Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-SxH9UB1o3PY4MEWl67JAkQ3beM.cer
File: 1-SxH9UB1o3PY4MEWl67JAkQ3beM.cer (raw, json)
Hash identifier: x5aHA7a7TiG0IQg1f35GTaW0BfVV9JGuEcDwHehlZ/M=
Subject key identifier: F9:2C:47:F5:40:75:A3:73:D8:E0:C1:16:97:AE:C9:02:44:37:6D:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC16CF4DC37A1E8F9498F57B609D90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/1-SxH9UB1o3PY4MEWl67JAkQ3beM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42295
IP: 195.191.34.0/23
IP: 2001:67c:530::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:16:cf:4d:c3:7a:1e:8f:94:98:f5:7b:60:9d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f92c47f54075a373d8e0c11697aec90244376de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:89:1b:68:95:25:29:c0:05:ec:6f:f7:66:
7a:38:82:07:a2:89:47:86:6e:6a:76:bb:0b:ed:b9:
2e:b0:b5:7c:17:e6:cf:b9:76:62:f5:e6:e1:db:e9:
7b:65:15:ce:73:5a:47:9e:cf:f5:d9:b4:94:3f:bb:
30:43:42:5d:55:2d:14:bb:ff:c7:90:1a:82:d3:25:
4e:32:25:26:7f:94:53:2d:fc:73:a2:31:a2:c3:ec:
3b:52:3c:97:74:4c:d5:b0:6a:65:1d:a0:0a:b4:85:
ec:45:93:48:88:be:60:83:15:c8:51:88:fb:25:80:
7a:03:5a:ea:52:6a:30:4f:9e:bd:dd:10:5c:44:41:
66:93:f4:00:a6:65:04:15:4d:2e:44:b1:7b:1c:30:
54:44:51:ab:bc:a7:3a:92:54:8b:a4:7f:73:8d:60:
1d:d2:c4:34:56:ab:93:82:71:c3:98:36:a6:95:28:
d9:42:da:ac:2f:b0:01:2d:4c:eb:45:76:ad:67:3a:
4a:05:28:95:e7:89:e8:03:8b:f2:b2:f1:6e:0d:b5:
78:5f:bb:89:5b:46:03:93:79:92:46:5c:87:f0:e6:
36:56:23:2f:26:24:3e:76:a1:5d:35:b4:d0:94:ac:
c4:96:69:ec:13:10:6c:8b:9f:be:2d:25:2a:05:01:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:47:F5:40:75:A3:73:D8:E0:C1:16:97:AE:C9:02:44:37:6D:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/1-SxH9UB1o3PY4MEWl67JAkQ3beM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.34.0/23
IPv6:
2001:67c:530::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42295
Signature Algorithm: sha256WithRSAEncryption
58:6f:22:05:1e:b8:69:0a:08:90:04:d6:27:3e:ea:4e:db:15:
e2:2b:87:98:3f:ad:e7:ac:a6:dc:63:79:47:32:00:c8:a3:63:
9f:75:e0:b0:97:37:c9:9a:78:42:fa:c3:9b:74:40:b5:a0:32:
09:6e:00:29:0c:32:f0:2c:56:7d:14:6b:02:bd:0b:a8:0b:97:
21:6b:48:13:01:de:f4:30:88:4b:f7:90:53:2a:04:2f:e9:4e:
5b:51:4b:3c:23:3f:b6:d0:08:71:b2:fa:e3:7a:53:88:cb:44:
5b:c8:a9:76:57:87:95:3b:18:09:67:93:71:de:d0:9c:ba:d0:
f7:a1:af:c2:dc:11:7a:12:9e:65:3d:4b:86:4a:cb:68:47:55:
71:6b:6c:18:63:5e:22:6b:41:75:62:b4:cd:13:fe:e7:2c:a1:
31:a9:65:0f:bf:93:65:db:81:2e:b7:f0:fc:37:e9:eb:0c:9e:
06:ef:be:f0:49:09:52:ce:6a:0c:d1:8f:f2:2b:a1:ef:06:91:
38:0f:53:1d:9c:aa:67:a6:a4:50:97:64:32:a0:b4:9c:b2:c6:
0b:00:5f:ed:d2:e3:1d:16:70:b4:78:e4:51:0e:a0:0d:22:67:
a2:b0:59:40:58:2f:58:fc:5a:f5:b6:a3:ef:01:aa:c0:54:16:
4c:35:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net