Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
File: faSamu8hhOwLtu8P3pAcWyhBumQ.cer (raw, json)
Hash identifier: v5Vy5QMYplzMYazxK4A6CseuWxssb3wNlBuhKNkm570=
Subject key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8BFEECF5EE7DA638FF0BC4A138E015
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206771
IP: 185.171.116.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:fe:ec:f5:ee:7d:a6:38:ff:0b:c4:a1:38:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:01:7a:21:91:f2:59:8a:d6:3e:c7:da:92:
58:7b:e7:84:6e:6c:5a:ef:85:d9:9e:38:f7:ff:08:
78:0b:15:a2:92:25:1a:51:56:97:1d:15:d4:29:c6:
b3:f3:03:c2:7f:59:d8:8e:92:6c:c8:c7:fd:74:80:
5f:b1:3f:ac:27:2a:d5:57:77:ba:2c:e6:2e:7a:79:
ed:31:31:56:37:45:82:96:86:cd:5b:ca:9e:7f:69:
d6:fe:aa:e3:5c:69:56:22:fe:78:0d:c0:85:c6:2e:
b0:37:e5:50:8c:e3:84:86:7b:53:dc:81:0b:0b:29:
93:c5:ea:b7:ac:32:4d:72:a1:db:e1:51:4e:e0:08:
c1:73:c9:4f:4c:83:4b:e6:21:15:5f:07:75:ec:53:
f2:9b:f3:cd:1a:cc:72:f3:11:37:d2:51:3d:ea:10:
1e:50:ac:b9:cc:91:63:39:5c:ac:63:92:72:c8:01:
43:ec:63:58:57:a5:be:81:51:ee:88:27:f6:0f:16:
37:53:c5:5b:37:87:52:55:bc:03:7b:7f:8c:ca:9c:
86:c4:cd:d8:f7:16:87:72:b3:0b:63:2f:22:82:bb:
ad:99:d5:d3:bf:b6:f3:ad:f3:5a:f5:01:85:57:c8:
b7:97:09:97:e5:ac:85:1a:9b:90:35:a2:f8:6e:d3:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206771
Signature Algorithm: sha256WithRSAEncryption
30:d7:94:81:40:03:4e:26:ee:30:fa:f7:31:24:e9:3c:d9:c6:
6c:e0:81:2a:2d:56:09:12:06:56:44:55:93:1b:6c:87:dc:5a:
68:57:99:29:04:5d:3b:23:16:71:31:76:d6:e3:fe:bb:b8:e4:
f1:43:06:1c:d8:f5:39:7d:a8:1b:3d:85:1a:80:da:95:ef:9d:
9a:81:41:1f:77:bc:4c:1e:2a:8e:2f:d1:76:af:88:66:59:32:
f4:f1:1a:f9:ee:11:06:56:d6:96:0b:c9:e3:35:eb:95:fd:36:
0a:8b:02:c3:4b:cc:5d:ac:81:f3:2d:42:bf:80:9d:c3:d2:6b:
d9:45:ca:5b:02:c4:1d:1d:2c:a5:49:e4:7c:b9:c4:7e:06:80:
a9:fe:22:47:d7:db:af:4f:1e:95:b3:5e:a7:87:a4:0a:73:bb:
38:cc:5e:fe:54:99:af:6c:9d:0e:bb:eb:16:11:f5:53:c1:9b:
c0:84:80:15:42:1c:f3:1d:ea:62:96:46:66:22:3d:f5:58:87:
aa:4f:66:67:80:f3:fe:b0:5d:35:08:ef:ae:fc:1d:6f:af:e6:
54:51:21:ed:8a:91:5e:95:70:1e:83:e8:16:36:67:15:ef:e4:
71:79:1a:1e:a2:62:40:3a:be:d9:be:b9:d0:5b:fd:9a:da:46:
93:93:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:28:00 2025 by rpki-client