Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
File: fUQxNNzRasFvbNIJ-hx_lYym234.cer (raw, json)
Hash identifier: YMj4+Hn7nY/2qndk/xCfD8o3euehHCdWhJHqHrlOHrU=
Subject key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6EE05288814DB24D9B05A1B0225B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57276
IP: 37.157.32.0/21
IP: 82.163.112.0/21
IP: 82.163.124.0/22
IP: 185.53.224.0/22
IP: 195.250.16.0/22
IP: 2a01:a220::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ee:05:28:88:14:db:24:d9:b0:5a:1b:02:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:5c:9e:66:4e:25:de:ca:49:91:b2:75:d4:
6b:fd:d4:ca:2c:19:47:3f:11:60:58:b8:28:f4:49:
49:c8:c1:e6:90:78:22:74:25:16:9c:1b:15:8a:f9:
30:fc:63:91:33:28:3f:2f:41:2f:6d:1c:ed:7e:ab:
c3:52:ca:1d:da:4a:da:95:b2:c6:1d:39:73:a3:6f:
16:3d:44:df:c6:e8:e9:27:84:0b:73:52:9c:e5:d1:
65:81:9d:f7:24:f2:7d:cb:77:1b:91:ca:f6:60:d3:
1a:06:76:4e:5b:64:55:8e:7a:49:4f:bb:59:c3:b1:
7b:86:cd:25:cc:f3:fe:7c:33:e7:fc:b7:bd:29:49:
70:32:3b:83:97:44:30:4e:34:65:a3:44:93:c2:fc:
71:48:9b:64:44:77:8f:b9:66:2c:33:41:80:fa:0e:
87:89:a3:c4:5c:6e:c7:87:fe:5d:51:85:c3:a3:2e:
ef:d3:5a:0b:2b:0c:da:ac:45:83:23:55:c9:97:c8:
90:8c:4e:bb:45:f2:72:fc:c7:25:a4:4c:ba:c6:d8:
dc:07:fb:3c:17:6d:17:b4:77:cc:c6:a1:eb:46:51:
17:d7:42:8c:8f:72:3d:31:48:33:27:4a:d8:28:c1:
c9:28:a4:65:c9:24:04:9d:e3:0f:14:38:df:61:5b:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.32.0/21
82.163.112.0/21
82.163.124.0/22
185.53.224.0/22
195.250.16.0/22
IPv6:
2a01:a220::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57276
Signature Algorithm: sha256WithRSAEncryption
b1:2f:47:e0:bc:bd:90:86:c7:9c:ff:c3:80:e7:0a:7d:45:51:
dc:56:a2:54:15:44:52:2a:e7:85:99:5c:8b:dc:ea:2b:c6:8e:
98:73:e5:f0:f9:7a:50:4c:73:c5:96:fc:e6:11:dd:9a:84:35:
45:85:e0:28:ea:e0:ac:a6:dd:bf:f8:42:7d:ee:7f:a4:7e:2b:
1c:07:4f:c2:7f:cf:03:15:1b:3a:17:ec:99:09:d7:98:a5:47:
d5:6b:89:27:65:62:c5:a6:2f:2c:6a:55:55:3e:9b:cf:fd:79:
ea:27:1f:ea:84:a5:0f:60:2a:fe:88:b0:e5:32:d2:66:07:6a:
36:61:73:ad:b0:76:70:50:c9:ab:4a:a8:6f:be:64:a5:41:3b:
f3:29:42:6f:62:83:22:89:06:5a:36:86:44:de:8a:83:ae:31:
ab:bb:b5:cd:d6:91:3d:07:f5:da:78:78:17:6b:86:a6:f6:f8:
e0:ec:11:34:e6:3f:b9:b5:e2:1c:d7:0a:93:c2:9c:16:50:87:
a4:e9:be:de:aa:06:4b:83:5e:13:03:b8:59:7d:b4:59:6d:8b:
7c:81:af:72:e2:6f:53:b9:dc:77:93:10:0a:ef:18:76:d9:f0:
d9:35:32:d0:3b:05:a0:8c:25:f6:24:19:83:50:5c:63:56:11:
96:45:4c:88
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQj1u4FKIgU2yTZsFobAiW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQ0MzEzNGRjZDE2YWMxNmY2Y2QyMDlmYTFjN2Y5NThjYTZkYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG1cnmZOJd7KSZGyddRr/dTKLBlH
PxFgWLgo9ElJyMHmkHgidCUWnBsVivkw/GORMyg/L0EvbRztfqvDUsod2kralbLG
HTlzo28WPUTfxujpJ4QLc1Kc5dFlgZ33JPJ9y3cbkcr2YNMaBnZOW2RVjnpJT7tZ
w7F7hs0lzPP+fDPn/Le9KUlwMjuDl0QwTjRlo0STwvxxSJtkRHePuWYsM0GA+g6H
iaPEXG7Hh/5dUYXDoy7v01oLKwzarEWDI1XJl8iQjE67RfJy/MclpEy6xtjcB/s8
F20XtHfMxqHrRlEX10KMj3I9MUgzJ0rYKMHJKKRlySQEneMPFDjfYVvX6QIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFH1EMTTc0WrBb2zSCfocf5WMptt+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzkxNTE1
Mi01YzkwLTQ1NDQtOGI3Yy05YzE5M2U3OGVjMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvOTE1MTUy
LTVjOTAtNDU0NC04YjdjLTljMTkzZTc4ZWMxOC8xL2ZVUXhOTnpSYXNGdmJOSUot
aHhfbFl5bTIzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDJZ0gAwQDUqNwAwQCUqN8AwQCuTXgAwQCw/oQ
MA0EAgACMAcDBQMqAaIgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDfvDANBgkq
hkiG9w0BAQsFAAOCAQEAsS9H4Ly9kIbHnP/DgOcKfUVR3FaiVBVEUirnhZlci9zq
K8aOmHPl8Pl6UExzxZb85hHdmoQ1RYXgKOrgrKbdv/hCfe5/pH4rHAdPwn/PAxUb
OhfsmQnXmKVH1WuJJ2VixaYvLGpVVT6bz/156icf6oSlD2Aq/oiw5TLSZgdqNmFz
rbB2cFDJq0qob75kpUE78ylCb2KDIokGWjaGRN6Kg64xq7u1zdaRPQf12nh4F2uG
pvb44OwRNOY/ubXiHNcKk8KcFlCHpOm+3qoGS4NeEwO4WX20WW2LfIGvcuJvU7nc
d5MQCu8Ydtnw2TUy0DsFoIwl9iQZg1BcY1YRlkVMiA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:30 2025 by rpki-client