Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer (raw, json)
Hash identifier: LUwonWIv9J6DFgxYDoxaeEZSIelWvw1GhM/ZnKi7O9c=
Subject key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747E9CC48FB238D856D73D041697E0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28854
IP: 80.84.32.0/20
IP: 88.206.128.0/17
IP: 185.60.128.0/22
IP: 2a04:f40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e9:cc:48:fb:23:8d:85:6d:73:d0:41:69:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:d1:da:af:52:5f:8b:62:d2:b4:73:1f:6d:
2d:a5:ff:51:fd:89:7f:8d:6d:8d:5c:02:76:68:19:
44:15:5e:57:7d:49:08:a5:a8:dc:a5:34:cc:30:3d:
28:34:34:5f:f1:25:c6:18:1e:ab:0d:1b:78:68:e7:
f2:cf:33:bf:b5:c7:e6:3d:11:d5:a4:71:b8:53:5e:
d1:17:7a:2d:69:b0:b5:0f:70:56:f3:08:ec:66:68:
04:ec:6a:e7:24:6a:7c:d1:87:19:fc:a7:3d:30:f7:
35:61:e1:34:2c:de:17:0f:62:bb:9c:00:cd:a2:0c:
59:d0:e8:c5:53:56:0a:12:11:7b:cb:46:e3:b7:02:
a6:e1:ee:e3:40:c3:26:72:2a:02:5b:06:b4:4e:bb:
54:e6:7a:08:5d:e0:a9:a0:32:8a:ea:6f:31:07:25:
a6:2f:80:dc:4c:4c:3d:f3:a7:c8:a3:42:ab:c6:a0:
90:b3:16:be:bf:0b:d3:01:58:2b:83:38:cd:4a:77:
62:4f:08:de:92:d3:9f:12:f5:ae:1f:2c:5c:ca:35:
92:e7:49:2b:da:57:37:0c:23:19:8c:f0:03:b8:d7:
87:35:e9:26:9f:b7:7f:91:bf:91:ad:18:95:89:ce:
8a:84:60:1c:66:93:6f:54:ce:56:23:cd:9a:87:bf:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.32.0/20
88.206.128.0/17
185.60.128.0/22
IPv6:
2a04:f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28854
Signature Algorithm: sha256WithRSAEncryption
2b:51:1f:35:4f:4c:34:f4:f3:8c:34:b3:b3:30:da:3c:3a:1f:
f9:98:08:a5:14:4b:3b:26:30:6f:08:0a:1c:fb:50:52:4e:99:
71:7c:a5:cc:fc:4c:30:79:6a:c0:80:0a:93:e3:a1:ca:26:1c:
a2:17:57:28:2e:1e:b9:68:85:55:7c:6c:4b:c2:cc:ee:07:5d:
f7:87:ee:cc:67:9e:60:cc:f8:8b:28:01:18:eb:ce:e9:48:25:
ca:e3:dc:41:8b:f6:92:09:84:93:46:1e:19:61:0a:6a:e6:32:
1a:6f:6b:0b:13:df:6f:62:b5:85:a0:4c:3f:33:c4:75:73:5a:
f4:2e:ec:ad:ba:7a:2d:f0:96:5e:9b:f0:99:69:9e:0f:d2:4c:
b8:b7:9a:a7:57:d9:84:54:a6:c7:07:cf:6c:79:a1:20:69:61:
cd:24:75:f8:f2:98:26:a4:2d:a7:6c:8a:55:85:32:53:4d:f7:
3c:c3:d0:5d:b8:92:d0:f6:a4:b4:c9:92:ce:72:c8:eb:b2:32:
74:cc:60:f2:c5:d5:76:21:e6:96:80:83:21:31:ae:76:c7:55:
3f:a7:5f:f3:82:68:d2:48:f7:c1:ab:ba:01:2c:07:4f:51:4f:
02:e1:77:14:2c:a1:02:65:03:07:06:85:0a:fc:ae:d3:42:40:
27:ae:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:59 2025 by rpki-client on console.sobornost.net