Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer (raw, json)
Hash identifier: YUSuqICDMOIh/nVVWB5UKSAMOkhSOKPa2ViVotahB6c=
Subject key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C1E8A8FCC6DD17CAEA5928310ED0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56876
IP: 94.250.192.0/19
IP: 176.57.128.0/18
IP: 185.137.120.0/22
IP: 193.192.58.0/23
IP: 2a00:e440::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1e:8a:8f:cc:6d:d1:7c:ae:a5:92:83:10:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:4d:4a:9f:4b:32:72:88:9f:87:37:06:99:
9e:ee:af:55:82:c9:e4:9f:62:17:69:b9:4b:53:11:
5f:63:01:9d:e1:ea:bf:f6:7d:3e:ca:2a:c3:16:43:
d5:65:be:04:0c:27:21:88:51:d5:9c:5e:de:8d:0e:
50:a1:aa:b6:79:e2:2c:6e:99:6a:7d:92:89:bb:bc:
e9:e4:dc:12:e6:95:a1:e4:69:b1:d2:08:e2:d5:47:
87:47:75:a2:d6:bf:92:aa:87:ad:0f:4b:6c:a7:8b:
47:54:12:c4:cf:da:59:c3:a2:2c:65:1f:03:46:ae:
8c:b7:0e:9e:83:aa:fc:5f:34:a1:65:79:56:1d:56:
14:95:90:0b:7a:3f:99:83:84:fc:3c:5f:4e:00:57:
9e:06:7d:e7:2c:d8:3a:c2:82:34:f7:b1:e9:88:dc:
ab:96:ff:74:41:ff:98:17:a5:1f:5b:87:c4:d1:4f:
69:b5:5f:1c:69:9f:b3:b9:95:d6:ed:5e:ef:f8:75:
b8:eb:c1:57:f4:54:41:c3:29:b5:0b:9f:39:f9:7d:
b2:bf:f6:a1:78:b0:84:fe:a4:23:a0:70:f2:25:3d:
34:52:8d:02:47:1b:15:40:85:e0:6a:54:ff:da:d8:
2d:7c:72:ab:8a:66:5d:66:07:cb:93:0a:56:40:8c:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.192.0/19
176.57.128.0/18
185.137.120.0/22
193.192.58.0/23
IPv6:
2a00:e440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56876
Signature Algorithm: sha256WithRSAEncryption
6b:99:72:96:be:9d:85:e7:f3:de:0b:bb:92:10:fc:dc:8a:05:
28:da:6f:8c:f9:ec:84:0c:15:6d:8b:f0:5f:5f:3c:ba:f4:69:
ea:2b:1e:47:c3:dc:e9:26:74:ed:0a:19:90:ea:cd:f9:a9:e0:
2d:12:a9:43:a2:73:2f:73:3d:cb:22:67:1f:7e:6d:e8:a2:37:
50:b5:ad:40:55:d9:a2:f0:22:b5:a5:f6:57:35:ca:3e:e8:98:
5e:d2:e4:b9:07:4d:f4:d6:86:76:56:bf:3b:25:6f:1b:b4:66:
a0:52:ae:36:c4:ee:d1:2d:d6:5c:59:6c:29:97:eb:6e:01:01:
bf:e1:e0:6a:d2:4e:47:e2:da:9c:7b:32:37:c5:e2:26:28:c8:
8d:66:f8:c7:a0:67:3f:d2:38:03:28:42:03:45:4d:78:a5:e2:
96:76:be:3e:f1:dd:e0:1a:9a:cc:a4:df:2a:7e:51:e7:21:96:
41:7d:a8:58:25:f3:3d:e6:d8:0b:4f:e3:55:86:76:c5:9a:60:
e0:48:b6:6a:be:d6:1b:b9:50:0a:26:27:62:bd:6b:05:6e:42:
b4:92:c7:d8:61:d4:3e:bf:8b:bc:9a:4a:1c:91:7f:6f:f1:22:
29:e5:53:0b:d0:df:ce:f5:de:af:a2:8a:17:ab:af:e6:83:48:
4d:f5:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 23:36:52 2025 by rpki-client