Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer (raw, json)
Hash identifier: fDG3oz6nmHCRMLoxoZRAhG88OVH6//dopCyvDtUjGRU=
Subject key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9BF89EED2A2FC176447D0D10AAEC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8856
IP: 195.214.192.0/22
IP: 212.42.64.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bf:89:ee:d2:a2:fc:17:64:47:d0:d1:0a:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:58:e2:c1:15:94:31:fe:b3:4c:5b:c9:1d:
c3:40:0c:38:bd:83:7d:ac:29:bc:ae:29:32:c8:56:
83:57:af:79:40:1e:bb:02:d3:2e:e9:87:70:74:47:
c4:0f:1b:1c:d2:87:3d:f0:a0:c4:f0:06:77:db:07:
ef:2b:91:cf:6c:c8:ab:7b:0e:bd:0d:fe:94:af:15:
76:bd:ff:78:19:4e:cd:f0:bf:f6:f5:55:b7:09:e8:
72:ff:82:85:2e:fc:39:ee:96:e0:6d:6b:c2:6a:97:
76:ab:30:ea:8a:fb:a5:b7:cf:91:23:61:86:3a:e4:
77:24:6c:5e:d2:5e:75:92:f9:aa:fa:e6:cb:f9:10:
bc:6a:3a:bd:10:5a:0f:9c:5b:88:63:77:fc:16:67:
be:0c:04:2e:32:ce:d5:59:eb:f9:72:50:06:c3:44:
55:55:42:fb:8f:e4:87:57:c7:52:e4:3f:a8:c8:35:
06:00:22:e2:a7:86:4a:fd:2a:8e:53:3c:fb:b2:69:
83:e3:41:fd:02:29:85:41:0b:5f:e3:b0:cc:47:a0:
ad:c4:32:51:89:7b:d0:70:dc:02:93:16:34:4e:c6:
6d:65:f8:70:18:7f:21:23:0b:77:24:7f:8a:a8:1c:
91:db:a7:eb:42:37:f5:a3:2a:08:f9:d1:e2:da:43:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.192.0/22
212.42.64.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8856
Signature Algorithm: sha256WithRSAEncryption
88:e1:79:33:d0:08:d0:bc:51:e6:d8:37:86:9c:e6:d3:19:7c:
6f:86:4a:b6:2d:e4:9c:91:26:6f:38:cc:44:7e:ee:f0:a3:5d:
27:fe:b9:e9:45:7e:b2:86:f9:30:25:2f:9f:f4:9a:9d:77:97:
fd:91:99:ec:c6:c6:3c:e5:55:b6:ad:d7:99:02:cc:35:d2:b3:
10:61:fe:93:08:fa:ec:a2:54:78:29:cb:f4:06:a3:af:2d:b3:
6f:42:83:49:c0:60:36:30:aa:5c:c7:b2:90:4f:e0:37:80:75:
14:88:c8:bd:1a:da:2c:73:b3:25:92:b2:63:64:d4:84:5c:89:
23:13:01:7c:04:08:f5:0c:41:a3:6c:5a:51:58:34:1b:0e:e0:
3e:15:98:21:53:8c:17:34:00:f0:18:df:37:6c:36:60:32:98:
d1:2c:fc:c7:45:b2:f4:86:05:24:3e:42:2f:72:c7:c5:a8:e8:
91:6b:71:15:23:40:e6:80:12:0e:35:dc:48:44:70:6c:e6:d9:
a0:30:e5:71:13:3a:70:89:26:7a:67:fe:9b:3c:94:65:f6:34:
df:b7:02:8d:6d:68:96:64:50:89:df:f2:b1:f9:70:15:a0:7a:
da:96:94:42:8b:67:0b:3c:25:52:f7:27:44:fa:7f:0c:81:d5:
13:2b:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:00 2025 by rpki-client on console.sobornost.net