Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.cer (raw, json)
Hash identifier: RIU0J5+KPtu6C9vlsnNWvvh798AkKRQB2MMhEQ+tm84=
Subject key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8E758C86339EEE588729C678832C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44427
IP: 91.199.119.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8e:75:8c:86:33:9e:ee:58:87:29:c6:78:83:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:9d:4d:ea:d6:67:d5:24:7b:28:81:5b:d2:
1f:91:3d:4b:14:85:de:ea:8a:4d:c3:ee:c4:ed:d0:
3d:33:4c:fb:aa:f8:b0:d4:81:39:81:4e:47:d3:42:
fb:59:2f:fc:69:50:ee:f9:9e:16:cb:9e:9d:d0:26:
89:0c:de:df:7e:b1:9b:70:6e:67:a2:f0:83:63:2f:
fd:27:05:dd:da:22:ad:2a:60:f7:df:8a:26:50:76:
47:f7:01:8d:7f:6d:0b:7f:49:20:6a:6c:bb:0e:64:
96:74:0c:6e:13:b3:db:45:2d:1b:bb:3d:e4:55:c7:
7d:d4:c6:ad:4b:0c:c4:e5:71:d4:20:e6:72:70:a7:
1e:b2:f6:02:29:14:43:4b:fa:3c:de:26:c3:bf:b6:
fb:ea:b6:67:c7:95:8c:ba:e9:3b:c5:d1:a3:ff:bd:
e6:ef:a5:cb:fb:c4:43:59:c3:1f:f7:e1:23:29:d5:
52:31:7d:84:db:7c:78:63:bd:2d:3f:4f:db:47:72:
d3:7c:ae:e1:bb:e2:9e:7d:2b:e4:3a:85:c0:20:de:
f0:9d:84:27:ac:21:e2:8d:e7:3c:09:2f:52:44:b6:
9d:30:3b:04:d5:30:52:76:45:a3:b3:ea:31:bc:f2:
0c:30:19:81:ba:84:6e:df:e4:7d:f7:82:aa:3d:c8:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.119.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44427
Signature Algorithm: sha256WithRSAEncryption
87:2e:09:a4:3a:de:81:ff:c4:39:49:94:b3:d5:0e:47:ba:99:
5e:07:ae:fd:93:a6:ec:b8:6a:c1:b1:51:49:c8:b9:36:94:9a:
51:f7:9d:72:73:1d:6b:fd:f6:fa:d2:76:91:92:b8:90:eb:71:
b3:4c:49:e0:65:f6:f0:00:31:ba:76:9f:c0:43:30:95:01:2d:
14:e9:98:0b:1e:cd:68:37:4a:cd:ef:8d:65:b0:f0:75:63:ff:
1d:62:0b:30:76:a6:09:01:a0:7b:b9:ce:6c:45:9e:ee:ec:49:
23:4c:3e:23:cc:65:91:15:22:2b:8c:16:79:b9:24:33:47:ff:
3c:d2:4c:22:23:50:b6:9c:07:4f:63:18:a0:02:1a:b1:2a:e6:
56:ce:e3:1c:04:9c:d1:c1:16:85:10:a4:23:1d:2f:61:3b:87:
12:6c:b5:ce:53:19:13:38:a7:41:83:5c:fc:93:a6:93:55:30:
0e:96:2f:21:27:83:34:ef:5a:9b:b3:f1:4e:e6:2b:26:26:f0:
95:fa:44:3c:4b:40:76:c6:e7:9f:d5:79:f2:a7:e6:1b:cf:79:
88:c1:c6:ef:7c:2e:1f:f5:cc:19:80:9f:fd:99:19:59:ba:2a:
94:53:f7:a6:0b:b6:18:36:fc:28:fc:4f:b3:25:f8:20:dd:f5:
5f:90:c2:73
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjI51jIYznu5YhynGeIMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWE4NWVjZTJjNTM5ZjU4NTBmYTcwMWYyZDQ1YTIxMjdkYzg2NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T+dTerWZ9UkeyiBW9IfkT1LFIXe
6opNw+7E7dA9M0z7qviw1IE5gU5H00L7WS/8aVDu+Z4Wy56d0CaJDN7ffrGbcG5n
ovCDYy/9JwXd2iKtKmD334omUHZH9wGNf20Lf0kgamy7DmSWdAxuE7PbRS0buz3k
Vcd91MatSwzE5XHUIOZycKcesvYCKRRDS/o83ibDv7b76rZnx5WMuuk7xdGj/73m
76XL+8RDWcMf9+EjKdVSMX2E23x4Y70tP0/bR3LTfK7hu+KefSvkOoXAIN7wnYQn
rCHijec8CS9SRLadMDsE1TBSdkWjs+oxvPIMMBmBuoRu3+R994KqPciaEwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAGoXs4sU59YUPpwHy1FohJ9yGdVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzQzYTkx
Yy0zYWFjLTQ5NWMtODA4MS03NTJhNDVjMzJkZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNDNhOTFj
LTNhYWMtNDk1Yy04MDgxLTc1MmE0NWMzMmRmZi8xL0FhaGV6aXhUbjFoUS1uQWZM
VVdpRW4zSVoxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8d3MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCtizANBgkqhkiG9w0BAQsFAAOCAQEAhy4JpDregf/EOUmUs9UOR7qZXgeu/ZOm
7LhqwbFRSci5NpSaUfedcnMda/32+tJ2kZK4kOtxs0xJ4GX28AAxunafwEMwlQEt
FOmYCx7NaDdKze+NZbDwdWP/HWILMHamCQGge7nObEWe7uxJI0w+I8xlkRUiK4wW
ebkkM0f/PNJMIiNQtpwHT2MYoAIasSrmVs7jHASc0cEWhRCkIx0vYTuHEmy1zlMZ
EzinQYNc/JOmk1UwDpYvISeDNO9am7PxTuYrJibwlfpEPEtAdsbnn9V58qfmG895
iMHG73wuH/XMGYCf/ZkZWboqlFP3pgu2GDb8KPxPsyX4IN31X5DCcw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net