Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer (raw, json)
Hash identifier: lBy8BL/GDigzdXIK94ntfAfGbSNBQGheT01eRJF5er8=
Subject key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194F14FA9EC33B2AD9B744C0F2AA5B0AA03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Feb 2025 19:21:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:1030::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:4f:a9:ec:33:b2:ad:9b:74:4c:0f:2a:a5:b0:aa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 19:21:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:3d:92:a0:40:df:a9:fe:4d:00:f8:f3:42:
68:f1:4b:f3:a3:98:1f:04:43:a7:a5:6f:3b:c2:6f:
5c:d9:99:8b:0b:23:ca:03:78:91:1d:0e:27:62:60:
a0:2e:fa:ab:bf:ad:a2:ca:88:e8:e8:2c:76:15:bc:
b6:d9:a1:10:b8:f5:9c:88:c6:58:cf:35:d3:48:8f:
c2:c6:ab:9d:26:09:f5:e8:d1:13:69:65:b2:cc:f7:
5e:a9:d1:ca:7e:e2:a2:00:de:e1:f0:96:25:28:3d:
86:21:e1:48:24:20:d5:68:4b:ee:89:16:0e:98:2d:
80:e9:96:f6:ea:fa:e7:98:ab:fd:9b:44:6c:7d:0d:
0f:98:fc:27:66:3a:a7:28:9b:c5:cd:c0:db:ff:2d:
6c:47:8d:12:80:6d:bf:d5:c4:f9:95:0b:71:cc:fb:
2d:0f:76:f0:3c:df:84:60:6b:87:81:61:c6:c7:40:
58:97:dd:5d:37:d3:d2:25:77:e5:74:29:57:4a:9d:
c2:d6:1d:7f:c6:be:2e:80:3f:c0:be:4f:bb:a7:eb:
28:f3:28:28:9d:f0:e6:e8:5c:b0:e7:e2:b3:2f:cf:
28:61:ee:1b:0e:6f:a2:fa:8d:34:8c:89:57:0f:6f:
05:6a:07:9e:54:56:01:c0:2a:08:38:b6:2c:e9:62:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1030::/48
Signature Algorithm: sha256WithRSAEncryption
83:fe:19:43:cf:32:59:ce:42:7d:72:e9:a4:73:8e:a3:7c:27:
75:8a:0e:52:54:16:40:2f:d1:91:a7:f8:48:60:c5:15:3e:d8:
ec:19:8e:dd:ac:b1:f4:37:1e:95:90:96:4d:b4:b5:ba:96:fa:
1e:79:22:73:d8:6b:b4:a9:15:de:ec:27:7d:f6:ef:c9:c1:0b:
76:06:bd:0b:74:b4:a3:dd:41:5b:34:be:fb:7f:69:70:28:34:
b3:8e:85:66:ec:a7:67:83:c0:2b:bc:c6:c6:7f:a7:95:8c:0e:
b4:e0:2b:9b:2f:cf:b7:25:a9:c2:41:61:b8:66:76:76:11:9e:
e2:e1:65:c0:03:bb:9d:96:2e:66:57:53:3a:0c:e1:6d:b0:bf:
7e:77:18:f4:15:60:fa:db:1f:ba:d6:2c:0a:4a:b9:64:2a:2b:
eb:c0:98:cd:6c:70:ab:fb:75:54:da:7b:d5:aa:5c:5f:39:c2:
d6:66:11:6b:d4:89:79:9b:91:cd:43:bf:6b:2b:30:9a:37:f5:
d2:66:b3:73:53:a7:7b:1a:4f:b8:07:2a:19:bf:aa:0d:5d:39:
f3:67:09:03:79:45:3a:62:5d:36:7d:1d:3d:ae:15:e3:f9:c9:
d6:13:00:f0:75:1f:86:fc:aa:5f:f3:71:7a:44:d4:79:1d:e5:
9c:62:f8:fc
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZTxT6nsM7Ktm3RMDyqlsKoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjEwMTkyMTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFmOGZmYTY0NGU0MDQxZmRhZDBmYzk2ZDYyNzJjYjQwMTdhOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIY9kqBA36n+TQD480Jo8Uvzo5gf
BEOnpW87wm9c2ZmLCyPKA3iRHQ4nYmCgLvqrv62iyojo6Cx2Fby22aEQuPWciMZY
zzXTSI/CxqudJgn16NETaWWyzPdeqdHKfuKiAN7h8JYlKD2GIeFIJCDVaEvuiRYO
mC2A6Zb26vrnmKv9m0RsfQ0PmPwnZjqnKJvFzcDb/y1sR40SgG2/1cT5lQtxzPst
D3bwPN+EYGuHgWHGx0BYl91dN9PSJXfldClXSp3C1h1/xr4ugD/Avk+7p+so8ygo
nfDm6Fyw5+KzL88oYe4bDm+i+o00jIlXD28FageeVFYBwCoIOLYs6WI/rwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFBavj/pkTkBB/a0PyW1icstAF6iwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2RhYTAz
ZC1kNzRiLTRjZmMtYTIzYi01YTE0MzcyNDU3ZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZGFhMDNk
LWQ3NGItNGNmYy1hMjNiLTVhMTQzNzI0NTdmNS8xL0ZxLVAtbVJPUUVIOXJRX0pi
V0p5eTBBWHFMQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBAwMA0GCSqGSIb3DQEBCwUAA4IBAQCD
/hlDzzJZzkJ9cumkc46jfCd1ig5SVBZAL9GRp/hIYMUVPtjsGY7drLH0Nx6VkJZN
tLW6lvoeeSJz2Gu0qRXe7Cd99u/JwQt2Br0LdLSj3UFbNL77f2lwKDSzjoVm7Kdn
g8ArvMbGf6eVjA604CubL8+3JanCQWG4ZnZ2EZ7i4WXAA7udli5mV1M6DOFtsL9+
dxj0FWD62x+61iwKSrlkKivrwJjNbHCr+3VU2nvVqlxfOcLWZhFr1Il5m5HNQ79r
KzCaN/XSZrNzU6d7Gk+4ByoZv6oNXTnzZwkDeUU6Yl02fR09rhXj+cnWEwDwdR+G
/Kpf83F6RNR5HeWcYvj8
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:34 2025 by rpki-client