Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.cer (raw, json)
Hash identifier: XU4JkjE3AB/SX9Wy2BRTVpTzsYdNqPbXZTv1ndiqESM=
Subject key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE2B1E335AA57E88AB2ECF58F4BC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.17.206.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:b1:e3:35:aa:57:e8:8a:b2:ec:f5:8f:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:b8:63:f0:c8:09:c6:fe:04:e9:8e:44:f7:
ef:0b:b3:fe:71:64:12:d3:8e:b8:0c:f8:f5:13:83:
21:45:e9:c8:67:d9:10:cc:08:1a:40:3e:b5:cf:e4:
8b:b5:ed:92:d0:f0:42:0c:7f:05:81:75:35:e2:c0:
0c:a3:20:25:ec:4d:f6:69:5a:e1:da:f7:7e:08:d8:
f3:da:47:85:46:c1:1d:0a:89:6e:46:d4:4b:85:2e:
29:79:f5:69:2e:a6:b4:bc:2d:f1:52:d4:03:4a:fd:
ab:5d:2b:39:1a:36:71:ee:7e:bb:4e:02:e4:55:ef:
9f:01:fd:1f:b9:d1:91:ea:9e:4e:cb:ca:34:82:35:
e9:a3:8a:d1:ef:7e:b3:18:31:ea:fe:56:cb:bb:9e:
32:94:98:e5:f1:30:0e:92:f3:1a:f7:93:3d:8e:2b:
0a:91:97:f9:b6:b6:9b:3e:67:74:29:1d:76:60:bd:
8d:dd:3f:65:af:8b:98:d2:8d:50:4a:14:81:b8:bb:
6f:13:89:0d:91:09:a2:94:9a:e3:14:7a:0f:e3:95:
cb:21:bd:5e:69:39:96:a1:73:8e:cf:58:90:34:ef:
83:e6:01:8b:d2:2d:78:9e:a3:1f:12:ac:8b:74:cf:
03:c9:a0:cf:f8:97:c4:07:80:c4:6d:26:9e:61:f2:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.206.0/24
Signature Algorithm: sha256WithRSAEncryption
88:96:59:d1:9f:f9:2a:b8:a7:bb:d6:31:7e:2c:d1:60:9b:89:
74:69:a6:77:f8:a2:3b:30:e3:bb:a9:f9:66:cf:06:71:8e:7e:
6c:1b:45:33:d1:6b:f3:23:51:01:c8:79:c1:ed:a9:e7:11:95:
59:d0:cd:ff:7b:fe:b1:10:87:a9:3d:34:02:5c:48:a0:1b:9b:
3b:13:05:b4:71:6f:ee:e6:b7:fa:c4:36:7f:4e:b5:9e:29:b9:
12:9b:7d:27:b9:73:f2:07:e7:fd:35:37:3f:9f:70:c1:a1:ad:
e2:30:46:94:d0:43:ca:e8:d9:b3:28:77:ff:ad:13:43:5b:ca:
b0:b4:68:61:cd:03:5b:26:1c:fb:69:72:2d:9f:5b:0b:4a:2d:
70:92:7c:0e:00:d3:a6:db:27:e8:47:b7:83:78:bc:d3:0c:a7:
76:5b:6d:ff:2b:7d:80:15:f0:04:20:63:66:53:9b:6e:1f:66:
6a:1b:89:1f:dc:09:73:e9:8d:af:e5:f1:65:ea:60:36:9e:c8:
64:5d:0c:21:39:85:6a:66:20:c2:76:13:4b:61:49:f8:e0:24:
2a:d2:79:77:10:35:ee:1b:1e:67:39:a1:33:6b:11:85:06:5f:
43:64:b0:30:eb:6e:3e:16:39:29:e5:1b:cf:ae:3e:84:2c:43:
06:d2:0e:74
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH+Kx4zWqV+iKsuz1j0vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQ3N2NhM2I0NDliYmM0MTI0N2U4YzkyMWU0YzhkYWJmYzFhZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfa4Y/DICcb+BOmORPfvC7P+cWQS
0464DPj1E4MhRenIZ9kQzAgaQD61z+SLte2S0PBCDH8FgXU14sAMoyAl7E32aVrh
2vd+CNjz2keFRsEdColuRtRLhS4pefVpLqa0vC3xUtQDSv2rXSs5GjZx7n67TgLk
Ve+fAf0fudGR6p5Oy8o0gjXpo4rR736zGDHq/lbLu54ylJjl8TAOkvMa95M9jisK
kZf5trabPmd0KR12YL2N3T9lr4uY0o1QShSBuLtvE4kNkQmilJrjFHoP45XLIb1e
aTmWoXOOz1iQNO+D5gGL0i14nqMfEqyLdM8DyaDP+JfEB4DEbSaeYfIC1wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFO9HfKO0SbvEEkfoySHkyNq/wa+uMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2YxZWVh
Mi05NTgyLTRhNjUtYjViZS02MDNhYTFmMjA5ZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZjFlZWEy
LTk1ODItNGE2NS1iNWJlLTYwM2FhMWYyMDlkOC8xLzcwZDhvN1JKdThRU1ItakpJ
ZVRJMnJfQnI2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRHOMA0GCSqGSIb3DQEBCwUAA4IBAQCIllnR
n/kquKe71jF+LNFgm4l0aaZ3+KI7MOO7qflmzwZxjn5sG0Uz0WvzI1EByHnB7ann
EZVZ0M3/e/6xEIepPTQCXEigG5s7EwW0cW/u5rf6xDZ/TrWeKbkSm30nuXPyB+f9
NTc/n3DBoa3iMEaU0EPK6NmzKHf/rRNDW8qwtGhhzQNbJhz7aXItn1sLSi1wknwO
ANOm2yfoR7eDeLzTDKd2W23/K32AFfAEIGNmU5tuH2ZqG4kf3Alz6Y2v5fFl6mA2
nshkXQwhOYVqZiDCdhNLYUn44CQq0nl3EDXuGx5nOaEzaxGFBl9DZLAw624+Fjkp
5RvPrj6ELEMG0g50
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net