Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
File: DNLKvrHXJOekjdYemn4MUKTpv1A.cer (raw, json)
Hash identifier: SetXTf4qAcwSZ56xJiHBshd3jqG4+i2qwP6e243e6pI=
Subject key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019580C069141C8B2CEA498B9EEA07A0766B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Mar 2025 15:50:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209772
IP: 91.210.124.0/24
IP: 185.68.128.0/22
IP: 185.207.160.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:c0:69:14:1c:8b:2c:ea:49:8b:9e:ea:07:a0:76:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:18:6e:6a:22:83:6e:6c:fe:eb:5a:75:c0:
63:ff:64:7b:11:ac:45:24:2b:86:db:03:62:ef:f5:
0c:43:95:8d:ba:bf:69:30:cf:82:25:66:ce:d1:bb:
ab:c8:0a:79:bb:00:00:bb:12:d8:59:e1:df:87:68:
c2:eb:b3:0c:ee:5f:49:bb:87:15:e3:36:28:30:a0:
18:8e:d6:0a:dd:83:42:7c:33:b9:f9:5c:56:51:6a:
be:fb:aa:bf:9e:29:a7:e5:1a:2a:7a:9c:39:f4:ef:
30:4c:e7:b7:67:ae:ca:fb:3d:5e:0c:bb:d8:78:f9:
f2:94:52:2d:74:df:5f:73:bc:b7:23:10:04:95:9f:
45:18:6b:72:87:88:86:07:e2:ed:c2:f3:f4:9b:c4:
e4:ac:9b:56:79:b7:e9:f6:4b:1b:1a:01:46:29:1a:
be:ca:95:1c:d0:24:a9:e1:bb:73:4d:0f:93:e4:92:
38:74:47:e2:5d:60:07:1e:56:b7:6f:be:99:72:9d:
bb:5f:1f:dc:73:66:74:d0:eb:de:eb:96:60:ce:e2:
a9:15:a3:9a:fb:b6:06:64:4a:83:7f:a7:4f:38:fb:
51:de:4c:1f:5d:a3:99:dc:c2:2d:01:72:44:4f:1a:
84:3f:5e:56:37:0d:4f:62:10:86:8b:00:c6:d0:c3:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.124.0/24
185.68.128.0/22
185.207.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209772
Signature Algorithm: sha256WithRSAEncryption
1b:10:a7:ef:a2:1c:33:b0:8b:18:9f:a4:b3:28:53:96:cc:07:
ff:0a:14:8a:4d:cc:67:71:d5:77:10:ba:29:3b:af:6f:df:4e:
32:02:f1:7c:f2:1b:cf:74:45:6b:17:a0:5b:3f:0d:29:2c:9a:
ef:a7:fe:50:6c:f5:f5:35:f2:02:52:7b:61:73:76:90:83:53:
31:27:6e:ca:39:1b:b6:32:0b:45:02:7e:2d:ea:d8:a1:a9:1a:
8d:19:dc:26:24:bc:6c:80:89:9e:4a:ac:c9:82:96:0e:5c:dd:
ea:58:05:65:33:11:d5:9c:e5:0e:a3:77:1e:97:19:33:4c:da:
ef:4b:16:fc:4f:3f:9b:3b:1b:67:1c:ec:93:54:82:75:18:9a:
f5:d6:cc:34:81:a6:db:fd:49:e1:b9:16:5d:0d:e2:0a:ba:0b:
1c:55:09:ab:59:21:3d:ca:03:89:52:6f:03:1a:07:0a:04:c0:
28:7c:c8:f2:d1:c8:78:81:2e:2a:ef:40:38:fd:82:91:46:e2:
a7:ca:1f:04:12:3e:45:86:77:8d:a1:47:6c:0b:16:96:dd:f9:
79:bf:7f:5b:bc:c4:f4:d1:23:e0:12:fb:1a:ee:c2:8a:67:81:
bc:06:f3:e8:7c:e9:a6:32:4e:b3:f8:be:14:a1:6f:18:2c:e9:
7e:c0:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:04 2025 by rpki-client on console.sobornost.net