Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
File: sQvyxqnxpCuKzuASWfkfUUSrivU.cer (raw, json)
Hash identifier: P3dzoa+HCCwWpc22zvyBCFmPKhY4NNCK0GN/AjGdzlU=
Subject key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422203C2B661B0A3E809DB6EF2C7E67D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206947
IP: 5.63.17.0/24
IP: 2a10:ff00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:2b:66:1b:0a:3e:80:9d:b6:ef:2c:7e:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:2c:95:ea:8c:05:53:09:1b:c0:6a:a3:29:
10:ed:ee:43:64:87:fc:b6:2e:ca:0c:ed:22:74:37:
31:57:b3:0a:4d:3d:02:18:36:59:a1:c2:17:a2:88:
fe:45:3b:ed:38:80:83:ab:6b:21:89:82:fb:c5:ba:
e3:83:37:9c:87:4d:b8:2c:71:bb:9b:74:b2:a5:ee:
6b:9d:72:47:05:9a:90:cd:c3:be:06:fa:6b:e4:43:
a9:3c:5e:c3:84:c3:f6:5f:d6:1f:81:7c:9f:1c:20:
49:cd:c0:ef:ee:cf:bb:ac:bc:b4:fb:8a:75:a2:08:
d3:e3:27:14:6e:24:cf:09:55:0a:87:5f:ba:90:3e:
0d:8c:05:9d:5a:16:d1:d1:67:aa:5e:fc:50:93:87:
b0:40:93:21:07:be:04:c8:63:3c:f7:58:19:be:e6:
fe:15:55:77:ad:b3:5c:69:5e:2e:80:c9:dd:e1:5a:
0e:67:ab:b9:1d:d4:0b:c4:3b:ee:93:f1:42:32:ef:
64:35:bf:75:55:52:6d:e3:54:0b:3d:93:63:37:27:
70:e1:e4:c7:f0:4e:51:69:c5:ad:c2:4e:6a:a1:79:
db:95:c2:0c:c9:77:43:f4:df:68:ce:d7:fe:ec:c2:
ad:ef:4a:f8:a4:44:02:cc:67:e1:5e:fd:e5:e2:a6:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.17.0/24
IPv6:
2a10:ff00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206947
Signature Algorithm: sha256WithRSAEncryption
4f:5a:07:c5:79:7e:87:91:93:3f:f6:f3:6b:15:6c:02:d1:72:
70:df:b2:66:2a:bb:13:b1:06:3f:7b:97:ca:35:71:37:68:e6:
30:3a:bf:f4:51:7f:b1:f3:8d:58:17:69:3b:12:dd:03:1b:5a:
23:9d:a5:8f:1e:b5:30:d9:22:2a:9e:fb:23:91:aa:f5:5a:fc:
ec:28:1a:4b:5f:c5:fb:da:2d:35:94:db:65:37:2e:06:8d:21:
9e:02:ef:b8:48:4b:cc:e4:c2:4b:76:26:86:3c:0d:35:77:3c:
48:40:d2:a8:09:6f:fc:07:32:18:21:ff:a5:45:c1:75:0d:73:
23:3d:3c:2c:19:c0:ce:3d:9a:7f:4a:de:51:0f:dd:c7:80:33:
d8:9a:74:ab:2e:6e:97:96:23:60:78:ce:84:94:6e:35:13:5b:
57:bc:8d:33:1d:6d:96:46:b6:92:81:22:14:18:ca:c9:07:23:
3e:47:0f:05:98:d9:8f:90:ea:35:bf:b8:9e:71:f4:6d:5f:b6:
9a:76:82:59:0b:a6:a4:b8:55:2b:d0:6b:55:13:9d:52:e9:3e:
69:e5:72:0b:15:2c:f0:c0:0a:a3:c3:8d:b9:4d:ad:aa:5b:ea:
f2:45:84:bc:4c:38:2d:a1:ab:e1:db:2b:9f:be:69:21:54:af:
4d:32:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:47 2025 by rpki-client