Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.cer (raw, json)
Hash identifier: 9r5MJsysPcnUB2VRgpOY/+RnkvXqZEzmA2ppXu7Ltcc=
Subject key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2883A5986DAFABFCBDCC078558C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207493
IP: 94.231.193.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:28:83:a5:98:6d:af:ab:fc:bd:cc:07:85:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:30:39:70:33:5c:ed:95:75:ef:6c:1f:e2:
c2:87:66:5a:e5:89:c1:ea:c2:c2:64:0e:6b:22:d0:
a6:5d:65:33:d4:9d:ea:90:db:e7:7f:a3:6a:a3:58:
94:1e:99:4c:f8:43:5e:f3:9c:df:2f:02:46:f1:bd:
6b:f5:5f:7b:2a:32:80:28:5a:cb:c3:92:1a:37:36:
73:a9:5a:77:a1:b8:0c:d9:76:e6:3b:82:ee:64:82:
6f:22:e9:34:34:7c:8c:6e:05:e8:80:d0:f7:8e:10:
79:6a:bc:c8:55:6e:50:fa:af:68:c8:ff:1c:1e:84:
a2:b3:76:5e:1b:f4:b4:12:e1:72:e1:cf:82:a3:f9:
01:41:79:22:46:33:ec:8c:19:43:30:f8:17:f5:f0:
19:b2:92:2f:69:7a:a8:25:e8:c2:92:85:aa:69:bf:
f8:8f:8e:bc:79:01:71:52:86:5c:07:84:4c:1f:ed:
84:55:be:9e:62:2b:1d:32:48:3e:ae:65:db:c0:92:
fe:a8:41:e3:e9:f4:db:3a:4c:9b:f3:33:ea:56:15:
7e:35:4d:58:39:3d:e7:30:f6:57:cb:7e:42:1d:c3:
71:f7:24:33:0a:ac:ce:91:e7:66:cd:b2:0c:a3:3f:
a2:2a:ec:6d:cf:38:b8:2e:d7:8e:23:0a:3d:22:6d:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.193.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207493
Signature Algorithm: sha256WithRSAEncryption
15:ce:8e:68:8e:37:e0:9b:e0:c1:d5:be:9b:dc:88:30:e7:fa:
54:45:71:19:ee:f1:ff:58:f6:d9:b8:65:81:28:da:2c:29:b9:
31:da:fb:96:69:ae:a7:14:b8:18:1f:8b:8d:a6:c6:e7:dc:d2:
92:b3:e6:7c:03:ac:5c:41:19:c6:8a:58:7f:c8:3f:4e:e4:b8:
2b:c2:ce:47:b6:e9:79:35:09:37:2b:29:88:24:80:60:ce:a9:
dc:86:15:f8:40:9d:bc:52:92:e1:75:8b:de:e9:6a:f5:1b:c2:
6a:48:f2:ce:c9:cc:7f:94:77:af:1c:dd:83:8a:b2:12:e7:fc:
10:af:84:ff:3b:4f:81:19:50:ca:d1:dd:03:81:a4:a0:80:d9:
0a:dd:1d:14:0b:6f:34:9d:23:f7:6d:f7:c7:51:1d:34:e2:94:
35:ce:12:5a:79:67:d3:f4:56:de:de:08:21:90:dd:32:f0:d6:
72:a3:82:92:82:77:40:9d:23:26:f0:a8:fd:28:0e:3f:1c:4a:
8a:9c:60:33:46:8a:89:f2:c4:d7:37:91:3b:e5:b4:e2:cc:44:
b1:02:9d:07:f7:f1:f5:ef:f3:8c:7e:4d:aa:6b:5e:ce:c2:da:
f1:67:e4:a8:a8:24:41:bb:ab:2f:bf:de:b9:15:93:57:e1:09:
49:e9:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:46 2025 by rpki-client