Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
File: fi4pGEMoSetx6V3EDRB56oZfYQk.cer (raw, json)
Hash identifier: SvHoZWMvwFtbXZXcdBb+ktYzgKc7Nr3mgeQNQBzblyA=
Subject key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252233DBDD83E61BE15016CE939B538C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208197
IP: 194.9.63.0/24
IP: 2a12:4640::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:db:dd:83:e6:1b:e1:50:16:ce:93:9b:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f9:c6:69:c2:e7:a7:98:6e:eb:e9:e0:96:
33:b2:f0:bc:c4:a9:77:53:76:c8:63:22:c9:83:97:
14:3d:69:69:76:2a:4d:00:ea:8c:b5:97:56:99:7c:
9c:23:13:fe:54:b6:03:0a:74:cd:00:25:e6:16:0d:
89:5c:46:ce:d1:1e:7c:28:6a:6c:41:f4:1b:8c:fe:
d5:02:84:85:fd:9a:21:58:80:d3:e4:f3:4e:dd:71:
bc:42:3d:19:91:c5:c5:d7:ae:b1:1c:f4:85:42:e2:
e3:f4:e9:60:9a:8a:e1:15:b5:40:44:bf:75:2d:2b:
42:b2:ce:fa:be:6f:22:27:f6:1a:65:9f:87:0e:d2:
eb:d2:f8:aa:5b:0f:ad:d9:24:9f:d8:60:06:3a:1b:
df:c6:44:2f:f1:8d:76:5f:4f:4d:15:a9:a8:71:24:
be:07:ec:a3:de:a9:48:22:94:c9:85:89:59:93:2b:
e2:60:bb:24:54:3a:14:92:78:62:17:2b:45:59:a5:
0f:06:da:55:af:a9:6d:6a:8b:7a:91:6f:c9:60:ce:
ee:62:21:98:85:82:ec:bd:22:20:93:4d:bc:ce:a0:
40:4f:dd:a7:55:65:5e:5c:24:8a:1b:45:7e:52:ef:
88:38:42:72:b3:de:07:8e:70:ab:73:b6:94:dc:74:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.63.0/24
IPv6:
2a12:4640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208197
Signature Algorithm: sha256WithRSAEncryption
39:5f:bb:17:4f:d7:01:dc:c2:fc:91:bb:ef:2a:26:f3:53:4f:
9c:22:7c:e1:e4:7c:85:51:18:06:9b:b5:cc:a4:92:e7:10:11:
67:e1:cc:42:04:7a:1c:7c:e6:ee:94:e6:df:65:a1:f5:ed:b0:
34:7f:4a:ac:c5:97:ca:de:91:36:12:29:9d:8a:ec:57:1a:54:
da:32:98:99:7b:98:f7:af:ee:b1:49:9c:3f:ff:f0:5b:16:55:
9e:31:6b:89:63:1b:be:e9:de:21:2d:f1:61:35:de:30:78:b6:
11:35:b1:96:26:47:87:79:bc:8b:e9:2a:3c:cf:c7:b4:70:6b:
2d:99:4e:90:e3:65:34:e0:f1:39:76:85:c4:55:08:10:85:63:
d5:fd:8b:da:7e:c9:16:ed:90:0b:20:da:78:cb:60:e8:f4:75:
ad:df:9b:1a:b4:c0:03:0e:37:cb:ec:25:63:b1:29:3f:a1:0b:
bf:54:aa:2b:c7:63:ec:5a:be:9d:39:3a:5e:2e:f8:f1:42:19:
e1:79:f2:11:d2:d2:53:cb:bc:e0:03:b1:3f:c0:7d:a8:06:ce:
3e:1c:c4:a9:3a:3a:95:a5:67:fd:48:db:02:52:a4:56:4b:7c:
e5:e7:89:e7:93:49:a7:23:3a:cd:72:73:f6:31:a9:46:9d:1b:
20:dc:6a:ca
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlIjPb3YPmG+FQFs6Tm1OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTJlMjkxODQzMjg0OWViNzFlOTVkYzQwZDEwNzllYTg2NWY2MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/f5xmnC56eYbuvp4JYzsvC8xKl3
U3bIYyLJg5cUPWlpdipNAOqMtZdWmXycIxP+VLYDCnTNACXmFg2JXEbO0R58KGps
QfQbjP7VAoSF/ZohWIDT5PNO3XG8Qj0ZkcXF166xHPSFQuLj9OlgmorhFbVARL91
LStCss76vm8iJ/YaZZ+HDtLr0viqWw+t2SSf2GAGOhvfxkQv8Y12X09NFamocSS+
B+yj3qlIIpTJhYlZkyviYLskVDoUknhiFytFWaUPBtpVr6ltaot6kW/JYM7uYiGY
hYLsvSIgk028zqBAT92nVWVeXCSKG0V+Uu+IOEJys94HjnCrc7aU3HQqgQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFH4uKRhDKEnrceldxA0QeeqGX2EJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2Q4NWY0
MS03NzAxLTQ0YzItYmYyZS1jNTYxOTg1OTQ1MGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZDg1ZjQx
LTc3MDEtNDRjMi1iZjJlLWM1NjE5ODU5NDUwYy8xL2ZpNHBHRU1vU2V0eDZWM0VE
UkI1Nm9aZllRay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwgk/MA0EAgACMAcDBQAqEkZAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMtRTANBgkqhkiG9w0BAQsFAAOCAQEAOV+7F0/XAdzC
/JG77yom81NPnCJ84eR8hVEYBpu1zKSS5xARZ+HMQgR6HHzm7pTm32Wh9e2wNH9K
rMWXyt6RNhIpnYrsVxpU2jKYmXuY96/usUmcP//wWxZVnjFriWMbvuneIS3xYTXe
MHi2ETWxliZHh3m8i+kqPM/HtHBrLZlOkONlNODxOXaFxFUIEIVj1f2L2n7JFu2Q
CyDaeMtg6PR1rd+bGrTAAw43y+wlY7EpP6ELv1SqK8dj7Fq+nTk6Xi748UIZ4Xny
EdLSU8u84AOxP8B9qAbOPhzEqTo6laVn/UjbAlKkVkt85eeJ55NJpyM6zXJz9jGp
Rp0bINxqyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:54 2025 by rpki-client