Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RIlXz1pF_UdL283pkpFYaW60sBc.cer
File: RIlXz1pF_UdL283pkpFYaW60sBc.cer (raw, json)
Hash identifier: fWJkA9Lc5DpENfKJtmZ3AwV5SP5q5rkDpsYxrsp9fdg=
Subject key identifier: 44:89:57:CF:5A:45:FD:47:4B:DB:CD:E9:92:91:58:69:6E:B4:B0:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183C7CDEFB90C9616F541E58E9EB9AA92BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/448957CF5A45FD474BDBCDE9929158696EB4B017.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 11 Oct 2022 16:08:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202359
AS: 207960
IP: 193.3.165.0/24
IP: 2001:678:fc8::/48
IP: 2a11:f2c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:cd:ef:b9:0c:96:16:f5:41:e5:8e:9e:b9:aa:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 16:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=448957cf5a45fd474bdbcde9929158696eb4b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:ce:7e:b9:dc:4a:95:41:33:d0:f3:d4:3e:
88:5a:c4:20:c9:7e:ea:b6:a7:a2:bc:67:f4:fe:ff:
9e:4d:f8:76:5b:6c:15:15:7a:c9:a9:33:23:43:f2:
34:f3:1d:03:04:53:2d:44:d7:21:28:b4:a3:8b:e5:
f0:2c:a0:97:a4:25:3a:5f:9e:62:e1:ad:d7:c4:f7:
88:1a:8a:cb:8f:9d:8c:da:c2:74:ae:e7:5f:cb:b1:
b7:3e:41:dd:15:0f:c0:c2:a3:eb:da:6b:fb:70:38:
20:f8:c5:5f:16:56:84:60:c4:a8:72:56:69:5b:2c:
ef:6d:fb:d3:4b:af:65:92:bd:85:4f:5e:5a:22:57:
54:91:18:8e:d3:13:60:7d:4c:cc:c3:d1:c8:d0:8c:
e1:69:7f:26:88:1b:44:1d:a6:f1:c3:12:90:33:91:
c6:8d:41:0a:36:29:17:79:a4:10:b6:d4:7b:63:3e:
88:9a:d7:43:81:07:d9:5e:28:10:2a:50:00:3d:4e:
9c:3e:d8:f4:a6:18:b9:5f:da:2c:29:c3:8e:e5:75:
b1:4b:c4:db:14:2f:f2:e7:c6:53:5a:02:ad:58:11:
c8:ae:e2:7b:da:e1:f0:e9:ab:fc:09:4e:4f:f9:db:
f2:57:4c:a6:cf:e4:29:fa:64:9c:19:96:a6:fc:a2:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:57:CF:5A:45:FD:47:4B:DB:CD:E9:92:91:58:69:6E:B4:B0:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/448957CF5A45FD474BDBCDE9929158696EB4B017.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.165.0/24
IPv6:
2001:678:fc8::/48
2a11:f2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202359
207960
Signature Algorithm: sha256WithRSAEncryption
50:f5:81:2f:09:b3:21:59:ec:97:1c:23:4f:8e:59:42:e5:d7:
24:29:cd:39:4c:61:1f:df:d6:94:49:2c:19:e3:c4:e6:65:49:
35:5e:57:66:d2:dc:f3:d1:c3:ed:42:bd:58:a1:24:9d:b5:b5:
76:b6:68:4d:c3:8e:f4:e9:ff:ca:a2:9d:9d:ba:a9:2f:f0:8c:
ff:cf:51:8d:01:7d:d8:4f:3c:9d:44:db:1c:6e:8f:19:4b:68:
c1:b6:a0:7f:35:10:a3:3d:81:b7:1f:36:6c:35:fb:4e:56:99:
c7:80:ba:d7:b5:80:a6:33:01:c1:2c:c3:04:fb:7a:f1:e0:f8:
cd:95:5a:9a:13:63:7b:38:94:91:50:1b:61:a8:fb:5e:6a:2b:
85:f5:30:45:28:27:28:cf:02:10:d2:24:a1:32:3d:e6:e9:98:
9c:da:1d:68:dd:c6:7e:bc:88:01:91:75:c3:f1:fe:2a:c8:a9:
ea:e2:3a:b9:0b:8c:82:86:b9:9e:e0:c5:d0:4d:dc:a8:9c:97:
75:24:d1:dc:d5:bf:cc:cd:19:27:a2:e6:10:a0:fc:96:58:8c:
2d:60:70:64:3d:e3:2a:02:8d:85:72:35:be:7d:ab:46:14:d9:
41:45:66:55:c9:12:40:8a:6d:7e:cd:ff:a9:93:5f:72:f3:e8:
59:50:94:9a
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYPHze+5DJYW9UHljp65qpK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDExMTYwODI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDg5NTdjZjVhNDVmZDQ3NGJkYmNkZTk5MjkxNTg2OTZlYjRiMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+nOfrncSpVBM9Dz1D6IWsQgyX7q
tqeivGf0/v+eTfh2W2wVFXrJqTMjQ/I08x0DBFMtRNchKLSji+XwLKCXpCU6X55i
4a3XxPeIGorLj52M2sJ0rudfy7G3PkHdFQ/AwqPr2mv7cDgg+MVfFlaEYMSoclZp
WyzvbfvTS69lkr2FT15aIldUkRiO0xNgfUzMw9HI0IzhaX8miBtEHabxwxKQM5HG
jUEKNikXeaQQttR7Yz6ImtdDgQfZXigQKlAAPU6cPtj0phi5X9osKcOO5XWxS8Tb
FC/y58ZTWgKtWBHIruJ72uHw6av8CU5P+dvyV0ymz+Qp+mScGZam/KLC4QIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFESJV89aRf1HS9vN6ZKRWGlutLAXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggECBggrBgEFBQcBCwSB9TCB8jBCBggrBgEFBQcwBYY2cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1j
YS83MG8GCCsGAQUFBzAKhmNyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9hczIwNzk2MC1ycGtpLWNhLzcvNDQ4OTU3Q0Y1QTQ1RkQ0NzRCREJDREU5
OTI5MTU4Njk2RUI0QjAxNy5tZnQwOwYIKwYBBQUHMA2GL2h0dHBzOi8vcnBraS5h
czIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BT
bzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwQOlMBYEAgACMBAD
BwAgAQZ4D8gDBQMqEfLAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMWdwIDAyxY
MA0GCSqGSIb3DQEBCwUAA4IBAQBQ9YEvCbMhWeyXHCNPjllC5dckKc05TGEf39aU
SSwZ48TmZUk1Xldm0tzz0cPtQr1YoSSdtbV2tmhNw4706f/Kop2duqkv8Iz/z1GN
AX3YTzydRNscbo8ZS2jBtqB/NRCjPYG3HzZsNftOVpnHgLrXtYCmMwHBLMME+3rx
4PjNlVqaE2N7OJSRUBthqPteaiuF9TBFKCcozwIQ0iShMj3m6Zic2h1o3cZ+vIgB
kXXD8f4qyKnq4jq5C4yChrme4MXQTdyonJd1JNHc1b/MzRknouYQoPyWWIwtYHBk
PeMqAo2FcjW+fatGFNlBRWZVyRJAim1+zf+pk19y8+hZUJSa
-----END CERTIFICATE-----
Generated at Sat Feb 22 14:00:04 2025 by rpki-client