:2a:a0:
19:00:56:33:99:5f:23:d9:ce:28:c5:a0:d6:38:8d:
64:0c:5f:97:9b:95:72:2b:02:a1:d8:e6:c1:53:41:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.80.0/22
IPv6:
2a03:2fe0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201606
Signature Algorithm: sha256WithRSAEncryption
71:a1:66:ef:45:cc:2c:34:a7:ba:d3:ab:27:86:17:bb:69:ac:
9b:3c:d4:23:0c:9b:57:d8:47:bd:92:6e:7d:45:f6:9a:0a:ef:
25:b2:8a:37:28:5b:5a:18:b0:e9:ea:21:1f:3f:db:7d:02:15:
2b:9d:2a:87:f7:e3:3b:88:2d:dd:a4:fc:77:cd:50:f0:c2:5e:
93:c3:23:3e:32:89:0e:bb:35:f1:6c:ef:63:4f:eb:80:d4:cd:
26:26:28:48:05:9d:67:65:fa:53:c0:0d:bd:77:c9:e3:43:2e:
44:f1:d6:9d:47:ba:d1:51:39:d4:c5:88:4f:e5:59:8b:4f:db:
1a:56:6f:f7:ff:aa:af:fc:ac:7a:d0:19:be:5c:32:65:13:f9:
60:72:11:f7:6c:7f:62:74:ec:c9:32:80:9c:41:96:d1:6e:64:
4e:50:29:06:6b:87:9f:93:0b:5c:6a:5b:24:18:63:9a:61:35:
13:8c:b5:97:24:6e:41:32:95:9c:65:f7:cc:50:9e:50:25:b5:
7c:db:28:6d:8c:2e:49:1e:ea:a1:94:36:64:18:13:fc:7e:12:
3b:5a:71:dc:74:cf:84:e8:7b:3c:96:6c:91:5a:c0:a8:2c:4d:
ed:1c:66:61:b3:dd:bf:cb:d8:40:35:31:08:24:eb:e8:ce:f8:
a2:88:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:24 2025 by rpki-client