Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v_7g5WDoax4c7WbvIPTalj3O7lg.cer
File: v_7g5WDoax4c7WbvIPTalj3O7lg.cer (raw, json)
Hash identifier: XpEvQNtyFcixkM75L81rTawhw2+d8bYuM4fxxBVuJgQ=
Subject key identifier: BF:FE:E0:E5:60:E8:6B:1E:1C:ED:66:EF:20:F4:DA:96:3D:CE:EE:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018312799DE77E0281665EE412686D502FEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/BFFEE0E560E86B1E1CED66EF20F4DA963DCEEE58.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:05:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208051
IP: 2001:678:b34::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:9d:e7:7e:02:81:66:5e:e4:12:68:6d:50:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bffee0e560e86b1e1ced66ef20f4da963dceee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:34:64:a3:b0:43:f7:fd:87:fb:67:eb:3c:
23:59:c3:12:76:16:53:e1:13:06:62:33:8e:2d:76:
79:e5:84:af:da:01:c9:e2:45:cf:53:2e:0b:fb:27:
39:45:fd:d9:94:8d:13:4c:54:04:ee:d2:4a:71:0e:
e9:9c:ae:d4:c4:7f:07:69:52:48:bf:73:91:80:89:
fd:82:55:39:33:4f:c1:13:74:8b:02:d7:48:2a:98:
e6:01:b2:b3:7a:5a:1e:16:ea:a2:91:49:04:37:ec:
c0:80:4c:e3:37:4a:44:d3:da:c5:35:e1:33:5c:1d:
8b:08:3a:9c:d8:b0:57:be:7b:83:3f:d4:b2:66:76:
77:9c:64:34:30:1d:68:be:06:df:cd:6b:31:f7:58:
f8:60:fc:49:9d:5b:31:61:2f:e3:a5:36:18:06:7e:
01:53:1f:e8:48:b2:20:e8:7e:7c:bb:d0:3f:ec:58:
16:30:82:35:9f:ab:38:e0:18:43:de:c9:d1:c5:77:
27:d5:47:27:5f:22:68:49:5c:f5:dd:d4:09:3c:09:
17:59:a2:2a:e0:bd:04:80:f9:90:71:22:1c:80:0e:
42:53:b6:ec:88:f7:8e:77:e6:5e:54:66:41:78:bb:
1f:fe:ca:4e:9c:4d:79:c5:91:1e:11:7b:92:9a:cc:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:E0:E5:60:E8:6B:1E:1C:ED:66:EF:20:F4:DA:96:3D:CE:EE:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/BFFEE0E560E86B1E1CED66EF20F4DA963DCEEE58.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208051
Signature Algorithm: sha256WithRSAEncryption
0a:64:03:38:30:86:7d:db:ec:bf:6c:c5:9c:fe:e7:d4:86:28:
36:43:6c:e1:d6:13:81:ea:66:a5:4f:78:5e:9e:98:84:f2:de:
3f:31:43:8d:13:df:5e:3c:bd:81:70:18:f4:38:32:4a:2b:6a:
56:db:cf:05:83:58:10:7c:cd:7b:50:9e:e0:cf:1c:30:a2:b9:
43:76:d5:78:91:6e:81:a9:81:8a:51:2d:bd:bd:63:3f:ad:b4:
71:92:91:e9:48:89:f6:c4:61:b2:f1:6c:f7:c3:c0:48:47:90:
a5:95:3a:af:c5:23:11:8e:80:a6:2c:3b:9b:08:d0:b7:ec:dc:
62:a4:43:a5:a4:42:d3:7b:46:ec:67:7f:46:ac:01:57:cf:e1:
c3:f6:86:06:11:fb:56:d5:23:a6:2c:56:3f:2b:86:03:8e:75:
67:85:ea:fa:85:26:dd:75:31:48:84:6c:79:7f:aa:0c:70:9a:
67:42:2f:d8:20:ca:9d:d9:94:b7:9e:fe:d5:7d:bf:0f:46:6e:
2f:e6:59:57:23:c3:d9:80:f6:01:af:b9:b0:2c:06:ad:a7:f1:
f5:f0:25:b0:48:09:0f:36:c3:8d:12:55:2d:bf:c8:67:fa:5d:
76:6d:ab:a7:aa:ce:e2:16:a1:4c:64:33:86:b7:00:c9:b7:fe:
a0:0e:c8:bc
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYMSeZ3nfgKBZl7kEmhtUC/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTA2MTEwNTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZlZTBlNTYwZTg2YjFlMWNlZDY2ZWYyMGY0ZGE5NjNkY2VlZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn40ZKOwQ/f9h/tn6zwjWcMSdhZT
4RMGYjOOLXZ55YSv2gHJ4kXPUy4L+yc5Rf3ZlI0TTFQE7tJKcQ7pnK7UxH8HaVJI
v3ORgIn9glU5M0/BE3SLAtdIKpjmAbKzeloeFuqikUkEN+zAgEzjN0pE09rFNeEz
XB2LCDqc2LBXvnuDP9SyZnZ3nGQ0MB1ovgbfzWsx91j4YPxJnVsxYS/jpTYYBn4B
Ux/oSLIg6H58u9A/7FgWMII1n6s44BhD3snRxXcn1UcnXyJoSVz13dQJPAkXWaIq
4L0EgPmQcSIcgA5CU7bsiPeOd+ZeVGZBeLsf/spOnE15xZEeEXuSmsxQ8wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL/+4OVg6GseHO1m7yD02pY9zu5YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEEBggrBgEFBQcBCwSB9zCB9DBDBggrBgEFBQcwBYY3cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1j
YS8xMDBwBggrBgEFBQcwCoZkcnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0
L3JlcG8vYXMyMDc5NjAtcnBraS1jYS8xMC9CRkZFRTBFNTYwRTg2QjFFMUNFRDY2
RUYyMEY0REE5NjNEQ0VFRTU4Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9ycGtp
LmFzMjA3OTYwLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBO
oEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9L
cFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ4CzQwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAyyzMA0GCSqGSIb3DQEBCwUAA4IBAQAKZAM4
MIZ92+y/bMWc/ufUhig2Q2zh1hOB6malT3henpiE8t4/MUONE99ePL2BcBj0ODJK
K2pW288Fg1gQfM17UJ7gzxwworlDdtV4kW6BqYGKUS29vWM/rbRxkpHpSIn2xGGy
8Wz3w8BIR5CllTqvxSMRjoCmLDubCNC37NxipEOlpELTe0bsZ39GrAFXz+HD9oYG
EftW1SOmLFY/K4YDjnVnher6hSbddTFIhGx5f6oMcJpnQi/YIMqd2ZS3nv7Vfb8P
Rm4v5llXI8PZgPYBr7mwLAatp/H18CWwSAkPNsONElUtv8hn+l12baunqs7iFqFM
ZDOGtwDJt/6gDsi8
-----END CERTIFICATE-----
Generated at Sat Feb 22 13:57:17 2025 by rpki-client