Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.cer (raw, json)
Hash identifier: nfEsjXWmKqb7UovM3tw0+LCuu+jTFN0p8juKfYEUbXs=
Subject key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195B3675510EF33AFAEB2C4A947182AAFE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Mar 2025 11:54:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216399
IP: 178.210.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:67:55:10:ef:33:af:ae:b2:c4:a9:47:18:2a:af:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 11:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:52:00:1e:8b:b2:9f:64:58:a1:32:1a:2a:
6f:7c:99:2c:40:e0:1a:da:32:7b:7d:72:b4:11:a2:
17:c5:bf:ca:7a:bd:e6:a3:da:4e:de:32:6d:3d:ae:
ff:f2:fe:db:cd:4f:ca:88:66:ca:7b:24:f9:2e:b6:
1d:d0:98:b6:3c:6f:d2:9e:b5:7e:fb:e1:6e:87:b1:
70:e7:86:d6:01:44:f2:1d:c0:0f:c5:4e:1e:ba:5d:
35:4a:2e:7f:28:5b:ad:ff:e7:6c:62:c3:f5:d8:3f:
9c:d3:3d:b4:af:bc:71:fd:8f:13:a4:c3:49:f8:94:
ef:e9:7a:af:c0:95:8c:20:31:e0:13:24:1b:d9:6d:
53:23:2d:0a:a2:93:07:de:28:8f:da:08:d3:1d:4a:
3a:cc:68:cb:d8:f1:56:61:92:97:f2:45:18:a2:f0:
cc:0d:64:40:6c:e3:f0:f2:99:5f:f1:62:d0:5f:42:
e7:f3:70:34:67:19:60:8e:8b:16:20:61:75:e8:14:
1c:04:9c:db:07:2f:bb:30:07:5c:52:84:ce:bf:57:
4b:06:5b:a1:d1:96:0c:c8:c3:62:38:c0:81:48:75:
ab:8d:d2:54:7a:d4:90:5e:37:55:6d:6c:f1:ae:c3:
93:7d:25:3b:ef:21:50:e1:22:76:b4:27:b7:e5:88:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.224.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216399
Signature Algorithm: sha256WithRSAEncryption
ae:c1:45:84:3c:cc:12:93:c1:8e:02:ec:7d:39:25:02:62:d9:
d2:1c:56:2d:d4:1b:be:55:56:df:48:8a:05:06:f9:57:f5:92:
4f:ea:a3:38:d1:a5:08:9c:bf:44:56:4f:e9:9d:54:a3:dc:1d:
c5:54:9c:56:53:f1:8e:e3:3e:1a:e1:14:bc:40:9f:ea:83:b1:
55:86:8e:fe:95:55:7a:ed:8e:87:c3:5b:1e:28:9c:8f:dd:fa:
fa:c0:06:c9:07:a9:08:d7:df:ba:35:c9:6d:57:5b:6b:6d:46:
1e:7a:5d:0e:52:c2:f5:29:b5:a8:ba:9d:13:21:98:d7:5a:05:
b7:4e:5d:95:d0:85:90:1f:ad:24:1a:3f:d6:9d:1b:e9:67:0c:
41:15:e2:20:72:92:f5:d5:86:a2:b9:d4:cd:36:50:c6:f5:45:
78:a0:ee:b8:7f:72:12:37:62:6a:80:ae:b8:d6:75:b0:2c:e5:
5d:2e:00:0e:27:09:79:40:ac:cd:26:a5:b4:97:23:59:9f:ae:
da:e8:5f:f2:a2:2e:15:4c:1d:cc:d7:4c:6b:d9:57:53:35:e6:
35:ed:6f:c5:bd:9b:a4:68:57:94:94:35:5a:77:31:73:84:d9:
a2:d9:ce:72:5b:61:82:70:ff:6c:25:57:ef:1e:3a:f6:25:46:
15:d5:30:d5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZWzZ1UQ7zOvrrLEqUcYKq/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzIwMTE1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2RmM2E0YTA1ZjM3MDUwZjdjMDM3OWQzNGY0ZjQ4MTRiZDIwOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTlSAB6Lsp9kWKEyGipvfJksQOAa
2jJ7fXK0EaIXxb/Ker3mo9pO3jJtPa7/8v7bzU/KiGbKeyT5LrYd0Ji2PG/SnrV+
++Fuh7Fw54bWAUTyHcAPxU4eul01Si5/KFut/+dsYsP12D+c0z20r7xx/Y8TpMNJ
+JTv6XqvwJWMIDHgEyQb2W1TIy0KopMH3iiP2gjTHUo6zGjL2PFWYZKX8kUYovDM
DWRAbOPw8plf8WLQX0Ln83A0ZxlgjosWIGF16BQcBJzbBy+7MAdcUoTOv1dLBluh
0ZYMyMNiOMCBSHWrjdJUetSQXjdVbWzxrsOTfSU77yFQ4SJ2tCe35YiXYwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOzfOkoF83BQ98A3nTT09IFL0gnfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2ZmMDlj
MS03ZjQ1LTQwMGYtYmQxOS1lZjg3NDA1ZjlhMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZmYwOWMx
LTdmNDUtNDAwZi1iZDE5LWVmODc0MDVmOWExMS8xLzdOODZTZ1h6Y0ZEM3dEZWRO
UFQwZ1V2U0NkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCstLgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNNTzANBgkqhkiG9w0BAQsFAAOCAQEArsFFhDzMEpPBjgLsfTklAmLZ0hxWLdQb
vlVW30iKBQb5V/WST+qjONGlCJy/RFZP6Z1Uo9wdxVScVlPxjuM+GuEUvECf6oOx
VYaO/pVVeu2Oh8NbHiicj936+sAGyQepCNffujXJbVdba21GHnpdDlLC9Sm1qLqd
EyGY11oFt05dldCFkB+tJBo/1p0b6WcMQRXiIHKS9dWGornUzTZQxvVFeKDuuH9y
EjdiaoCuuNZ1sCzlXS4ADicJeUCszSaltJcjWZ+u2uhf8qIuFUwdzNdMa9lXUzXm
Ne1vxb2bpGhXlJQ1Wncxc4TZotnOclthgnD/bCVX7x469iVGFdUw1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net