Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.cer (raw, json)
Hash identifier: MgqfCbM41s7o6up9EISxJ2KSC/j1Xj6SEHy/10hscnI=
Subject key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9236B023AD91A13CBC73EDA2ABF6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31374
IP: 193.200.228.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:23:6b:02:3a:d9:1a:13:cb:c7:3e:da:2a:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:c6:86:79:a2:f7:73:c6:53:67:20:5f:d0:
bd:05:82:8e:41:e0:2b:65:f1:ae:ee:06:a3:fe:f7:
56:e3:f2:b5:9f:2f:ac:8c:09:7d:4f:25:a0:9f:2d:
30:cb:e2:7c:cc:11:02:6a:20:5b:15:41:64:af:9d:
d1:ba:05:5c:85:6e:c2:63:70:84:85:7a:b1:46:11:
07:fa:d9:d2:52:d0:6c:0c:30:d8:e8:25:f3:ae:b1:
b8:e2:61:71:5b:38:f4:ab:af:be:0e:8f:56:77:c4:
5e:a9:18:70:d6:7f:ba:0b:1d:1a:82:39:40:05:29:
80:3d:ea:17:46:ab:b1:f3:12:39:0d:a0:e2:ba:6b:
68:16:de:a3:33:52:fc:05:71:64:0f:89:7b:67:f0:
77:fd:ce:23:93:1f:6e:5f:bb:26:51:63:bb:d2:44:
d5:9d:6f:09:8d:2b:27:bc:11:d8:f5:7f:26:2f:7f:
49:f4:50:10:06:4c:87:7d:2c:ab:1b:38:d4:c6:f4:
4c:f2:f6:a7:a3:89:a5:ee:fc:91:cf:94:f0:0a:a3:
45:2d:74:df:26:0a:e4:75:d2:fa:7b:8e:28:e8:d1:
5a:b9:c9:ab:70:97:7c:7b:52:ee:d9:13:aa:89:2e:
6e:b1:1b:52:8b:d0:8f:0a:95:c0:aa:a5:06:c7:1e:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.228.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31374
Signature Algorithm: sha256WithRSAEncryption
52:74:00:4c:a1:6c:9e:40:74:f9:c4:62:bf:92:2c:a2:77:63:
ed:bd:4f:22:89:9d:8f:89:82:02:3b:35:af:de:ab:f0:ea:c3:
98:f4:fe:3d:81:ec:76:5d:ce:e8:d9:51:64:bf:bd:b9:fb:4a:
65:58:f9:a4:a8:6e:0e:8c:a5:85:1e:7e:58:d1:04:ec:c0:9a:
58:d8:9c:29:56:18:c6:65:fd:bc:5b:1f:23:66:fc:e3:14:93:
64:e9:a9:b4:e9:c7:15:cf:96:f9:3f:79:2c:97:12:98:91:12:
89:07:70:bf:a8:b5:70:64:e2:96:55:2e:b8:e5:77:24:c6:0c:
49:7b:11:b1:87:eb:41:ad:93:fc:7c:57:25:a8:3a:50:84:81:
3c:37:21:c4:17:cf:d3:f1:51:e2:06:ec:24:f4:3c:2b:aa:b8:
a5:18:9a:a6:9e:3a:4c:6c:18:c3:20:08:85:f2:44:32:4c:9e:
a4:8a:e7:ce:8f:d4:d1:5e:eb:ac:28:21:f3:8c:63:27:c9:bc:
5d:7a:72:41:17:f9:c8:c7:37:17:1d:94:5f:db:e3:98:d8:d8:
49:a2:db:5b:bc:2f:45:64:29:f8:31:6c:9d:3d:5d:8b:ac:17:
a8:85:68:5c:3b:e9:ed:b2:10:c8:b2:91:b5:82:be:f0:09:fa:
06:cc:93:df
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQm2SNrAjrZGhPLxz7aKr9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTE4MDQ1Y2ZiZDk2YTM3NmVjOThlM2Y1ZThiMmFmYjE0Y2NhOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtazGhnmi93PGU2cgX9C9BYKOQeAr
ZfGu7gaj/vdW4/K1ny+sjAl9TyWgny0wy+J8zBECaiBbFUFkr53RugVchW7CY3CE
hXqxRhEH+tnSUtBsDDDY6CXzrrG44mFxWzj0q6++Do9Wd8ReqRhw1n+6Cx0agjlA
BSmAPeoXRqux8xI5DaDiumtoFt6jM1L8BXFkD4l7Z/B3/c4jkx9uX7smUWO70kTV
nW8JjSsnvBHY9X8mL39J9FAQBkyHfSyrGzjUxvRM8vano4ml7vyRz5TwCqNFLXTf
JgrkddL6e44o6NFaucmrcJd8e1Lu2ROqiS5usRtSi9CPCpXAqqUGxx77LQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFOUYBFz72Wo3bsmOP16LKvsUzKk8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2RiODI1
OC0yZjE4LTRmNDgtODlhNy1mYzUwNTY2YjExOGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZGI4MjU4
LTJmMTgtNGY0OC04OWE3LWZjNTA1NjZiMTE4Zi8xLzVSZ0VYUHZaYWpkdXlZNF9Y
b3NxLXhUTXFUdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwcjkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnqOMA0GCSqGSIb3DQEBCwUAA4IBAQBSdABMoWyeQHT5xGK/kiyid2PtvU8iiZ2P
iYICOzWv3qvw6sOY9P49gex2Xc7o2VFkv725+0plWPmkqG4OjKWFHn5Y0QTswJpY
2JwpVhjGZf28Wx8jZvzjFJNk6am06ccVz5b5P3kslxKYkRKJB3C/qLVwZOKWVS64
5XckxgxJexGxh+tBrZP8fFclqDpQhIE8NyHEF8/T8VHiBuwk9DwrqrilGJqmnjpM
bBjDIAiF8kQyTJ6kiufOj9TRXuusKCHzjGMnybxdenJBF/nIxzcXHZRf2+OY2NhJ
ottbvC9FZCn4MWydPV2LrBeohWhcO+ntshDIspG1gr7wCfoGzJPf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net