
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.cer (raw, json)
Hash identifier: LPOfDtLGIny3iE64pXNy8puHf7fYdSdQGlH0KJmlbtA=
Subject key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EE4184D8EEE61A06C1E1E03FDFC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51080
IP: 178.249.176.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:41:84:d8:ee:e6:1a:06:c1:e1:e0:3f:df:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:aa:0a:f8:bf:69:2a:39:33:28:20:8e:c5:
57:a7:29:2e:0c:78:14:10:2a:76:db:d5:7b:a8:de:
4c:7f:90:d0:7a:4a:f3:61:ec:7c:5a:90:21:1e:8f:
dd:57:e1:10:85:d9:43:58:4c:36:19:93:18:97:35:
b6:0a:79:c7:b1:28:18:58:c0:4c:16:69:5d:5a:f1:
cb:0a:cc:fc:08:6f:8e:4b:1e:f3:2d:8d:13:08:d3:
f5:f7:0f:29:6a:bf:f3:06:28:33:67:fc:57:28:7b:
39:fb:b1:e6:4c:31:2f:6d:b0:d3:31:a3:1c:92:09:
24:fa:95:62:2b:63:e2:60:6a:d5:a0:7a:9d:14:5a:
cb:e3:84:96:1c:b1:89:37:be:4d:f3:c1:e6:ce:49:
79:d8:83:40:79:23:2b:32:60:44:de:99:45:48:58:
dd:87:08:30:43:70:bc:2c:4f:a4:41:f5:83:ed:0d:
4f:54:8c:32:86:ed:09:88:51:11:f2:5b:09:fa:03:
e1:3e:c1:88:e0:14:42:ee:38:56:27:3e:16:47:38:
02:e6:ea:59:9a:b1:78:19:76:a6:47:63:43:3b:97:
b9:8c:36:c5:e8:5b:31:38:cc:bb:56:99:c7:03:57:
1c:5d:56:89:e3:8c:3b:63:37:82:86:9b:c8:0f:8a:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.176.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51080
Signature Algorithm: sha256WithRSAEncryption
ab:20:c8:09:db:bc:9a:1a:23:6d:0b:d5:35:0d:38:cd:f9:f3:
11:52:ed:d8:2c:dd:ab:a1:07:39:2c:a0:4d:37:da:95:f0:f3:
39:84:a8:e0:76:57:ce:b5:a9:63:35:f0:ac:3c:7f:f4:0f:3b:
12:8d:62:ec:ee:d6:91:ef:37:32:2e:6b:28:70:02:6e:73:2c:
9c:66:56:3c:3e:af:7e:c0:14:60:1d:56:71:ee:6c:e2:0b:1a:
b7:7e:31:9a:84:73:8e:a3:b6:3a:91:1f:73:aa:a9:25:6f:05:
c1:cf:21:71:64:5a:01:d8:29:72:6f:5e:08:a0:8d:7d:72:43:
1d:7e:ef:89:7d:a5:f4:b4:e4:f5:63:6f:fd:6b:6e:81:e3:33:
9f:ab:83:87:44:d4:e9:36:8e:b1:b7:db:7b:89:ec:8d:2d:73:
30:0e:8f:61:75:f9:04:74:98:e9:a7:9c:ad:30:06:9f:80:15:
06:a0:20:55:ba:97:e9:08:06:50:cd:32:a1:60:26:b5:ec:73:
90:15:a0:8a:16:6b:ba:a4:bb:1b:30:b8:12:e8:39:9d:47:76:
27:f1:db:f1:25:58:fe:65:f9:61:b8:fb:22:ae:f9:ee:47:c9:
18:f9:1c:35:de:8f:d7:fa:73:d8:58:e3:9c:f4:b8:06:bb:6d:
ab:d2:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net