Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer (raw, json)
Hash identifier: oMP4jmTNIUtc8tk+6/d230FPiWcFgDg6bmU7LA6mHmI=
Subject key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420681859BFE7FF6C3B6493C474709D8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209053
IP: 45.8.232.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:18:59:bf:e7:ff:6c:3b:64:93:c4:74:70:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:83:a6:5c:18:6c:4a:d1:27:6e:70:62:c7:
d2:01:cf:3f:97:89:ba:4a:00:07:c2:2a:7e:f9:c9:
63:8b:87:f2:c2:0b:2f:ab:61:b6:84:7f:42:de:4e:
22:68:89:46:61:d3:b8:ec:ec:42:69:13:ee:f4:42:
f5:d0:8d:2c:38:15:47:8e:5b:d3:35:81:42:03:95:
8b:39:44:59:4c:39:97:a3:c7:6b:36:fc:be:03:e7:
37:03:1c:a1:2c:3e:4d:ad:32:8f:94:66:28:e9:11:
0b:c0:c2:d3:9d:84:ab:4e:b5:24:3d:08:77:e2:81:
2a:21:40:9e:ed:a1:00:80:29:3a:9f:8c:67:95:a3:
01:5d:f0:f0:3f:48:87:64:ab:d7:07:d1:e1:c8:96:
79:1b:a7:36:c5:59:b4:e3:ce:a2:62:11:23:a0:34:
16:81:08:2b:04:36:07:04:f1:7d:18:ba:4d:c5:03:
e3:cb:64:95:2b:05:b9:30:b5:a4:7e:ff:b6:52:e3:
17:5a:a1:5b:64:78:73:26:ca:fe:5a:21:1a:4e:df:
c6:41:0d:b5:d8:2c:7d:af:c9:60:0d:73:23:41:a9:
c9:45:55:8d:a2:68:d8:17:b0:1f:55:f9:05:56:4c:
ca:5c:f5:5c:27:38:4e:46:d1:67:c6:19:71:18:ee:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.232.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209053
Signature Algorithm: sha256WithRSAEncryption
68:0d:77:ae:71:49:75:d8:d5:33:a0:cd:97:10:92:7e:bd:44:
a8:2c:83:cb:85:bf:ef:21:63:b0:d4:2b:9e:ed:c8:11:d9:00:
c9:8f:40:d0:ee:0d:b6:d9:a6:e8:de:11:53:b2:b3:eb:d6:e2:
70:e6:ac:70:ef:d4:94:3c:7e:63:01:5d:74:72:4c:99:10:90:
8f:99:2b:fd:f1:b0:16:1d:e0:9f:62:16:81:19:1b:cc:30:44:
97:c4:17:9b:af:cf:ae:7d:9e:af:1b:36:7b:c4:3b:d7:53:73:
ed:40:e5:cc:74:f5:9d:d7:ce:7f:6f:c2:93:9a:ee:f4:c9:2a:
da:02:4d:44:4a:7a:1d:92:e8:39:54:5b:bb:42:68:e0:3c:6e:
d4:96:5f:d4:2b:b6:28:95:2c:47:7d:ef:7c:5e:3c:c8:3c:45:
2a:1b:e2:44:45:3d:7b:7f:a3:3e:b9:ae:75:f0:25:c1:6d:c8:
03:b4:f8:34:42:11:90:04:fd:3d:d6:b0:37:96:19:3d:8e:31:
e1:fc:d3:12:17:e0:c2:a1:49:f9:92:b1:73:61:c0:0e:7e:8e:
6e:58:4f:ab:55:76:9d:62:d6:4a:d5:0c:41:26:a9:50:1c:50:
be:1c:0e:bc:c9:ce:cb:b1:f2:13:e6:65:35:ef:ec:b3:1c:30:
99:eb:b0:b8
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgaBhZv+f/bDtkk8R0cJ2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmY5ZjkyOGIwYWM2NzczMTk5MWYzNzRiOGUxOTRlYjY1NDJhYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlODplwYbErRJ25wYsfSAc8/l4m6
SgAHwip++clji4fywgsvq2G2hH9C3k4iaIlGYdO47OxCaRPu9EL10I0sOBVHjlvT
NYFCA5WLOURZTDmXo8drNvy+A+c3AxyhLD5NrTKPlGYo6RELwMLTnYSrTrUkPQh3
4oEqIUCe7aEAgCk6n4xnlaMBXfDwP0iHZKvXB9HhyJZ5G6c2xVm0486iYhEjoDQW
gQgrBDYHBPF9GLpNxQPjy2SVKwW5MLWkfv+2UuMXWqFbZHhzJsr+WiEaTt/GQQ21
2Cx9r8lgDXMjQanJRVWNomjYF7AfVfkFVkzKXPVcJzhORtFnxhlxGO6V/QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBb5+SiwrGdzGZHzdLjhlOtlQqwkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2Q1YzA0
Mi01YjRkLTRiMTAtYmM3Ni00MmVhYWJiZmJmZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZDVjMDQy
LTViNGQtNGIxMC1iYzc2LTQyZWFhYmJmYmZkMi8xL0Z2bjVLTENzWjNNWmtmTjB1
T0dVNjJWQ3JDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALQjoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMwnTANBgkqhkiG9w0BAQsFAAOCAQEAaA13rnFJddjVM6DNlxCSfr1EqCyDy4W/
7yFjsNQrnu3IEdkAyY9A0O4Nttmm6N4RU7Kz69bicOascO/UlDx+YwFddHJMmRCQ
j5kr/fGwFh3gn2IWgRkbzDBEl8QXm6/Prn2erxs2e8Q711Nz7UDlzHT1ndfOf2/C
k5ru9Mkq2gJNREp6HZLoOVRbu0Jo4Dxu1JZf1Cu2KJUsR33vfF48yDxFKhviREU9
e3+jPrmudfAlwW3IA7T4NEIRkAT9PdawN5YZPY4x4fzTEhfgwqFJ+ZKxc2HADn6O
blhPq1V2nWLWStUMQSapUBxQvhwOvMnOy7HyE+ZlNe/ssxwwmeuwuA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net