Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer (raw, json)
Hash identifier: Lp8C/xxDRCd2K6QyMJ9ORGaf7jbzf2lkk8ftywy/7wc=
Subject key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A38115355F241FBAA104F5D89284A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206121
IP: 146.19.144.0/24
IP: 178.212.229.0/24
IP: 185.177.100.0/22
IP: 2a0a:2d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:11:53:55:f2:41:fb:aa:10:4f:5d:89:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:b3:e0:dd:44:a8:f6:90:ae:a9:8f:bb:b2:
05:0b:5a:b3:47:50:4e:ea:0a:6f:e3:8e:96:88:8a:
b3:67:0c:14:f5:ad:79:7b:d0:b6:7e:c2:e8:cc:4a:
db:f6:42:f1:db:e1:88:93:24:5c:95:ce:b4:7b:3d:
fa:02:d4:57:de:47:6e:a7:5f:99:b4:a6:c3:5f:10:
4c:3d:2d:0c:6a:a7:6e:a4:b1:d4:2a:b7:49:36:14:
d1:a9:49:d8:74:f6:6f:5f:73:d6:cb:24:e7:38:91:
97:1d:15:9a:dc:92:79:a0:a0:9d:3e:3a:1c:ca:b3:
7a:a7:92:7c:4d:3a:22:d3:a8:83:07:e9:e5:8e:88:
68:34:b5:53:8f:4e:42:2c:af:52:0b:b7:7f:0f:10:
6b:91:47:fb:e8:1e:e0:37:d0:3e:a7:04:c3:af:03:
ef:14:5b:6c:49:1e:de:e4:83:f6:1c:7b:9b:50:c9:
89:96:23:e3:3a:06:a5:b0:af:a9:a1:b6:ca:1a:33:
dd:15:14:fd:ad:19:3e:3c:5f:71:ab:bc:ca:3e:20:
83:42:97:c1:28:a2:7e:90:c1:23:f4:5e:07:75:f9:
9d:6b:52:12:dc:11:64:4c:c2:79:63:51:3d:f5:97:
15:61:86:60:e0:ee:45:67:d2:0b:90:54:2e:93:da:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.144.0/24
178.212.229.0/24
185.177.100.0/22
IPv6:
2a0a:2d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206121
Signature Algorithm: sha256WithRSAEncryption
4c:47:10:6b:89:19:90:be:17:3d:6b:78:be:bf:76:5f:a4:12:
85:a2:55:86:90:39:aa:ea:43:86:2a:0a:08:33:43:f2:08:f3:
db:80:7b:fb:f4:c6:da:0d:b1:7d:a7:e8:1e:9a:25:00:8b:f9:
8a:46:37:eb:7b:4e:31:e2:73:ec:8a:69:bc:58:1d:47:d6:7a:
46:e4:bf:26:b1:b6:57:cb:e8:15:ef:48:ba:0a:23:e7:4b:f4:
07:ea:1e:34:c6:e9:a0:53:61:27:72:40:48:1f:a8:58:69:e7:
e0:82:48:14:59:2a:71:b8:6e:1a:fe:f2:02:1a:e0:e2:b8:fa:
0c:11:00:03:49:40:68:b7:96:54:98:8d:58:90:53:11:12:b2:
4b:13:7c:d1:10:85:8f:1c:a3:1d:dc:f2:0d:3d:ca:42:da:fc:
1d:b1:4e:f5:31:92:ff:ca:01:b8:72:ff:e4:31:7b:f3:96:aa:
90:44:ef:9d:6b:de:9c:a5:6f:64:c5:6e:ff:84:e7:f6:33:f5:
1c:8f:ac:6b:b8:7f:4d:bc:3b:1b:34:7a:5a:a2:e9:b6:85:e6:
41:67:e5:b2:87:02:36:fd:84:b6:6b:6d:21:00:de:25:dc:22:
08:9c:11:6d:9a:78:10:e8:ab:65:f0:94:e3:35:2a:1b:47:70:
46:73:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net