Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer (raw, json)
Hash identifier: tLluC31TxxQl0+GsxprU/Ix52KR6+m8/D13wI/Fpldo=
Subject key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214442356B215A05E33D68A20549D8BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31293
AS: 203954
IP: 185.118.240.0/22
IP: 194.150.116.0/22
IP: 2a06:9680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:35:6b:21:5a:05:e3:3d:68:a2:05:49:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:9c:37:30:ad:e9:5c:1c:cb:ba:20:ae:25:
b9:17:ff:d6:a3:c4:a6:5a:f9:53:37:ce:4c:61:ca:
79:a6:ec:30:a3:b6:3c:56:aa:40:c9:df:5b:27:6f:
7c:88:3e:f4:b1:5c:b4:c4:59:7e:7b:6b:cc:4d:46:
48:9e:4c:b9:ca:0b:dc:42:4f:f4:0a:95:f9:66:d7:
39:9b:5e:3f:d4:f6:33:30:7c:1b:ae:de:ea:05:8f:
37:a2:3d:92:46:6a:ce:85:4a:0d:33:df:15:85:ca:
1f:5f:a1:8a:6d:8c:48:55:39:02:f3:88:de:18:e4:
0f:27:46:21:b0:78:21:84:40:08:fa:eb:cc:cc:56:
95:b1:61:cd:e5:d3:bc:41:8c:c1:21:5c:ec:1b:53:
eb:4a:32:4c:90:14:da:f2:fb:9f:92:75:5c:dd:8f:
5e:4c:e1:b2:d2:6a:33:05:12:be:ae:0e:86:9e:78:
b7:5c:94:5c:0a:dc:39:e3:89:f8:4a:35:72:d7:95:
67:6f:ee:07:9e:d7:a2:e8:84:a9:5d:1e:1a:de:26:
26:e9:fb:01:ff:53:60:67:3f:14:83:b0:04:5f:69:
be:c1:3b:50:48:9a:39:6e:58:03:29:78:f4:e6:c9:
3b:53:7a:62:26:ef:e2:c8:e4:00:f0:18:c2:4b:c1:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.240.0/22
194.150.116.0/22
IPv6:
2a06:9680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31293
203954
Signature Algorithm: sha256WithRSAEncryption
23:da:2a:7f:aa:5c:e3:70:74:2b:2c:1b:b0:29:68:9f:11:fe:
e1:76:00:a0:52:17:fb:10:b5:9f:af:aa:8a:82:f6:3b:99:6e:
49:2b:2a:32:2a:79:df:67:31:b8:af:62:a9:d6:a3:eb:9c:b8:
8b:dd:0c:c7:54:67:f1:61:46:94:97:bc:af:c0:03:c1:e9:b7:
18:74:57:47:ca:33:99:d7:cc:c2:bf:60:ab:ac:c3:7b:26:7b:
82:cf:e5:c3:65:94:e3:e2:3d:c2:43:6e:cc:f4:1a:92:68:26:
db:af:4a:00:5f:45:d7:1f:a3:3c:87:1c:e0:5a:57:fb:bd:0b:
f4:6d:c1:57:6e:03:b9:24:5f:48:23:24:c9:5e:40:5f:e4:eb:
c4:54:13:41:9a:45:f2:48:4f:08:e4:2c:df:0a:c0:92:2f:18:
d0:0f:5e:b5:34:32:bc:7b:99:fd:68:e8:89:e2:2b:d1:0f:0f:
1d:df:dd:35:ad:0b:5a:d7:74:b0:03:3d:7f:94:0e:da:b9:79:
52:a5:b3:1b:31:24:bf:9d:8f:71:6b:aa:be:a3:ea:ac:0e:26:
25:fd:26:f8:f0:80:94:a2:f3:fa:ac:d1:6c:12:ee:55:19:81:
b5:03:fa:ad:36:2b:c4:38:2f:05:55:c8:65:3c:f8:a3:08:65:
dc:3f:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:03 2025 by rpki-client on console.sobornost.net