Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
File: fRSfYkR4U2icEvsoiv62toHP68E.cer (raw, json)
Hash identifier: cWIXQQW/p2UObAizJFX6Cp+4bpljcQATRMGz+pQCjyk=
Subject key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C14D758DA2AFCDF640F9B67CE0078
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28737
IP: 87.252.224.0/19
IP: 91.149.128.0/18
IP: 93.125.0.0/17
IP: 178.172.128.0/17
IP: 185.70.12.0/22
IP: 213.184.224.0/19
IP: 217.21.32.0/19
IP: 2a04:2e80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:14:d7:58:da:2a:fc:df:64:0f:9b:67:ce:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:3b:2f:8f:0e:c2:e3:22:1f:61:bd:1c:c2:
5a:21:83:a3:dd:d3:18:06:70:b7:c3:9c:f5:e8:d1:
73:35:c8:f4:26:ef:78:86:bd:8a:92:74:ca:ad:f6:
eb:aa:3c:43:0f:e0:4b:53:ca:7b:ba:c9:53:8f:51:
b1:3c:ef:bd:8c:29:b1:32:ce:07:a2:23:1d:04:6a:
fb:ad:b7:8c:fc:c8:81:f8:d4:76:b5:d1:52:3b:63:
2a:97:28:9f:6a:0c:3f:c3:35:00:08:8c:91:1a:80:
d8:88:43:b5:3b:e9:92:8b:90:09:91:18:fe:cf:4e:
e8:b2:4e:20:f6:33:db:e3:50:9a:ac:2f:62:92:29:
02:10:52:27:85:2a:5a:f9:2c:27:c0:e8:a7:d7:2d:
bf:2b:3f:75:5c:37:62:56:a5:f7:d4:59:4a:9a:be:
80:ea:c1:57:02:c7:5c:11:22:75:0b:95:3a:4f:38:
66:a6:95:8f:91:e2:ba:d7:94:52:d1:d7:76:3a:74:
d2:b1:57:32:7e:aa:e5:0d:9b:72:c6:27:54:78:b2:
1f:d3:1c:51:a8:af:87:d7:62:d9:6f:22:38:b4:f8:
3c:7e:51:f5:9a:ca:86:83:69:b7:b0:47:f4:c9:89:
4b:66:28:b5:77:36:c5:59:01:c1:df:a3:df:d4:49:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.224.0/19
91.149.128.0/18
93.125.0.0/17
178.172.128.0/17
185.70.12.0/22
213.184.224.0/19
217.21.32.0/19
IPv6:
2a04:2e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28737
Signature Algorithm: sha256WithRSAEncryption
13:e9:d8:ad:88:98:26:4d:0f:ac:36:94:b7:7d:fc:1e:73:2b:
be:fc:10:fd:f1:9f:9a:80:4c:ae:7c:ef:20:db:2b:53:e9:03:
18:7f:a3:13:c3:b3:74:2b:5e:dd:d4:17:e2:c1:cb:92:c0:f2:
13:17:ba:f6:3f:4a:ff:f0:a4:fa:dd:1f:5a:5d:98:93:ed:42:
2e:c0:4a:d2:64:a2:d0:bc:be:45:00:7e:fd:66:41:4b:c7:06:
e0:51:07:46:7f:26:20:83:0b:3a:9a:6f:7b:3d:3a:7b:ac:83:
60:aa:e6:2b:47:0c:5a:c7:6d:0d:21:49:05:0e:96:8d:83:61:
05:5c:2d:f1:b5:c8:2e:4d:4a:6c:a9:09:09:f9:e8:00:1c:a1:
4d:bb:f0:9d:62:fb:d1:5f:92:38:81:bd:0a:f7:f5:b2:2c:61:
1e:23:e1:bd:49:fd:0a:cc:c3:58:7d:53:7f:d7:a8:93:0a:53:
97:29:5e:a9:c4:36:bd:f5:3b:71:92:77:d5:a1:81:b0:b2:51:
c6:46:c5:b6:b1:80:82:e4:87:cb:2e:f7:bd:85:93:44:a8:fd:
81:ad:38:4a:c8:e0:c9:31:f2:ce:ce:83:77:82:1c:99:32:66:
86:38:7c:bc:69:7f:88:4a:75:05:2c:a5:38:40:d1:09:80:c9:
15:ca:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:53 2025 by rpki-client