Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
File: 4C15LJfb1EguuBXMmk-59Uevegk.cer (raw, json)
Hash identifier: sNcoATsDmRQ2k/4dJESm24vW5Tto2voT9zGIEfabw6g=
Subject key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427483F4C129FCB6383CDCBBF8970198F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210309
IP: 109.73.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3f:4c:12:9f:cb:63:83:cd:cb:bf:89:70:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:75:a1:5a:ca:82:4e:d7:24:9f:2f:aa:a6:
c1:e4:3a:1d:a9:80:98:87:6b:0d:ca:3b:6e:8d:90:
eb:74:f3:0a:ab:d4:73:07:19:1d:ff:c7:b1:3d:6f:
46:3f:88:45:00:e3:b8:7d:e3:d1:51:03:1d:64:ad:
17:03:39:f4:4c:e1:76:c0:26:cc:4c:24:14:2d:a3:
ee:9d:05:0d:34:07:9f:21:83:cd:90:93:7b:46:ef:
bc:bf:2e:4e:8b:4e:89:46:45:1b:2b:08:93:31:40:
a8:16:87:11:9c:59:75:a4:43:72:b8:c5:31:b2:6c:
f2:83:20:b7:6b:b0:2c:09:97:64:c2:fc:15:79:f2:
d5:b3:1a:34:fc:9e:3d:b3:d4:2e:4a:92:78:cc:71:
68:52:3f:52:b6:07:df:40:c2:ea:64:97:71:70:61:
d5:c9:40:64:22:5f:4d:86:b7:74:6f:67:9c:f8:1a:
c1:e1:f9:5b:bc:ec:7d:cf:8f:f4:41:1e:5a:6f:7b:
c9:a7:7d:d3:46:3f:cd:a0:3d:15:81:f8:2e:d6:ac:
81:de:91:4f:7e:51:b7:4c:64:34:b3:c3:43:ba:9c:
72:7a:e6:9c:71:b6:5a:26:62:aa:4a:5e:ad:6e:4d:
4d:cd:45:b0:05:af:2d:7e:36:aa:b6:38:8c:6f:15:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210309
Signature Algorithm: sha256WithRSAEncryption
8e:eb:45:30:36:3e:88:60:d9:41:61:79:bc:8d:25:41:02:e5:
ea:55:7c:bc:6e:69:d8:ec:b8:85:0b:b8:20:3a:83:c1:f8:6d:
2f:66:8b:c3:e7:03:3b:fa:0d:44:f9:4d:23:a6:35:c0:12:7d:
ef:e5:4d:d4:a1:be:a2:01:17:32:09:7b:d7:30:92:91:d8:01:
59:6a:b3:cc:ef:85:01:de:8f:29:dd:df:59:d4:14:95:ef:5d:
0c:fb:86:02:26:2d:95:6f:f2:51:13:d2:c8:67:f9:d0:dd:49:
69:1c:41:20:9e:88:fd:22:f3:e4:78:b3:5c:f1:11:37:25:d6:
c6:8b:19:2e:b0:00:74:69:e1:70:bc:90:b3:7d:fe:42:7d:cc:
f5:d8:65:3b:58:aa:68:e7:8b:41:25:62:04:0e:d4:a4:96:c0:
02:6c:65:4e:e6:e6:91:de:57:52:8c:b4:6f:2c:46:0f:7f:6d:
d1:7d:a9:90:3a:5c:5b:b8:58:9b:d5:45:7b:14:6e:d8:95:27:
3c:64:4f:f7:88:08:3e:57:3a:fb:f5:9f:b6:32:01:17:ef:44:
28:3f:3e:82:2a:61:15:2a:8f:a7:22:5b:ba:11:19:f4:19:07:
6a:59:95:d4:a4:bb:0d:c0:39:8f:32:fd:28:fe:d2:a2:a9:53:
c5:53:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:03 2025 by rpki-client on console.sobornost.net