Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.cer (raw, json)
Hash identifier: TmzCjMT7Vic+yC+OndzQr5AcK8BAsGat0PbSJKmXgmY=
Subject key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01943FE7DAE7D95DD77EB1DD35C53FB360EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jan 2025 08:35:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216244
IP: 185.85.72.0/22
IP: 185.160.28.0/22
IP: 2a05:abc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:e7:da:e7:d9:5d:d7:7e:b1:dd:35:c5:3f:b3:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 7 08:35:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:2a:e7:bf:ba:07:30:40:8a:ab:95:59:d2:
70:01:18:d1:d8:77:bf:4c:41:4e:42:00:d3:af:59:
a4:e0:f4:99:0e:7f:a6:22:c0:4e:08:06:a3:6d:33:
42:2d:78:0b:2b:c9:f4:b3:de:b4:30:78:1c:45:00:
08:90:c4:6f:39:a0:8d:78:3b:88:03:ac:94:7f:da:
2b:ee:f6:44:7e:86:6c:1d:13:b8:04:50:78:83:91:
b4:b2:53:ed:5b:e4:92:59:79:76:31:fd:55:5e:bc:
c0:85:69:fb:18:72:d5:97:08:71:15:72:b3:51:27:
62:93:ad:fe:45:e0:b0:d7:30:cf:ec:e0:9f:d9:8c:
be:23:d9:40:61:68:9a:21:65:11:5e:44:46:0e:b6:
e1:46:07:b2:4d:37:75:af:59:83:5d:af:ad:91:e1:
39:fd:e4:2d:16:54:fa:4d:2e:a4:4b:f6:fb:cd:77:
ce:8e:60:92:5c:85:a7:5a:6c:5a:44:08:50:d2:43:
48:92:4e:55:14:36:3d:04:ff:20:89:01:5f:bd:09:
ee:2a:f4:ae:60:60:60:a9:ac:1a:7c:93:c6:1a:77:
bf:a8:af:5d:16:9e:f5:21:c5:b8:17:c0:ba:03:8b:
37:ab:7a:20:23:9f:db:a1:0d:1f:0a:95:42:3c:9c:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.72.0/22
185.160.28.0/22
IPv6:
2a05:abc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216244
Signature Algorithm: sha256WithRSAEncryption
65:09:2a:b1:18:cf:d7:68:63:2e:69:7a:c4:0c:ae:78:14:23:
2d:a5:39:50:1b:81:1d:20:27:8a:6e:8c:bf:02:ac:10:8e:00:
e6:53:66:39:c8:ab:51:bb:ce:b0:8b:0d:c9:98:d0:13:3b:3a:
93:c0:35:d2:da:9c:74:8b:f5:26:ee:36:3a:9e:7f:51:b9:86:
85:9c:77:63:74:68:d6:fe:ca:3c:ef:4a:07:65:c6:23:11:1c:
bc:5a:cc:f5:58:21:c8:aa:2b:fb:8b:96:52:b1:6d:b8:6b:4b:
05:19:f5:c8:0f:4c:a5:7c:bc:03:49:dd:30:b8:b0:53:73:1f:
8e:b4:f9:0e:00:0a:9f:90:78:b2:54:64:81:d9:92:ba:23:09:
9b:4a:5f:48:b6:4f:2a:3d:19:c4:01:10:fe:80:fa:dc:30:11:
0a:d2:20:72:9e:cd:ed:d4:55:d5:e8:8f:8c:eb:50:6b:dc:45:
a1:d1:53:8e:20:5c:93:cc:57:f3:e1:61:4a:19:c0:c7:6b:ed:
3c:a0:56:db:25:b8:18:9c:8c:cf:71:fa:39:67:95:4e:d7:f2:
71:fd:9c:81:57:c5:6e:86:21:6d:8f:58:a4:bc:d1:62:d1:0a:
b5:0f:bc:65:be:69:1d:d3:f9:0b:e7:8c:69:41:52:1f:ec:30:
dd:76:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net