
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
File: AYODB_eazcWa1uuC6Miq76PYgok.cer (raw, json)
Hash identifier: S7frCfUJCDan4fyBhDhpSbb8b16C0BYSXjcpQjSdImM=
Subject key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D801B7F21D23AE48BA853FEA28B340
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 82.100.64.0/18
IP: 185.199.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:01:b7:f2:1d:23:ae:48:ba:85:3f:ea:28:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:db:11:81:30:75:45:e1:aa:3b:c4:3c:91:
15:aa:0e:c4:74:1a:ff:5c:d9:d9:af:24:d2:7b:75:
59:49:c7:b5:28:23:c9:95:3a:b5:1c:a6:70:d3:d4:
da:38:6c:b1:94:4b:79:24:a7:72:2f:a6:2d:60:77:
21:62:ca:2a:3c:f6:85:c9:0f:a7:5e:0b:62:fe:5a:
05:69:a7:13:1d:b1:18:fd:4b:1d:25:be:af:bc:2e:
a3:4f:02:62:9e:eb:0f:b4:d7:cf:85:f3:94:2a:c5:
ea:eb:13:e7:9e:a4:a6:77:11:cd:a2:72:6f:ea:44:
b7:b0:72:7c:d7:47:dc:3b:ac:73:93:5e:ab:5a:a5:
44:01:02:3b:aa:82:51:dc:6c:d9:45:63:26:0d:93:
f6:a1:29:26:84:93:1c:a5:ed:3f:93:70:95:4a:81:
52:99:22:c2:16:47:0e:ec:c1:d7:5c:d5:72:52:d3:
31:85:da:a6:62:12:d9:48:10:84:27:0c:a2:98:99:
6c:35:10:b2:ab:08:5e:fc:15:c6:55:95:d4:3e:95:
05:09:53:1b:16:f1:fa:a1:d7:ea:58:60:d7:c5:45:
bb:c9:0d:32:4f:72:dc:d0:73:87:0c:41:35:9f:68:
b1:00:db:6b:66:6a:67:bd:81:9d:8e:de:8b:8a:9d:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.100.64.0/18
185.199.136.0/22
Signature Algorithm: sha256WithRSAEncryption
58:cd:54:96:8e:2c:71:ab:5d:ec:c3:af:e7:b7:b4:08:23:da:
f6:86:dc:90:da:ce:26:29:93:ea:52:1f:57:c0:09:99:bd:5e:
d3:37:b0:0f:dd:09:c8:67:6c:ea:ac:f3:73:e1:c4:7f:c4:46:
a4:3f:50:34:1f:30:b6:dd:49:e8:00:68:00:e4:21:1d:f9:d0:
b1:53:80:46:66:31:f6:10:9a:ef:0c:19:21:b1:ec:f4:04:a3:
08:5a:e9:e4:a3:f5:26:63:85:77:89:fe:de:72:f5:2a:55:25:
3f:5d:90:d3:f2:66:aa:ee:df:80:5f:76:e5:92:8f:51:f5:5b:
0c:40:ef:92:4f:56:eb:20:0e:1d:89:90:a5:c7:71:27:66:b3:
08:1a:32:20:ae:78:63:c4:a6:7b:03:c7:9d:6f:2a:f3:50:eb:
1c:4b:fe:19:f9:58:7c:3e:0c:50:28:26:d4:96:01:ca:12:48:
27:09:87:7a:11:32:89:e6:c8:f2:b1:04:2e:34:0f:c2:f5:03:
e8:c1:c7:9a:68:1f:ce:39:e9:3b:67:15:ba:e0:00:a2:27:1f:
23:aa:57:cd:6f:6c:d4:20:9e:bf:72:e4:d1:ab:a9:a6:c6:a9:
ad:f9:91:8a:d7:e9:c2:3e:a7:cd:14:72:2a:ca:dc:ce:8a:3d:
a4:91:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net