Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.cer (raw, json)
Hash identifier: egZikd4DK/5bM7x0wuwPCAPxlZfObQP7aP0cAoSuhfQ=
Subject key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7D3ABB5E20BB4D14C7CBC8E722267
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59745
AS: 215518
IP: 45.151.92.0/22
IP: 80.66.96.0/20
IP: 185.198.200.0/22
IP: 195.20.20.0/22
IP: 2a0a:8ec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d3:ab:b5:e2:0b:b4:d1:4c:7c:bc:8e:72:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:01:4e:eb:b0:2f:3c:b7:97:39:58:33:94:
d7:a3:fd:ef:08:33:b4:ed:07:c7:10:10:7a:c9:95:
a9:80:c6:7f:74:b2:33:c6:9d:88:32:01:09:55:0e:
14:4c:e0:6e:94:1a:9f:69:64:05:24:6c:e7:b7:45:
55:fd:bf:38:dc:f7:3b:e8:8a:b6:c1:9b:13:bc:ec:
e0:4a:09:a9:eb:79:2f:a9:53:6b:17:6d:9c:06:82:
54:de:25:75:72:b4:92:42:59:cc:52:b5:78:7a:23:
69:88:02:6d:ac:4f:53:b0:b9:56:b5:32:8c:1b:91:
60:58:30:ec:6a:42:40:e0:ab:07:6e:8a:73:40:1d:
24:6f:70:82:95:11:03:d9:82:6d:5c:e4:03:35:5a:
43:ea:06:cd:a4:76:a8:1b:a8:9b:88:d2:d3:f6:a2:
9a:34:91:57:63:9f:e4:33:3f:c7:79:c8:6b:91:3f:
6c:73:bf:ed:2a:ea:da:46:e9:14:4e:ac:74:05:84:
cb:f0:e0:45:c9:bc:e0:95:87:04:17:06:b2:6e:6a:
c1:ad:bc:a8:6f:13:c4:c6:e2:b0:b4:72:e4:ef:0b:
7b:14:78:90:94:fc:a5:bd:4d:f0:6f:07:1c:ca:a7:
8e:1c:4a:ad:d6:ab:8c:5b:67:7b:d7:6b:f1:1b:ad:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a0a:8ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59745
215518
Signature Algorithm: sha256WithRSAEncryption
51:06:73:cf:11:e1:fd:e5:7e:54:2f:c5:e7:1d:95:27:39:91:
1e:b3:3e:66:51:e4:c8:3f:e5:3d:27:14:88:55:1f:2d:7d:b4:
63:56:a4:b0:28:7f:3e:28:27:89:61:0a:a7:3d:a7:37:0b:87:
be:47:9d:0d:9a:fa:95:69:59:de:d9:43:47:dc:64:b7:41:72:
87:78:72:d6:12:a0:c6:2b:69:12:c7:85:4e:83:8d:07:06:31:
a1:44:a5:72:2a:89:38:cf:d3:3c:b5:9c:49:4f:79:07:5d:03:
d7:3a:74:ea:b6:21:b1:65:70:a1:66:32:50:7a:08:a0:26:fd:
91:42:a2:a8:67:d7:40:59:39:43:18:28:b2:bf:f1:ad:66:05:
78:7f:48:e3:8a:ff:7e:91:a8:ac:18:b3:7b:f9:11:b4:40:a1:
29:f2:b8:1f:88:a0:e5:84:8d:f7:ee:6f:37:0e:f8:5f:41:51:
60:c8:39:d4:ca:00:25:ef:57:64:0b:f3:bf:d2:e5:75:1c:d5:
a7:92:02:f2:fd:7b:fc:3a:8d:18:d4:4d:c9:25:39:06:b2:f3:
35:eb:9c:5a:6d:c1:5c:39:a0:c9:dd:81:e6:33:51:ff:b0:fb:
82:ff:d8:ad:f2:be:17:94:13:4b:e5:2b:4a:15:b1:2a:6d:53:
54:c4:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net