Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
File: dahWeFOS2ifQC9snCRxZJsMVXYk.cer (raw, json)
Hash identifier: GIN1JCdz/TApc4KRU9ds9lrUsiDlItB0+9IHatH0YY0=
Subject key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425214A825F91E569E9801AF32B719754
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205802
IP: 185.199.204.0/22
IP: 2a0b:8840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4a:82:5f:91:e5:69:e9:80:1a:f3:2b:71:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a856785392da27d00bdb27091c5926c3155d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:16:b2:02:be:e4:b7:cf:cf:ed:dc:3f:04:
8b:25:6d:2c:bd:ed:00:35:9a:54:d7:51:ff:ed:3b:
a8:9c:b3:be:83:01:d2:a7:9b:91:da:48:20:db:9e:
bc:d2:38:b5:87:cb:f0:40:d1:33:f3:06:fb:f6:0a:
96:fc:cb:ce:30:19:64:de:69:73:db:18:96:db:66:
4e:a2:84:0f:49:ee:29:13:9c:1b:2c:e1:5e:cb:cf:
2c:49:c3:50:62:33:ec:83:ff:50:f1:9b:a3:76:36:
a5:03:a4:d5:02:6f:48:c8:b5:36:f4:50:14:43:93:
2e:a7:39:3a:f4:8f:03:4b:c6:c4:bc:8d:00:0a:f1:
a2:6d:d9:9a:57:87:77:3c:5c:f4:f6:0b:0e:32:a2:
66:07:25:40:09:06:1c:03:48:88:7a:a7:0b:b2:2a:
b8:9e:45:22:7e:ad:1e:d1:c4:6e:a0:41:27:2b:28:
75:af:fe:8d:44:4d:9b:64:dd:90:66:2b:45:a6:9b:
39:d1:d3:0e:55:ca:48:bb:10:33:66:96:d2:50:fd:
7b:33:01:9f:d6:50:c6:73:58:e3:7f:9e:b3:09:81:
30:6a:da:37:4c:af:57:2d:86:85:a3:a4:82:7b:ca:
00:b6:aa:d6:3f:29:e5:c4:96:2b:e7:b8:11:18:9d:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.204.0/22
IPv6:
2a0b:8840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205802
Signature Algorithm: sha256WithRSAEncryption
5b:af:62:85:c7:63:7b:43:2c:2c:f3:f6:5e:fb:7e:9a:02:00:
ce:a9:52:9a:de:ea:ca:f2:ac:1c:e6:ff:bb:1c:0f:07:5f:5b:
47:60:d8:54:6b:81:04:14:99:66:4a:81:d2:25:d2:9d:48:d1:
69:37:d5:8d:af:0b:85:4a:cf:ab:5c:41:e8:e0:34:f8:01:11:
d5:70:12:d3:70:02:00:29:e1:07:d1:55:82:50:b8:25:08:a6:
5e:f6:2e:55:00:ff:3b:95:ed:f3:00:8f:94:44:ca:c7:82:df:
fe:02:c0:96:d4:1d:fa:39:6e:bc:16:d4:a2:11:aa:83:92:ae:
ea:97:0c:56:8b:54:37:ba:9b:c1:64:d0:ec:7f:75:64:82:82:
3e:22:9b:62:1e:5e:c3:83:4f:84:ca:44:ea:01:f6:5a:2e:6a:
37:f6:85:6b:64:48:53:c9:8a:a2:9e:25:db:3a:6d:5e:f4:75:
47:55:81:0c:52:54:dc:00:bc:89:bd:0d:e3:11:d9:3e:44:a0:
ca:78:44:5d:9c:1c:5f:66:ce:07:e4:bd:1c:0e:d7:1d:b2:82:
b5:3a:8e:e1:6a:d3:9f:7a:c9:a5:bb:9b:fc:c2:8f:95:bf:2c:
2c:e1:15:e9:fc:a4:6d:f5:9f:4a:51:9b:2a:74:16:b8:60:81:
ab:5f:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:02 2025 by rpki-client