
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.cer (raw, json)
Hash identifier: Lm2aUyYsbnMpm8ucXMpxcJ+CdF1DbyvoZEeW4M9WtrY=
Subject key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5CC9EE36BCC77EBF94B3DE099DB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56701
IP: 45.157.212.0/22
IP: 77.73.234.0/24
IP: 178.236.29.0/24
IP: 2a0f:f280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5c:c9:ee:36:bc:c7:7e:bf:94:b3:de:09:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a3:7b:00:8b:ae:0e:1c:2c:c7:59:a4:04:
f4:4c:2f:50:ac:65:e3:be:26:20:86:05:e2:e9:52:
62:6b:73:0b:a6:e6:2a:5e:e0:88:27:f2:1d:45:8c:
6d:f6:f4:47:ae:25:58:9d:dc:55:e3:0a:33:05:65:
43:62:27:70:88:38:25:60:b1:4b:ef:8e:30:cc:86:
a9:5f:4e:98:e7:2e:44:d5:d2:71:8a:35:ae:d2:f4:
d7:1c:e1:02:81:3d:ea:e8:de:4a:fd:5b:e8:ba:6c:
18:63:1b:a7:a3:0a:49:cd:44:db:ef:36:a5:4d:36:
cf:10:be:e8:76:73:20:b2:a8:67:ac:cb:52:ac:43:
51:7c:f4:03:9d:22:4f:e1:67:3f:88:65:cc:41:69:
64:cc:a1:98:df:60:d6:47:b0:7b:41:c8:78:44:ad:
0f:78:18:ee:ec:bf:2f:23:3d:11:92:67:ec:2b:27:
a9:07:51:e4:75:ce:3f:a4:62:63:4d:7c:a1:58:2c:
8d:9e:f4:dc:0b:8f:36:7e:f1:6b:40:40:dc:34:93:
f5:34:fb:e8:2e:43:ea:09:e1:47:07:d6:fa:b3:b1:
a2:5b:fc:73:86:4b:54:28:d8:4b:a7:ce:13:73:57:
bb:e6:6d:5a:90:d5:54:0b:98:4c:c0:8a:9a:c5:56:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
178.236.29.0/24
IPv6:
2a0f:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56701
Signature Algorithm: sha256WithRSAEncryption
92:90:25:87:e1:ec:0e:09:b5:68:39:48:de:9a:40:02:90:8a:
34:31:1d:fc:49:f7:69:36:60:dd:17:de:b2:45:3f:89:94:b4:
eb:7d:dc:c2:8d:47:83:ce:4b:85:61:08:aa:12:bd:de:73:78:
40:60:f3:42:0f:3c:f2:9b:ad:30:a0:9c:65:fc:7a:d6:5e:14:
3f:fb:3b:34:2f:d8:57:a8:68:7c:d4:76:20:16:e6:08:76:42:
9b:f4:ee:2d:07:9a:a0:c3:29:0c:34:20:d3:98:c7:fa:3a:9f:
57:cd:be:4b:5b:6f:69:c2:c0:f4:7f:e2:52:11:40:e7:d7:5d:
ea:e3:81:4d:dd:41:7a:7c:d0:8b:b6:b8:d8:f4:c4:92:d9:77:
f7:53:ed:30:bf:54:5b:b4:e5:43:a1:b8:3a:39:ff:cc:40:90:
c4:19:35:1f:65:6a:35:f8:78:90:6a:73:35:81:f8:26:cf:9c:
47:9b:74:dd:82:17:14:82:b1:bc:0b:44:06:02:ec:eb:10:b4:
19:fe:91:a3:7c:be:89:dc:26:e6:94:63:e8:d5:a2:bc:3c:cd:
a9:70:34:7b:0f:57:6f:35:d6:37:f9:e3:7f:50:01:7e:c8:58:
c4:82:dc:e3:3a:4d:29:c5:e5:81:dd:36:b0:6f:51:3a:8a:a6:
0b:8b:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net