Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
File: FrUekDbKbnVqAWPDh3ggzV_OEa4.cer (raw, json)
Hash identifier: qT3k0uKS5gKKpenxcR+HamproM5wnBxKlzl7DJEWk+k=
Subject key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252155EB52678A0FCB60D458F38CFC9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42324
IP: 194.0.204.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:55:eb:52:67:8a:0f:cb:60:d4:58:f3:8c:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:79:9e:7a:3a:1c:13:98:7c:ae:0b:c1:a2:
58:26:a0:80:d8:a2:45:31:d9:cb:59:32:ed:1c:f6:
78:a0:14:59:f4:1b:99:60:b5:55:f7:e4:e5:e4:f7:
0f:ad:d9:b9:dc:ce:f3:b4:e3:3f:95:1d:ea:4a:c1:
4f:1b:a5:40:da:80:d1:cc:47:a7:53:93:d5:85:ba:
21:96:08:ba:d9:ef:0f:3a:26:b9:2f:56:83:37:ad:
42:df:55:5e:3b:e2:cd:37:a9:14:3f:71:64:71:5a:
ee:f2:05:45:d7:ea:c3:34:ee:4f:32:91:ec:15:0c:
b8:f5:58:ef:68:95:70:c6:53:17:f9:64:d3:fc:b5:
12:17:6f:0f:0c:ad:72:b8:65:9c:63:97:fb:fd:b6:
e4:6c:79:f7:eb:9f:30:62:9a:54:91:fd:07:f7:a4:
66:aa:d4:1a:8f:78:27:17:88:2c:e9:bc:a7:f3:cd:
71:17:d7:23:6a:0a:f0:27:77:33:c9:b8:79:a2:71:
d2:e0:cf:fd:90:75:75:80:05:15:a0:10:07:88:92:
b9:ef:07:ca:e8:13:b4:48:d0:e6:37:0d:a0:e8:f6:
7d:fe:76:a4:ec:f4:ce:19:2b:94:ae:59:18:47:a4:
c8:f8:67:87:de:b6:f5:69:32:33:46:62:74:14:30:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42324
Signature Algorithm: sha256WithRSAEncryption
60:52:a2:68:95:ae:71:4a:4d:2d:c9:30:5d:95:00:7b:e1:52:
75:ab:7b:c0:51:59:3c:dc:dd:54:4c:25:43:a6:6a:63:df:ab:
94:de:96:03:71:38:2c:b9:10:a3:63:b0:99:53:2f:f8:a0:bb:
a7:9c:29:fd:d3:75:ee:57:12:05:29:ef:2b:b3:7a:e2:95:95:
d5:9c:18:9d:ed:82:3f:f0:c0:8f:e8:e6:42:99:48:e2:d6:73:
29:c2:a6:0a:7d:d3:2b:1e:ae:ae:07:af:5b:e0:1c:a8:58:5a:
80:65:80:db:15:65:62:38:c4:3d:0c:d8:09:7a:19:0a:ad:a8:
87:9c:d7:a1:0c:07:14:d1:6e:80:46:ec:0b:66:c2:42:82:9c:
cd:33:03:2e:a0:32:db:5f:1b:96:9a:b4:be:71:a4:41:ac:4f:
81:2f:04:16:9f:6c:23:52:81:3c:12:48:c9:16:fe:65:62:cc:
7f:d2:56:be:c1:68:c9:95:28:eb:16:ca:76:21:1a:cd:3b:0b:
75:29:aa:7b:66:01:ac:4e:67:7b:2a:d0:a6:5a:77:74:81:09:
1c:28:31:de:f8:38:0b:3c:ef:79:ef:29:3e:09:4b:a7:1a:36:
a0:a3:56:e3:1a:94:b3:c9:f7:e9:4a:9d:79:e4:0d:31:9f:e6:
e3:26:2b:37
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQlIVXrUmeKD8tg1FjzjPyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmI1MWU5MDM2Y2E2ZTc1NmEwMTYzYzM4Nzc4MjBjZDVmY2UxMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncZ5nno6HBOYfK4LwaJYJqCA2KJF
MdnLWTLtHPZ4oBRZ9BuZYLVV9+Tl5PcPrdm53M7ztOM/lR3qSsFPG6VA2oDRzEen
U5PVhbohlgi62e8POia5L1aDN61C31VeO+LNN6kUP3FkcVru8gVF1+rDNO5PMpHs
FQy49VjvaJVwxlMX+WTT/LUSF28PDK1yuGWcY5f7/bbkbHn3658wYppUkf0H96Rm
qtQaj3gnF4gs6byn881xF9cjagrwJ3czybh5onHS4M/9kHV1gAUVoBAHiJK57wfK
6BO0SNDmNw2g6PZ9/nak7PTOGSuUrlkYR6TI+GeH3rb1aTIzRmJ0FDCKsQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBa1HpA2ym51agFjw4d4IM1fzhGuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzk0MTkx
Ny1hNjg4LTQyY2QtYThjOC0yZWM0MTI0ZGQ0MDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvOTQxOTE3
LWE2ODgtNDJjZC1hOGM4LTJlYzQxMjRkZDQwOS8xL0ZyVWVrRGJLYm5WcUFXUERo
M2dnelZfT0VhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwClVDANBgkqhkiG9w0BAQsFAAOCAQEAYFKiaJWucUpNLckwXZUAe+FSdat7wFFZ
PNzdVEwlQ6ZqY9+rlN6WA3E4LLkQo2OwmVMv+KC7p5wp/dN17lcSBSnvK7N64pWV
1ZwYne2CP/DAj+jmQplI4tZzKcKmCn3TKx6urgevW+AcqFhagGWA2xVlYjjEPQzY
CXoZCq2oh5zXoQwHFNFugEbsC2bCQoKczTMDLqAy218blpq0vnGkQaxPgS8EFp9s
I1KBPBJIyRb+ZWLMf9JWvsFoyZUo6xbKdiEazTsLdSmqe2YBrE5neyrQplp3dIEJ
HCgx3vg4Czzvee8pPglLpxo2oKNW4xqUs8n36UqdeeQNMZ/m4yYrNw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net