Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
File: 34h388VbUo4aKds9eZIGVvDGaus.cer (raw, json)
Hash identifier: 2N0ZAfP0OSIiVlKjKuWHOJBubOdFP4PmKwIyOO3+A90=
Subject key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FAD9A3B4AD59C5E5CB35FEF182A77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21183
AS: 50973
IP: 66.186.194.0/23
IP: 66.186.198.0/23
IP: 79.171.48.0/21
IP: 80.78.64.0/20
IP: 91.132.172.0/22
IP: 94.137.144.0/21
IP: 109.69.0.0/21
IP: 141.98.140.0/22
IP: 185.62.172.0/22
IP: 185.200.212.0/22
IP: 188.172.96.0/20
IP: 217.73.128.0/20
IP: 2a04:eb40::/29
IP: 2a09:ca80::/29
IP: 2a0a:a0c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ad:9a:3b:4a:d5:9c:5e:5c:b3:5f:ef:18:2a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:0a:c0:09:e7:88:b4:68:a9:15:42:40:54:
df:d7:45:95:7a:a7:d5:bc:b4:5c:a0:d2:e0:70:68:
6e:d0:a3:1a:73:f4:c1:e0:fe:33:c3:19:75:27:f2:
f8:6f:21:7c:0f:ae:e1:73:5e:1d:1d:d6:71:de:89:
5a:d5:b7:ea:63:c1:50:52:e4:cb:fd:c5:e1:bc:58:
8e:57:c5:3e:8e:a2:8d:02:8c:d1:33:44:1e:c0:f2:
89:a5:7f:7c:94:ed:97:70:41:10:74:41:95:69:bb:
20:8a:6b:d5:3d:51:b0:67:4e:8c:87:cf:1a:32:1d:
03:fc:10:6e:22:0e:fb:67:b5:44:f9:ff:a7:3d:62:
45:98:53:99:de:6f:a4:0e:70:3f:f1:f8:a8:e8:6f:
78:fb:b1:1c:2e:3f:40:1a:0a:cf:49:fa:a8:c7:78:
90:6f:3a:f4:48:e3:9c:e1:e1:7b:c9:59:8b:34:eb:
ad:b1:4d:77:ec:39:79:f1:fe:2b:84:73:51:7c:5f:
d6:c5:42:89:65:99:7c:fe:39:ac:46:3a:a1:ff:62:
c3:a3:f8:db:09:c9:d1:58:8e:c1:49:73:89:57:5a:
05:5a:98:85:ee:fe:cf:db:4c:74:e2:96:b4:3d:1d:
a6:f9:43:4a:e7:63:1e:72:46:76:40:01:0f:c2:fe:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.186.194.0/23
66.186.198.0/23
79.171.48.0/21
80.78.64.0/20
91.132.172.0/22
94.137.144.0/21
109.69.0.0/21
141.98.140.0/22
185.62.172.0/22
185.200.212.0/22
188.172.96.0/20
217.73.128.0/20
IPv6:
2a04:eb40::/29
2a09:ca80::/29
2a0a:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21183
50973
Signature Algorithm: sha256WithRSAEncryption
aa:2f:08:ba:ef:40:b7:29:68:f0:54:eb:d6:70:e5:b2:c7:40:
33:67:f8:f7:cc:d4:44:18:f7:3f:d6:d9:6c:09:84:3e:73:af:
4f:33:58:09:6c:87:c7:cb:07:11:c3:af:93:5f:f7:6a:ee:eb:
a7:39:b8:b5:b1:cf:74:be:c4:52:7b:d2:da:6e:7e:11:78:42:
09:3f:23:a9:11:4a:56:b7:45:bb:1e:c9:9c:8d:23:f5:64:57:
01:5a:3f:12:15:3e:b2:47:ca:28:30:2f:29:c4:9a:27:28:4f:
9c:ec:49:a7:df:97:61:79:5f:6a:5c:21:ab:f9:e4:9f:96:20:
5c:86:56:74:57:0b:f0:bc:7b:1a:a1:97:36:3f:65:0a:36:43:
11:d0:75:56:b9:87:c6:0a:9f:a1:75:e4:a2:4e:ec:80:a5:24:
e8:06:9c:6e:ad:35:fc:f9:68:8f:26:9b:8a:4a:4e:74:a3:23:
4d:cb:7e:98:cb:bb:ef:e1:0c:c1:bd:f5:35:9a:df:f7:5b:28:
0d:aa:9f:1b:f7:bb:b6:ee:71:f1:4e:77:30:a5:2a:3a:93:d1:
0b:5e:4c:a3:bd:bd:aa:ab:7a:28:f2:8a:b4:6c:ee:9a:dc:1a:
ef:44:e5:5e:54:8c:9d:a0:ac:c3:04:61:54:b8:ba:42:27:85:
89:e6:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net