Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.cer (raw, json)
Hash identifier: shHwAHXI9NU9FIxIszZDgtCvaLtQ25+jqVp8XMETkjs=
Subject key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC5C33BF4773E1EF0E1E17DD7FC367
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39276
IP: 195.238.90.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5c:33:bf:47:73:e1:ef:0e:1e:17:dd:7f:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:22:7a:d0:67:de:45:69:5e:23:93:ea:e2:
db:eb:8b:57:a8:41:7a:4b:c0:7e:c8:8f:d7:03:f0:
3e:b0:41:f5:43:79:2e:c6:3a:5f:53:fa:1a:5c:5b:
72:98:84:21:a7:da:a0:c2:9a:2f:90:5e:39:7c:37:
1b:75:c6:c3:2c:ce:bf:64:d7:d4:3b:f5:8e:94:2d:
01:1f:af:a7:40:a1:66:98:82:40:6d:86:18:6d:90:
3d:57:f1:03:4f:c7:52:89:e7:a6:92:21:9d:8a:82:
56:bf:ed:f3:5d:52:3f:0d:c7:62:70:22:5d:81:cb:
37:7d:e7:12:f7:8f:5a:b1:6c:ad:0f:4b:ec:d6:84:
e1:a0:4a:7f:47:ee:78:18:1b:f6:38:08:f2:87:2d:
d0:f7:e9:ef:54:d6:b7:e0:f8:e6:11:77:95:4a:66:
6f:f8:de:57:3e:22:de:04:c6:30:17:e5:d8:87:ee:
f8:ba:49:14:dc:43:c7:e8:a5:4b:ca:78:18:a6:87:
1d:60:87:f5:7b:76:c6:41:5d:db:5c:58:91:a2:e5:
fa:1c:4b:d5:56:d9:a0:12:f4:2a:1c:9b:d9:42:51:
b7:51:bb:53:86:bc:0a:f2:14:62:10:1c:cd:25:b9:
77:19:80:d2:57:d3:86:5c:a5:2d:3a:0b:4a:5e:60:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.90.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39276
Signature Algorithm: sha256WithRSAEncryption
26:88:88:6c:16:6b:cc:a9:5a:ea:df:5e:b6:d7:71:62:82:f2:
77:2e:b4:7c:bf:c4:3d:47:26:1e:42:43:92:32:0d:ef:95:a1:
13:d4:bc:54:22:af:dd:76:5b:4f:71:4d:cb:ff:66:ca:22:36:
85:44:a4:a2:91:f0:70:19:b1:de:69:24:9a:e7:7f:f1:23:eb:
bb:f8:7e:db:42:d7:9b:1b:9f:d1:0a:35:25:48:49:f9:fc:26:
38:cb:43:6a:58:b3:8c:44:ef:8e:7e:71:e8:ef:a5:87:db:7b:
c9:fe:18:11:e9:06:81:0e:47:86:73:09:db:4e:33:1a:64:32:
bd:9b:51:b3:39:25:bc:8d:e7:d3:0b:56:f0:a2:21:9a:44:2e:
a9:32:5a:be:99:9b:98:0b:12:f2:86:17:3d:8c:79:cc:17:05:
76:99:62:7b:c6:d7:bb:cd:1e:87:9c:d7:1c:16:11:ba:dd:7e:
f6:f5:b6:dd:72:b5:e7:25:6e:11:87:3a:43:25:4f:62:25:f9:
55:b1:59:37:3b:4f:c8:14:f7:cc:7e:25:eb:a1:4a:1c:db:b5:
b7:cf:f2:40:86:d2:cc:9a:97:bc:69:96:d1:48:e6:56:97:7a:
83:ab:7f:c2:24:f7:09:67:d7:6c:72:cf:0e:02:d4:cc:e8:fd:
0f:ec:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net