Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
File: fsZaHc-CJefxC-IN3eHiFugAtnw.cer (raw, json)
Hash identifier: q0i81NQgUAxozl2+KDBvKDxyUM09MRBumMsOxS+VUZo=
Subject key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B4F6E54A6704C66BB36A01B18E76F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.11.128.0/17
IP: 5.24.0.0/14
IP: 31.140.0.0/14
IP: 77.67.128.0/17
IP: 86.108.128.0/17
IP: 141.196.0.0/16
IP: 176.89.0.0 -- 176.91.255.255
IP: 176.227.0.0/17
IP: 176.237.0.0 -- 176.239.255.255
IP: 178.240.0.0/13
IP: 188.56.0.0/14
IP: 213.43.0.0/16
IP: 2a02:4e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4f:6e:54:a6:70:4c:66:bb:36:a0:1b:18:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:85:a9:e3:f8:e6:2a:8e:51:aa:b9:a0:c7:
36:5b:50:b4:ca:0d:66:21:0b:5e:e7:b1:90:77:36:
26:64:8a:f1:a8:40:ef:c8:c4:fd:c1:7c:72:66:a0:
a1:44:14:45:bb:92:c9:07:b0:b4:65:43:cd:8e:df:
89:46:8e:21:b1:b6:97:42:a0:61:06:cc:bb:3b:d9:
ab:b6:1f:d7:6c:e6:f8:8b:15:cf:f1:9a:c5:c3:ca:
d7:ea:d7:41:cc:e2:68:b5:ba:de:24:6f:f2:e5:44:
c4:cd:59:29:d3:3b:92:2b:24:14:47:93:ff:3a:2f:
55:9e:a2:bd:e5:b3:4b:8a:17:ef:03:72:58:f7:0e:
b9:f9:fc:ce:3d:dc:da:bf:0d:b5:06:ec:fb:cf:eb:
74:a7:1e:b6:15:e1:da:56:f5:49:2a:60:a1:4c:c3:
c0:6d:d6:8e:54:38:34:4c:0e:1b:e4:ed:b1:d0:71:
a8:2b:4d:5a:0a:dd:a1:8c:88:8f:22:e1:6a:ea:2a:
43:bb:aa:9b:16:0d:f5:2d:51:c7:42:dd:62:99:ec:
00:d6:7d:58:5c:91:f9:71:f4:d0:71:c1:46:3f:fc:
ec:df:9b:f2:1c:86:cf:17:1d:31:41:87:ce:6b:b8:
97:b2:74:f6:54:9d:8a:51:dc:ed:6e:4c:58:d5:1b:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.128.0/17
5.24.0.0/14
31.140.0.0/14
77.67.128.0/17
86.108.128.0/17
141.196.0.0/16
176.89.0.0-176.91.255.255
176.227.0.0/17
176.237.0.0-176.239.255.255
178.240.0.0/13
188.56.0.0/14
213.43.0.0/16
IPv6:
2a02:4e0::/32
Signature Algorithm: sha256WithRSAEncryption
02:79:39:c6:5f:ec:ca:7e:63:e5:25:a5:4d:2c:7b:4d:ad:31:
ae:ca:e4:34:b6:5c:b3:92:3b:fb:a1:2a:52:8a:98:fd:fd:a9:
bd:02:4c:d3:46:7e:f9:6a:2e:ff:3c:c7:04:10:b7:21:45:1d:
d5:4d:a9:13:1b:4d:82:41:9b:ca:9e:42:1e:06:05:49:3e:4a:
c8:4b:f1:e4:eb:5f:a4:70:40:9c:b8:4f:52:2f:46:47:66:c3:
0a:66:ec:d6:1b:4d:a5:a7:ee:bf:35:17:58:3f:c7:c4:4b:23:
c0:ca:c8:59:16:d3:5d:4b:5b:03:82:69:1e:80:57:36:fc:64:
37:f2:5c:33:7e:c1:6c:6b:b5:aa:32:7e:0d:9a:5c:da:0f:1f:
1a:0f:11:9a:42:e6:6b:f1:6e:c0:92:b9:25:14:0c:96:7a:ed:
bc:81:e7:34:2e:7a:f1:7c:07:57:4a:b5:12:fa:76:b9:d8:3f:
8f:a5:aa:e5:4d:c8:42:fd:59:aa:71:a2:02:8e:37:85:66:9a:
1b:89:7b:40:4c:d8:88:32:01:81:fc:74:95:0e:db:20:d7:fd:
b5:60:e7:8a:ec:3d:71:d5:51:bc:07:16:83:d7:71:29:96:6e:
7b:a0:c9:99:44:55:a6:89:c8:5b:17:34:30:43:f5:19:11:7f:
dd:7f:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:14:15 2025 by rpki-client