Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
File: 7fVL4bXtX9WS-spGjfERAJXz6go.cer (raw, json)
Hash identifier: Ua9rWS12E+OHE64iTnx3h8AeLOG6MHAEfFgfHC1cDZM=
Subject key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D99799F6DAB07E156947B5D534737D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208550
IP: 45.129.52.0/22
IP: 2a0e:4440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:97:99:f6:da:b0:7e:15:69:47:b5:d5:34:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:a6:ec:a1:f9:45:ca:e4:d3:da:f1:f0:09:
4f:15:61:47:24:b8:2c:5a:0d:db:ea:54:9e:c3:b7:
f4:c5:35:9e:39:ef:c2:10:7a:3d:98:ad:50:64:91:
f4:62:e5:38:bb:95:d9:a6:29:cd:9c:49:b9:76:5e:
45:5e:e2:3b:d8:6f:9d:e0:df:07:35:21:08:9f:22:
d7:91:e2:74:a2:5c:19:aa:93:cf:db:34:62:22:fb:
86:13:eb:13:95:f2:8b:fa:c3:9a:35:cf:47:f2:f8:
4e:de:26:78:bf:cb:f2:22:61:e8:78:16:12:d5:19:
bd:f9:34:3a:34:9e:83:fd:7d:cf:06:f7:86:78:51:
c2:7e:b7:66:2c:28:77:85:5f:81:09:2f:98:e3:42:
ab:fb:df:3d:dd:cd:9e:55:58:df:2e:28:6d:08:0f:
ad:3f:cc:d2:86:a0:06:6c:a6:16:98:06:f6:8b:2b:
db:21:36:24:23:49:8f:d6:34:31:e5:29:37:b3:0d:
e4:e2:72:2f:99:c9:ef:e1:93:b1:85:7d:17:2e:06:
89:b6:02:ce:b6:65:e1:fb:b7:87:bc:68:82:a9:a6:
2b:50:57:95:b7:40:a2:88:e5:ba:aa:c5:bb:07:55:
63:c9:df:ca:63:da:a6:55:93:08:2c:cf:78:0b:f9:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
IPv6:
2a0e:4440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208550
Signature Algorithm: sha256WithRSAEncryption
70:f6:9c:12:73:f2:7e:de:ae:b1:55:5e:53:a6:26:72:53:12:
45:20:a7:b6:cc:3d:5d:10:d1:4d:ce:a8:7b:cd:f2:91:4e:23:
75:be:e0:0d:78:fb:d0:02:b4:71:b2:8f:02:e2:b7:ed:7b:a1:
80:ad:ae:46:83:0c:57:e0:1d:5f:ed:7e:a7:4f:05:56:09:92:
49:b2:49:83:7d:67:bc:aa:ec:af:87:97:40:c2:5b:6a:04:01:
1c:37:53:3b:50:33:6f:d9:18:0c:61:85:46:3e:c9:a1:23:8f:
04:a5:69:e0:26:2e:a4:14:94:93:ca:ac:08:95:17:f5:75:6a:
55:1f:fa:94:4f:db:62:b5:c0:1c:12:ab:24:b5:7d:ec:5e:15:
33:bc:aa:fd:2f:c2:3b:05:c0:dd:91:dc:f2:31:be:9b:48:09:
86:b3:73:d1:28:23:6b:a0:d7:23:12:76:0d:73:cc:1f:0f:d9:
c3:e2:9e:42:36:70:d8:8d:7b:a8:52:c3:37:4f:64:69:30:9c:
ce:1e:d1:de:66:f3:a2:41:a8:50:2b:58:3f:11:c5:0d:be:ac:
c0:5a:91:a6:59:91:9a:d6:64:f7:10:75:29:8b:35:5f:8b:c7:
7f:7d:10:71:87:02:99:1c:71:36:e7:bf:6f:e4:ae:13:41:d1:
05:68:d3:6c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2ZeZ9tqwfhVpR7XVNHN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGY1NGJlMWI1ZWQ1ZmQ1OTJmYWNhNDY4ZGYxMTEwMDk1ZjNlYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSSm7KH5Rcrk09rx8AlPFWFHJLgs
Wg3b6lSew7f0xTWeOe/CEHo9mK1QZJH0YuU4u5XZpinNnEm5dl5FXuI72G+d4N8H
NSEInyLXkeJ0olwZqpPP2zRiIvuGE+sTlfKL+sOaNc9H8vhO3iZ4v8vyImHoeBYS
1Rm9+TQ6NJ6D/X3PBveGeFHCfrdmLCh3hV+BCS+Y40Kr+9893c2eVVjfLihtCA+t
P8zShqAGbKYWmAb2iyvbITYkI0mP1jQx5Sk3sw3k4nIvmcnv4ZOxhX0XLgaJtgLO
tmXh+7eHvGiCqaYrUFeVt0CiiOW6qsW7B1Vjyd/KY9qmVZMILM94C/lkKQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO31S+G17V/VkvrKRo3xEQCV8+oKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzQwZDg5
My1lMDk5LTQxNDgtYjI4ZS05ZTYxNGY0NDY2YzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNDBkODkz
LWUwOTktNDE0OC1iMjhlLTllNjE0ZjQ0NjZjNS8xLzdmVkw0Ylh0WDlXUy1zcEdq
ZkVSQUpYejZnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYE0MA0EAgACMAcDBQMqDkRAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMupjANBgkqhkiG9w0BAQsFAAOCAQEAcPacEnPyft6u
sVVeU6YmclMSRSCntsw9XRDRTc6oe83ykU4jdb7gDXj70AK0cbKPAuK37XuhgK2u
RoMMV+AdX+1+p08FVgmSSbJJg31nvKrsr4eXQMJbagQBHDdTO1Azb9kYDGGFRj7J
oSOPBKVp4CYupBSUk8qsCJUX9XVqVR/6lE/bYrXAHBKrJLV97F4VM7yq/S/COwXA
3ZHc8jG+m0gJhrNz0Sgja6DXIxJ2DXPMHw/Zw+KeQjZw2I17qFLDN09kaTCczh7R
3mbzokGoUCtYPxHFDb6swFqRplmRmtZk9xB1KYs1X4vHf30QcYcCmRxxNue/b+Su
E0HRBWjTbA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:19 2025 by rpki-client