Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.cer (raw, json)
Hash identifier: rzJKibTIsihUqDGSNDDWz2PqBfjxg8fNrZXQvzymfRY=
Subject key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1C7C71B59ADF4463BA63D74268D46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49273
IP: 45.153.60.0 -- 45.153.67.255
IP: 185.208.176.0/22
IP: 188.113.192.0/18
IP: 2a02:f7c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c7:c7:1b:59:ad:f4:46:3b:a6:3d:74:26:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:81:00:af:ce:8f:fd:f7:f0:c4:37:25:7f:
17:34:21:77:9b:00:38:b0:68:bf:b2:80:8e:dc:c8:
e8:82:13:6d:01:ef:9f:22:c7:e0:b9:19:d3:b9:01:
63:e3:d3:98:3d:5c:8b:e6:ec:e4:64:ad:a3:98:22:
af:ca:12:a3:2f:62:36:e9:5c:03:f1:bf:56:f8:1a:
42:f3:b8:a5:51:39:e1:4a:54:bd:6a:0e:37:47:e2:
ce:f6:82:ff:22:2b:e6:b8:e7:a2:15:e8:a5:8e:53:
e3:aa:05:3d:dc:1c:6b:8e:0e:cc:0f:0a:64:57:b8:
ae:fd:e4:5a:36:cb:ec:a0:cb:80:7c:5d:67:ec:86:
b2:df:ef:17:82:fe:9d:34:e8:5f:7e:75:de:8a:ef:
81:7d:ad:e7:49:1e:2e:5a:bf:95:f5:73:ac:03:df:
5a:e3:f4:ba:b6:8a:69:ee:90:2a:28:bd:9f:77:ee:
7a:c8:b8:5d:ea:33:48:f4:98:f2:49:d7:0a:02:93:
ff:b4:16:d6:f2:ac:0e:3b:e4:f2:de:c8:2d:8e:5b:
89:b3:6d:f2:c0:e3:00:21:8e:b1:0d:f5:4d:08:c5:
54:f7:c3:88:97:04:8f:33:ac:25:17:b0:98:ca:c2:
1a:1d:2e:68:d0:e2:32:b6:fc:f3:8a:82:c6:cc:fb:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.60.0-45.153.67.255
185.208.176.0/22
188.113.192.0/18
IPv6:
2a02:f7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49273
Signature Algorithm: sha256WithRSAEncryption
99:dc:06:45:04:b3:49:62:64:c8:26:29:7f:05:83:e4:b4:d5:
a8:8e:db:6b:a8:a6:ca:80:48:89:ec:ce:31:47:f3:cb:08:80:
63:be:fc:16:43:27:79:be:63:ab:94:2d:67:17:f2:98:5f:78:
20:eb:48:2c:d4:43:62:cb:31:75:aa:59:22:d4:fd:ff:42:46:
24:ee:80:c9:17:00:88:8a:9b:4e:a4:81:04:a7:ac:17:a9:79:
64:dc:06:25:04:4f:54:fc:96:5a:75:63:98:f5:25:68:1f:66:
18:8b:74:c2:31:a5:03:99:db:c3:31:a5:84:9c:c6:50:d9:8d:
9f:0d:77:73:87:fd:8b:6d:f6:fd:05:2b:f6:cb:95:5a:24:88:
fb:2a:72:36:fb:95:a6:d8:3e:11:13:8f:86:e0:7c:26:0c:73:
80:3c:57:7d:d6:58:66:4f:e7:b7:7e:a6:91:17:b6:2f:e7:b5:
3e:21:e1:9d:35:ac:2a:c8:3f:77:b6:4b:f4:f3:30:25:96:34:
36:5f:c7:0d:2d:c5:b4:d8:ef:2c:c8:e4:bf:0f:c9:6b:7f:f6:
54:81:f8:cd:cc:e0:64:43:59:e0:ac:10:aa:fb:29:24:63:e2:
19:57:4d:31:07:94:5a:5d:f2:c6:71:1c:ac:74:e2:ae:6f:95:
df:0f:c4:69
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZQhscfHG1mt9EY7pj10Jo1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTY1MjVkZTRhYTZkMGNhMWFlN2JkOGVlMWUzNWJmZDI2OTY0OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1leBAK/Oj/338MQ3JX8XNCF3mwA4
sGi/soCO3MjoghNtAe+fIsfguRnTuQFj49OYPVyL5uzkZK2jmCKvyhKjL2I26VwD
8b9W+BpC87ilUTnhSlS9ag43R+LO9oL/IivmuOeiFeiljlPjqgU93Bxrjg7MDwpk
V7iu/eRaNsvsoMuAfF1n7Iay3+8Xgv6dNOhffnXeiu+Bfa3nSR4uWr+V9XOsA99a
4/S6topp7pAqKL2fd+56yLhd6jNI9JjySdcKApP/tBbW8qwOO+Ty3sgtjluJs23y
wOMAIY6xDfVNCMVU98OIlwSPM6wlF7CYysIaHS5o0OIytvzzioLGzPugMwIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFNplJd5KptDKGue9juHjW/0mlkm7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2FjNTY3
ZC00NmQyLTQwODEtOTRlZi1lZWRmNzYwNzdmMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvYWM1Njdk
LTQ2ZDItNDA4MS05NGVmLWVlZGY3NjA3N2YwOS8xLzJtVWwza3FtME1vYTU3Mk80
ZU5iX1NhV1Nicy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaMAwDBAItmTwDBAItmUADBAK50LADBAa8ccAwDQQC
AAIwBwMFAyoC98AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMB5MA0GCSqGSIb3
DQEBCwUAA4IBAQCZ3AZFBLNJYmTIJil/BYPktNWojttrqKbKgEiJ7M4xR/PLCIBj
vvwWQyd5vmOrlC1nF/KYX3gg60gs1ENiyzF1qlki1P3/QkYk7oDJFwCIiptOpIEE
p6wXqXlk3AYlBE9U/JZadWOY9SVoH2YYi3TCMaUDmdvDMaWEnMZQ2Y2fDXdzh/2L
bfb9BSv2y5VaJIj7KnI2+5Wm2D4RE4+G4HwmDHOAPFd91lhmT+e3fqaRF7Yv57U+
IeGdNawqyD93tkv08zAlljQ2X8cNLcW02O8syOS/D8lrf/ZUgfjNzOBkQ1ngrBCq
+ykkY+IZV00xB5RaXfLGcRysdOKub5XfD8Rp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net