Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
File: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer (raw, json)
Hash identifier: ajILRUDS1HGOIPhuX3g/d7RWqH8U4fnXDnCh6+rA8qA=
Subject key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2098B28F5FF0416EC1F20C6984725
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207505
IP: 104.129.174.0/23
IP: 185.242.219.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:8b:28:f5:ff:04:16:ec:1f:20:c6:98:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ef47d753d25289fd98794974aa0536010567bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:e5:f2:a8:c2:a8:41:0a:17:58:22:2d:4a:
d6:f6:15:cd:f6:8a:5b:4f:ee:d9:20:10:86:df:37:
2e:fe:02:0f:e5:0b:73:99:63:e5:73:2f:6c:7e:79:
a4:e0:f1:3b:ff:90:e4:99:44:10:08:0b:f1:23:e9:
df:a2:db:f9:d3:de:49:9e:ba:19:1a:af:36:43:ec:
5a:36:1d:93:9b:ce:95:ae:65:f2:76:92:bc:8e:74:
e6:5d:cd:2b:ec:2f:f7:5d:1f:84:8f:81:c6:e3:65:
ac:6b:1a:06:11:7b:ed:9b:a3:da:bb:74:f6:46:92:
3e:ad:36:88:fa:86:a1:69:56:be:1e:4e:d6:1d:ca:
d9:98:fd:38:2e:7d:20:1e:f5:9d:3b:8f:2b:47:fc:
f3:b1:39:f9:c4:69:cd:00:cc:96:5a:e0:2a:42:bf:
a4:52:57:a6:07:e9:f4:e0:35:a2:01:9e:b6:80:32:
44:18:76:9b:17:7b:ea:ff:b2:26:a2:91:3f:82:57:
06:c2:b1:db:4c:e9:bf:7c:a1:b1:e4:9c:c1:45:f8:
49:be:35:62:03:a9:42:c3:d9:c7:2a:22:e3:20:2d:
02:98:16:df:44:da:3f:a4:05:ae:56:e3:e4:6c:f8:
4d:25:ec:63:ba:93:bd:aa:43:4f:60:4c:ff:b1:c1:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/23
185.242.219.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207505
Signature Algorithm: sha256WithRSAEncryption
a8:4a:d2:8b:be:ad:26:1b:78:ad:e6:1b:ad:c7:fc:b5:02:8e:
a4:62:6b:81:7d:6d:3c:c3:82:f5:31:d8:81:70:85:94:92:37:
4e:3f:ba:0c:d6:ef:09:4a:5c:e7:e1:32:39:63:76:a0:3d:5f:
ad:3b:de:a6:9e:3d:ce:0c:a2:84:3f:19:14:4c:c0:9c:66:36:
2e:be:d4:3a:75:9e:5c:ef:24:e3:4e:51:6c:ed:b3:35:65:5b:
0c:1b:cc:d0:13:e0:fe:b3:b7:4f:92:32:5b:33:9d:2e:f2:02:
2d:91:82:d7:52:fb:af:e3:7c:ff:46:fe:af:67:91:e5:9e:23:
d6:d6:1b:05:93:50:0c:45:80:b7:8e:9b:b6:27:e3:21:1a:2c:
ae:30:37:f4:33:33:33:5a:7c:ae:dd:bc:6a:3b:30:dc:27:72:
4e:66:8f:d4:6d:9d:ca:71:14:9f:7b:39:f3:98:0d:77:11:d6:
68:99:78:25:fa:1a:fc:87:b7:74:9c:da:c9:e3:fa:c8:b3:36:
a8:64:03:e4:57:bf:6b:40:76:86:05:a0:23:4d:02:5a:a0:44:
f7:ef:9f:ad:2e:fd:b1:b1:13:c6:0c:43:3e:a1:b3:92:f8:4e:
7d:b6:e5:75:e7:f2:32:59:4b:a4:53:5b:66:3d:1d:3a:2a:57:
60:a1:be:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:05 2025 by rpki-client on console.sobornost.net