Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.cer (raw, json)
Hash identifier: RfALirhuQkZhzj44rHNHFLdMblZjFhtqkIi1MIywpUE=
Subject key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6094A13B0376D239253A7898BB7FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59455
IP: 46.17.208.0/21
IP: 185.23.52.0/22
IP: 185.33.192.0/22
IP: 185.148.88.0/22
IP: 2a04:2340::/29
IP: 2a05:7940::/29
IP: 2a07:5e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:09:4a:13:b0:37:6d:23:92:53:a7:89:8b:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:23:48:89:ea:bb:46:26:23:5c:08:b0:a3:
ee:f5:81:da:aa:11:21:4c:81:06:d5:cd:8f:86:54:
9f:7f:8d:f7:fc:a5:85:ec:08:27:85:40:02:a0:3c:
ef:dc:78:18:2f:ff:d4:e7:16:4a:11:7d:45:a3:70:
85:be:1f:23:52:ef:07:c6:ff:b3:5b:15:de:07:42:
9a:fb:9a:28:a8:f8:ad:ad:2c:2f:58:31:84:dc:42:
ee:ff:3e:4d:31:99:c6:bc:71:74:8d:00:64:dd:32:
4e:81:8d:bc:61:6d:2f:85:08:d1:18:66:9a:18:bb:
94:48:c4:5b:85:cb:7a:a8:97:99:84:87:84:6f:09:
87:52:df:72:8e:81:a2:0b:52:a4:07:39:71:59:41:
9c:91:9b:3c:2f:94:a5:41:18:9d:c2:2e:57:eb:cc:
94:99:8f:6b:de:8c:37:fb:09:cc:2f:c8:8b:7f:ac:
34:3a:df:af:ea:f9:41:3b:ac:46:df:cf:0e:e6:0d:
ad:30:2e:4e:65:75:ab:b6:63:4d:09:ad:f9:59:a5:
c7:55:9d:34:d2:39:70:b1:4c:a3:ad:25:34:f6:21:
9f:4b:86:f6:a4:95:e1:e1:11:00:a0:3b:ea:75:6a:
d9:ed:5e:13:e6:5e:b2:90:3a:b7:7d:c4:b6:78:70:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.148.88.0/22
IPv6:
2a04:2340::/29
2a05:7940::/29
2a07:5e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59455
Signature Algorithm: sha256WithRSAEncryption
32:03:29:48:70:63:a7:dd:99:74:7a:46:bb:d6:bd:5d:40:d2:
ee:a3:58:12:8e:27:d7:e4:53:af:78:3b:1a:fd:52:99:5d:46:
e9:de:40:26:55:f1:2a:80:ad:77:17:34:c8:9e:8f:08:a0:6f:
34:49:7f:cc:c5:34:e2:c3:5e:f8:2a:36:29:9b:cc:0d:26:62:
ec:b3:73:31:c6:7c:fb:7a:ec:19:1e:a1:82:e4:26:6c:36:b8:
82:53:ac:c9:0c:77:c0:04:3b:c7:ac:55:e6:4b:a2:1d:cf:d2:
48:90:67:fd:1e:db:47:f0:7e:49:ce:d6:17:2f:3e:4d:0d:a1:
5c:e5:a2:97:c5:44:36:89:70:10:8f:4b:fb:06:24:e9:60:9e:
f0:41:8d:3a:01:5b:fa:3e:34:4a:5e:a2:0a:2d:3c:ec:96:eb:
90:45:37:e4:fe:90:8f:e7:4d:aa:26:a1:50:02:fa:08:5c:91:
92:42:91:0a:dd:ee:b3:ff:e6:78:2d:37:02:9f:34:e7:bf:4f:
38:d9:f3:b9:81:1d:de:a7:63:cc:e1:e0:54:4f:ed:d1:9a:3c:
f8:57:d5:e1:9a:bc:d4:52:22:cb:90:a4:4f:21:3d:f3:7b:97:
0c:58:ef:c2:ab:25:bf:f0:97:12:83:93:22:96:cd:85:d5:45:
b9:73:f9:52
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAZQg1glKE7A3bSOSU6eJi7f7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJmMDBkZmY4MDYzMjMxYmQ5OTY3Njg5OWVhYmVhYmEzM2JjNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50jSInqu0YmI1wIsKPu9YHaqhEh
TIEG1c2PhlSff433/KWF7AgnhUACoDzv3HgYL//U5xZKEX1Fo3CFvh8jUu8Hxv+z
WxXeB0Ka+5ooqPitrSwvWDGE3ELu/z5NMZnGvHF0jQBk3TJOgY28YW0vhQjRGGaa
GLuUSMRbhct6qJeZhIeEbwmHUt9yjoGiC1KkBzlxWUGckZs8L5SlQRidwi5X68yU
mY9r3ow3+wnML8iLf6w0Ot+v6vlBO6xG388O5g2tMC5OZXWrtmNNCa35WaXHVZ00
0jlwsUyjrSU09iGfS4b2pJXh4REAoDvqdWrZ7V4T5l6ykDq3fcS2eHD8fQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFBS/AN/4BjIxvZlnaJnqvqujO8XZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzk5NmM3
Mi1iNGE5LTQwNTgtYmRmOC1iZDJlNzdjZDQ3OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTk2Yzcy
LWI0YTktNDA1OC1iZGY4LWJkMmU3N2NkNDc5My8xL0ZMOEEzX2dHTWpHOW1XZG9t
ZXEtcTZNN3hkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF
BwEHAQH/BD8wPTAeBAIAATAYAwQDLhHQAwQCuRc0AwQCuSHAAwQCuZRYMBsEAgAC
MBUDBQMqBCNAAwUDKgV5QAMFAyoHXgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AOg/MA0GCSqGSIb3DQEBCwUAA4IBAQAyAylIcGOn3Zl0eka71r1dQNLuo1gSjifX
5FOveDsa/VKZXUbp3kAmVfEqgK13FzTIno8IoG80SX/MxTTiw174KjYpm8wNJmLs
s3Mxxnz7euwZHqGC5CZsNriCU6zJDHfABDvHrFXmS6Idz9JIkGf9HttH8H5JztYX
Lz5NDaFc5aKXxUQ2iXAQj0v7BiTpYJ7wQY06AVv6PjRKXqIKLTzsluuQRTfk/pCP
502qJqFQAvoIXJGSQpEK3e6z/+Z4LTcCnzTnv0842fO5gR3ep2PM4eBUT+3Rmjz4
V9XhmrzUUiLLkKRPIT3ze5cMWO/CqyW/8JcSg5Mils2F1UW5c/lS
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net