Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer (raw, json)
Hash identifier: kakkOWLE+/S9DMcFvCzAsi+r02WbvD0Pxg4JoSJab5A=
Subject key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274855C1D0717B3EA84D6357926999F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13236
IP: 195.234.236.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:c1:d0:71:7b:3e:a8:4d:63:57:92:69:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:bf:ff:f0:2e:1b:4f:47:85:37:a0:a1:c2:
52:28:7b:84:9d:9f:db:e8:5e:5e:f2:07:71:00:d2:
47:6c:8f:fe:d7:fc:3b:03:60:60:cd:75:5d:b5:23:
bd:bb:6e:3d:97:81:07:c6:ba:f5:2b:3c:c6:63:22:
9d:2e:b7:be:62:7f:86:06:c4:95:b9:be:f7:f2:3a:
0a:b8:e4:a7:45:b4:3d:77:ed:95:f0:5e:5e:73:d2:
08:8f:da:b8:e2:ba:6f:68:55:4a:02:91:24:d9:90:
73:86:46:74:0c:63:ff:33:51:8d:ef:b8:43:1e:d5:
f8:ec:78:e7:75:d4:86:55:35:8d:45:76:54:b2:33:
fd:1c:72:85:8b:d3:da:20:6b:b1:d2:11:0b:d9:30:
fe:95:2b:4c:6e:cd:10:09:03:d4:98:07:67:73:58:
ee:da:80:84:be:97:ac:58:46:5a:02:9c:09:22:e6:
96:cc:a3:fd:c6:c2:30:d7:b5:f4:da:9f:2c:e0:ba:
9f:7e:a8:8a:2e:3d:05:97:37:9b:c7:51:e4:2f:78:
d0:ab:13:7b:66:21:26:cb:63:55:fa:ea:61:89:16:
28:0c:63:21:a1:b0:76:2c:e6:24:71:31:50:1c:cc:
4d:7a:60:4e:ee:a6:a7:f2:c3:0d:ba:d8:3a:5a:46:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13236
Signature Algorithm: sha256WithRSAEncryption
89:bc:3f:cb:1f:3c:1d:a5:bd:39:15:f7:9f:79:b8:2e:02:b3:
5c:bd:29:89:13:1a:5b:28:3a:41:f4:1e:80:3c:18:58:36:50:
14:d8:1a:96:02:85:49:29:07:a9:6e:09:d5:d3:e1:9d:31:35:
cb:8e:1f:2b:eb:fc:d1:64:74:4f:64:ab:64:80:92:a1:c5:84:
ed:77:95:0c:12:b1:26:17:39:09:a0:e4:0c:3f:6f:6e:bb:a7:
23:1b:d6:b5:41:26:0e:4e:bc:a6:c7:2a:16:f3:10:df:17:dd:
d8:35:da:bb:35:5a:b7:12:b8:5f:c9:00:98:1b:99:5e:2a:f4:
fb:f4:72:d0:9b:94:cb:a4:41:2d:ae:92:f1:6c:00:49:11:6a:
78:c0:ff:88:1f:36:bd:af:12:b2:bb:21:7c:2b:0f:56:c1:ac:
f3:11:d6:47:5c:e1:8a:ec:91:e5:d6:a5:98:ea:e6:61:b4:29:
24:fd:5d:ca:0f:3c:dd:26:81:9d:39:7d:21:f9:9d:68:09:6b:
59:99:90:6b:ae:0b:b5:fb:b4:e3:9c:c6:5e:18:e5:e2:b6:00:
13:61:a1:d8:fd:9d:df:b9:28:14:2c:8e:a5:4b:92:c2:05:59:
49:62:31:59:11:80:94:c8:44:43:b5:f3:75:ae:0d:c2:4a:d9:
2d:40:86:09
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQnSFXB0HF7PqhNY1eSaZnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzc0MzAwNmE4ZTlkMGUxYmYyMDU1N2FkNTk2NDA3OGZlODEyNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsua///AuG09HhTegocJSKHuEnZ/b
6F5e8gdxANJHbI/+1/w7A2BgzXVdtSO9u249l4EHxrr1KzzGYyKdLre+Yn+GBsSV
ub738joKuOSnRbQ9d+2V8F5ec9IIj9q44rpvaFVKApEk2ZBzhkZ0DGP/M1GN77hD
HtX47HjnddSGVTWNRXZUsjP9HHKFi9PaIGux0hEL2TD+lStMbs0QCQPUmAdnc1ju
2oCEvpesWEZaApwJIuaWzKP9xsIw17X02p8s4LqffqiKLj0Flzebx1HkL3jQqxN7
ZiEmy2NV+uphiRYoDGMhobB2LOYkcTFQHMxNemBO7qan8sMNutg6WkawYQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFAd0MAao6dDhvyBVetWWQHj+gSbvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzY3OWNh
Yi0yY2Y0LTQwYTUtYjVlZS0yNDY2NDZlOWRiMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNjc5Y2Fi
LTJjZjQtNDBhNS1iNWVlLTI0NjY0NmU5ZGIxZS8xL0IzUXdCcWpwME9HX0lGVjYx
WlpBZVA2Qkp1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCw+rsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjO0MA0GCSqGSIb3DQEBCwUAA4IBAQCJvD/LHzwdpb05FfefebguArNcvSmJExpb
KDpB9B6APBhYNlAU2BqWAoVJKQepbgnV0+GdMTXLjh8r6/zRZHRPZKtkgJKhxYTt
d5UMErEmFzkJoOQMP29uu6cjG9a1QSYOTrymxyoW8xDfF93YNdq7NVq3ErhfyQCY
G5leKvT79HLQm5TLpEEtrpLxbABJEWp4wP+IHza9rxKyuyF8Kw9WwazzEdZHXOGK
7JHl1qWY6uZhtCkk/V3KDzzdJoGdOX0h+Z1oCWtZmZBrrgu1+7TjnMZeGOXitgAT
YaHY/Z3fuSgULI6lS5LCBVlJYjFZEYCUyERDtfN1rg3CStktQIYJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:00 2025 by rpki-client on console.sobornost.net