Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.cer (raw, json)
Hash identifier: oNGwDYoyHmloaXdty8g0HERNdBqCJlSxh/uVLXXlnJE=
Subject key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A0138F8B744D358741E523CDF49A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25444
IP: 195.20.126.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:13:8f:8b:74:4d:35:87:41:e5:23:cd:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:a0:1b:a3:b0:df:c1:00:7c:2d:17:27:d7:
fc:5f:fa:0b:da:fc:5a:7d:c1:99:1b:ec:a0:6a:55:
d0:cc:a5:02:d3:b3:83:5d:f0:36:8f:65:00:ce:28:
d8:27:a5:90:90:78:77:b0:ac:de:c2:5b:32:f7:31:
54:b1:81:d3:0b:1f:9f:e0:43:54:ca:0b:7d:e0:93:
73:96:a6:67:dd:16:40:57:a4:2d:72:ad:05:28:39:
98:8b:f0:d7:bf:33:99:e7:50:b0:f2:47:eb:1d:85:
45:d6:74:6f:7a:71:5c:b0:31:a8:c0:22:42:8d:4c:
2e:02:b7:c8:0e:f1:0b:67:65:ee:83:9e:ab:6f:f4:
51:60:46:2c:7e:64:fe:0c:09:79:84:56:3e:66:e4:
37:ce:4e:e3:ea:bc:be:64:99:81:27:6b:a9:b5:88:
7e:e8:16:3b:c7:a7:8b:64:ec:0a:32:ee:67:88:74:
a2:c8:e2:b7:75:a2:5d:6b:cd:69:f1:1d:75:e8:6a:
e6:ff:c5:d7:4c:75:11:f1:39:35:ca:96:4b:d0:84:
58:41:18:af:03:0a:d8:62:1d:8f:7e:31:11:5f:62:
cd:49:75:0f:03:fd:39:ba:cc:9e:21:4a:7f:c3:4d:
93:60:b3:c6:a9:05:7b:2a:41:7b:6a:13:84:f4:82:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25444
Signature Algorithm: sha256WithRSAEncryption
39:ab:25:a0:35:a2:6d:66:51:5b:85:46:16:73:29:51:12:15:
88:6a:17:3d:9b:ae:ed:1d:bf:42:9d:5a:28:2f:30:d9:23:73:
80:09:00:9d:f9:87:03:e6:84:91:37:2c:d4:26:48:8e:49:d7:
78:ba:2a:38:21:ea:2b:68:0f:22:78:9d:28:41:c2:34:fd:39:
1c:e1:92:13:4f:2b:34:d6:b5:ac:e6:c7:59:81:e7:79:63:ae:
45:e2:86:f3:bb:f5:aa:9a:88:be:84:2f:e9:71:56:ae:d6:02:
0f:cc:7b:91:af:5c:80:d2:af:e4:9e:83:d1:c6:12:f4:87:8b:
3d:3a:b9:2d:d6:96:15:5b:6d:ff:86:47:bc:d1:e8:fa:63:16:
9f:bc:49:7f:92:4a:ed:41:a9:42:f1:a8:2f:a2:1c:37:ed:38:
43:4d:71:8e:38:6e:54:c8:6a:fb:0e:e8:bc:73:49:a8:04:a5:
4e:e7:3c:46:07:e0:93:f0:86:4d:09:af:0d:53:06:82:91:e9:
80:16:25:74:f7:3e:b3:b8:fb:52:ca:ae:21:07:aa:c7:eb:cc:
1d:e4:ca:30:b9:c6:4d:8a:a0:3d:26:6b:29:6e:f8:0f:c5:60:
5b:26:ac:6d:fc:a7:74:ff:1f:79:f3:d5:5b:c6:a8:a4:f9:1c:
cb:d8:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:18 2025 by rpki-client