Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
File: DETz4ku_xgSOX_pQw9zjZP_AErA.cer (raw, json)
Hash identifier: 8mmN1Z8fcvjTDHid+mSYEtHTtCIx/02lAfL1tsL+0ks=
Subject key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B7019F376A89F79CE11E2025CC074
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29030
IP: 87.121.8.0/21
IP: 87.121.24.0/22
IP: 87.121.152.0/21
IP: 94.156.194.0 -- 94.156.199.255
IP: 94.156.208.0/21
IP: 185.217.38.0/24
IP: 2a10:b900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:70:19:f3:76:a8:9f:79:ce:11:e2:02:5c:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:24:33:f5:9c:6d:f3:7c:e4:74:06:b5:47:
6c:a0:d7:bb:e0:52:80:3f:56:c1:db:e9:e0:89:c6:
b7:dc:7f:ce:97:55:7f:6d:64:96:db:d1:00:ee:4f:
c1:00:f4:30:09:42:e1:58:a7:1c:60:e6:b0:0f:04:
b3:2c:e9:f2:33:8a:f3:02:fd:bc:3c:f9:e2:4c:11:
4e:8c:fe:8c:32:98:b3:56:a9:b1:cf:bd:ee:8e:0b:
5b:6f:aa:03:08:64:a1:f9:2d:11:60:75:cc:c5:0e:
2c:b9:4d:49:18:0d:4c:f5:37:89:ff:6e:89:27:13:
10:ec:de:df:6f:16:64:ee:ea:5a:ca:06:52:8b:8a:
b9:4e:d7:15:d0:ab:10:ee:a5:18:80:15:81:d9:7a:
e7:aa:4c:f6:90:13:0a:2c:cd:3b:ac:7c:d1:eb:a3:
5d:c2:53:2a:e7:9e:77:f7:48:eb:56:7b:13:48:d3:
c3:23:e1:d1:79:9a:3d:64:b0:81:14:94:2a:b4:a1:
69:26:b2:eb:7c:03:07:9e:74:01:b6:52:64:ac:27:
11:80:3b:5e:22:10:38:db:ea:a2:5a:43:f7:d4:b7:
b3:d3:dc:70:5f:6f:69:10:1f:8d:b0:1c:46:9b:78:
89:5c:97:8d:86:93:c7:b2:e1:36:31:fa:67:93:bf:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.8.0/21
87.121.24.0/22
87.121.152.0/21
94.156.194.0-94.156.199.255
94.156.208.0/21
185.217.38.0/24
IPv6:
2a10:b900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29030
Signature Algorithm: sha256WithRSAEncryption
10:ef:22:e9:69:ae:71:b7:fb:ab:3b:1a:5f:79:c2:71:66:e6:
58:97:34:7f:07:bb:f5:09:b6:4f:69:96:a3:80:e8:f1:95:8c:
84:c4:47:4e:f0:18:0c:f7:f4:26:3e:7f:3f:14:0a:96:90:56:
4c:95:61:20:2d:ed:f4:14:42:ef:44:49:b7:c9:d0:d1:b9:4a:
be:52:89:33:e7:40:b6:1e:b4:52:c9:37:a7:dc:45:73:e8:ed:
ed:d2:66:50:b9:8b:d2:b7:02:00:f6:04:c7:5b:82:13:eb:1a:
6b:07:52:48:59:0e:e4:09:f3:6e:db:e1:18:3d:d6:44:47:08:
62:f4:48:80:e3:c0:5a:53:87:25:40:78:90:bf:86:82:aa:61:
7c:b2:5a:72:ff:ed:32:62:3c:2a:fd:10:33:39:f4:02:47:62:
a1:d4:f4:b7:d0:e8:b3:06:d7:d1:d2:cb:1b:54:80:af:bd:ba:
e6:db:42:c9:61:85:34:c6:32:74:45:38:a8:f3:77:e1:98:d5:
49:48:c2:9c:87:67:17:56:5e:ac:cb:53:d5:02:f0:17:40:98:
b6:91:35:74:11:33:6e:98:a1:c5:e9:70:d6:5f:50:e3:bc:3c:
f9:19:02:c7:b1:f1:aa:15:55:6a:2e:25:1d:07:f8:78:55:0b:
15:a2:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:04 2025 by rpki-client on console.sobornost.net