Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
File: FgnCTa4-7_y--jemiGZKyTMA71g.cer (raw, json)
Hash identifier: axnZljShTqAD4mG4/oTCpilfc+buSf4RuK70LJAMdAk=
Subject key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C30F90FF17F3FCF540102CC68433
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207233
IP: 45.84.124.0/22
IP: 185.162.60.0/22
IP: 2a0a:4000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:0f:90:ff:17:f3:fc:f5:40:10:2c:c6:84:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:b6:3d:15:60:f4:77:39:71:51:b6:fa:cc:
32:60:a4:91:4f:cf:ee:b6:18:1d:03:8f:5c:c9:db:
d1:bd:68:35:da:ba:e9:3a:2c:c9:44:67:0c:da:dd:
37:a4:8e:f8:76:de:a2:c1:9d:ca:23:73:13:69:39:
2e:99:57:3b:ff:60:6b:10:65:35:78:60:29:9b:bc:
36:19:d0:3f:f7:8d:57:be:a3:cd:5f:c8:4a:0d:0b:
07:0f:3d:a5:e5:86:30:b4:0a:4a:ca:4d:56:3b:bf:
d8:5b:59:ba:bd:9c:d6:f8:7e:1f:2e:4e:03:f1:a9:
70:15:d7:c3:a4:97:13:8d:69:9e:67:c2:59:cd:1d:
21:c0:f1:45:15:3f:c9:70:62:1c:26:b0:5c:6d:3e:
87:5d:05:f8:ba:c3:19:77:b9:fb:35:a8:1b:14:33:
78:2e:8f:72:1a:5e:68:2c:d4:47:8a:e3:96:68:60:
f9:6b:27:8f:b8:b4:8f:2e:74:08:8a:f7:ad:d2:0c:
18:4b:f7:05:ab:58:70:ee:41:78:42:f5:41:c0:f3:
cc:43:6d:fb:e0:6a:82:a6:09:17:2c:62:1d:17:0c:
ae:1b:de:0d:39:8a:31:13:0b:ad:00:9a:78:96:5c:
4e:46:8f:74:4e:09:42:fb:d7:a5:50:38:05:9b:20:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.124.0/22
185.162.60.0/22
IPv6:
2a0a:4000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207233
Signature Algorithm: sha256WithRSAEncryption
2f:c8:5c:04:74:73:ba:85:f2:72:65:ee:54:28:b9:21:b4:6a:
29:ae:a4:04:d4:00:eb:53:1e:82:c7:de:01:5d:65:7c:98:bd:
44:8a:82:20:a8:b3:07:16:bb:3e:2c:7d:71:ae:60:46:12:48:
ec:d0:5d:86:6a:b4:a0:dd:1a:71:a7:4a:27:cf:20:d0:ea:3c:
98:3f:ed:ef:7f:a2:df:23:c9:ac:a3:68:4f:0d:37:62:28:4a:
9b:95:b1:c6:50:f6:35:30:2c:cf:9f:93:ee:fc:f8:05:12:4c:
4e:07:96:05:f8:43:7d:a2:12:86:9b:97:33:37:a8:50:0a:ca:
54:3e:77:45:d8:6c:c4:da:3c:da:39:e5:76:e2:71:bd:4a:87:
e7:27:f5:57:de:3d:9c:6e:f2:2b:c9:fa:9f:0e:34:4e:15:8b:
fc:d4:18:7d:a9:cf:ef:a1:48:12:6a:0a:cb:f9:bd:3d:76:37:
db:6e:90:c2:f1:76:d4:99:dd:49:48:aa:ac:2d:30:c4:ee:81:
5f:f0:7a:ea:81:e4:9e:e3:45:7c:a1:c6:c0:15:53:e2:85:57:
35:19:74:9a:d7:38:bb:8c:ef:2f:48:3d:57:f5:9e:29:bd:ff:
bf:ce:4d:f3:99:e6:23:b2:5b:ab:f6:29:7e:0e:1b:4f:cb:08:
b4:df:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net