Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer (raw, json)
Hash identifier: J/0yylrmPtB8RsI4FXJK9uL9jWl/1eKyM/Ld68Obl1I=
Subject key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B388F08E5DD00174AC224B6897E498
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200424
IP: 45.92.56.0/22
IP: 45.128.240.0/22
IP: 185.107.144.0/22
IP: 2a06:42c0::/29
IP: 2a0e:1ec0::/29
IP: 2a0f:79c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:f0:8e:5d:d0:01:74:ac:22:4b:68:97:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:03:99:29:6d:97:66:1c:7c:3b:ec:18:45:
09:09:cf:ec:3f:cb:72:8c:e3:14:50:15:2a:06:e2:
4a:e3:1d:fa:f1:12:b2:30:50:08:bd:65:5f:a3:45:
8e:ce:df:90:8c:51:66:e8:e8:fc:c0:00:d1:e2:e6:
88:40:21:74:ca:51:7e:5d:26:25:5e:91:95:ca:cb:
2d:22:53:28:66:93:09:d3:68:58:24:c6:f7:34:3b:
ba:d9:72:9b:0f:84:e8:12:93:bc:58:47:29:f5:9f:
85:39:db:9c:bd:37:41:ae:30:ef:6c:95:ec:51:c3:
47:f2:7a:3e:ef:81:6f:5c:89:0a:c7:f6:5e:c5:5e:
65:44:2d:b9:eb:c7:a8:ac:2d:75:84:ad:1c:f6:45:
29:08:a3:5d:69:4b:75:99:50:71:75:e2:bd:09:82:
39:ca:30:55:fa:bb:2c:f9:d3:2e:04:c9:6c:c4:89:
98:76:51:ba:a9:48:72:b4:55:2c:9b:6a:63:f7:cf:
ce:d8:54:c3:30:5f:fa:84:5b:ea:a9:ba:c0:9b:3e:
f0:83:ed:23:1f:8c:be:10:a6:33:c1:b5:5e:b6:10:
87:e5:76:c3:aa:e0:78:bb:e7:49:7b:06:aa:10:64:
df:4b:71:40:76:e1:67:d1:6d:26:3f:36:5d:22:a4:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.56.0/22
45.128.240.0/22
185.107.144.0/22
IPv6:
2a06:42c0::/29
2a0e:1ec0::/29
2a0f:79c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200424
Signature Algorithm: sha256WithRSAEncryption
02:da:dc:54:e5:03:b2:38:51:43:ce:e0:4b:09:d6:b8:5e:34:
66:d7:e8:e3:07:97:3e:2a:be:82:d6:5f:8d:b2:3a:87:c5:ee:
32:5c:ff:74:aa:fa:34:e6:c4:47:c1:98:62:bb:06:7f:7e:17:
4b:d5:28:77:70:80:3a:00:23:7a:57:78:da:7e:76:8c:f2:06:
9d:b6:4e:7c:38:41:5e:c4:3e:50:8f:2c:52:59:0c:28:61:3b:
f9:76:8e:f3:ee:bc:72:86:88:0d:fa:80:0e:28:8d:6e:7e:f3:
0f:db:7b:84:54:03:95:2f:7c:fe:07:88:65:95:ba:7c:ef:b5:
c4:88:df:0f:85:25:35:60:6c:81:f3:ce:4c:6b:e2:ab:5b:7b:
69:e1:7a:67:7d:1b:89:e0:f6:4e:99:ba:d6:51:fc:c4:eb:0e:
54:74:c8:c0:62:36:d1:c3:56:0a:d8:e9:84:b0:9f:60:39:6d:
f8:25:48:dd:12:f5:19:29:53:a5:3e:b0:b7:16:14:05:27:eb:
0b:11:93:71:bc:ae:0a:80:f9:41:cf:17:5e:16:19:c4:ed:2a:
e9:53:4c:27:91:85:b3:0c:7b:dc:96:56:ac:60:26:18:07:70:
4a:33:2d:3b:18:10:30:b5:46:5d:19:c4:fc:bf:43:0d:09:05:
4e:cf:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net