Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.cer (raw, json)
Hash identifier: iOYuP7IXDsvcfK19+DlgDMGqGL4vFscT1hSjAWlXRGI=
Subject key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236903892ECCB51A97EBC6EBDDD99317
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43858
IP: 91.198.199.0/24
IP: 91.244.246.0/24
IP: 146.255.168.0/21
IP: 185.11.160.0/22
IP: 185.80.176.0/22
IP: 2a03:39c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:03:89:2e:cc:b5:1a:97:eb:c6:eb:dd:d9:93:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:4d:af:1e:b7:84:6a:03:e1:aa:41:99:b8:
b8:a1:d6:91:92:85:99:c5:75:f9:48:bb:62:54:7e:
00:55:78:80:d2:4c:e6:77:9d:4e:dc:3e:85:ac:92:
0f:5f:8c:0f:e7:23:62:e4:9c:03:69:d2:25:da:7d:
b6:50:67:c9:a8:39:7d:38:17:34:75:ef:f1:88:02:
86:a5:57:4e:6f:a3:37:32:03:4c:7d:dc:78:6a:08:
ae:03:a9:c5:5d:0a:b9:77:d7:0f:3e:ce:de:9a:61:
97:86:34:53:e2:72:85:a6:90:b3:2d:23:c6:fb:45:
7b:34:16:c8:cf:48:8d:82:9f:9f:08:0d:6a:cc:de:
d7:35:92:7d:46:82:df:8d:97:f4:73:25:08:8e:3b:
3e:06:4d:36:2f:d6:de:6c:88:0c:92:eb:81:4b:ea:
7c:15:b7:a8:73:4f:89:13:76:14:0a:b3:23:b4:73:
02:c7:15:16:b6:60:1e:39:b2:18:5c:69:a4:d6:37:
2e:af:8d:9c:47:27:fd:30:01:a0:3a:5c:d8:43:cd:
7f:05:5a:a9:27:54:ec:2b:1f:1a:b4:e4:6a:39:cd:
35:b9:b1:c5:1d:31:db:b4:12:6b:9a:35:92:13:94:
26:b8:b6:4f:75:e7:51:35:a1:2a:cb:56:6d:40:5a:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.199.0/24
91.244.246.0/24
146.255.168.0/21
185.11.160.0/22
185.80.176.0/22
IPv6:
2a03:39c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43858
Signature Algorithm: sha256WithRSAEncryption
3f:75:34:44:76:07:83:ab:ac:3c:43:2d:59:73:ac:1a:76:ad:
bb:0f:94:f9:d6:f1:cb:b6:5c:b8:7b:f2:09:a1:3e:20:d1:2b:
0e:90:47:c9:5f:76:f1:72:8a:e7:49:aa:89:8c:c0:d0:d4:78:
47:4a:02:c0:2a:d5:a5:24:7a:e1:94:7b:39:68:1a:e8:04:d0:
21:4c:f0:a6:79:b5:47:d5:f0:58:74:8d:2a:b6:12:f3:9e:cc:
53:68:71:e7:e4:d0:0e:71:f4:5d:12:0d:77:b7:5e:75:e0:09:
4d:15:64:dd:cf:3b:a5:37:04:a2:51:09:2f:c9:89:bf:61:e9:
b9:ac:45:d7:52:52:f3:ca:63:52:ca:12:01:80:ea:3a:03:a8:
12:1a:55:8a:27:e3:7f:a4:19:40:c9:04:c9:a5:35:ed:30:b7:
78:a1:34:67:bd:59:58:38:36:01:88:d1:d5:ba:84:e5:4a:0f:
ed:8d:f5:7f:0c:94:b4:53:b3:ba:a7:34:ec:3a:6d:c8:0c:2e:
c4:ae:6f:96:84:23:4e:6d:12:d4:e9:6d:60:0f:36:f3:61:c2:
10:56:cf:9e:dd:9c:fb:84:bd:f2:3a:fb:ac:1b:6b:54:d7:75:
3a:3b:4f:89:02:9a:da:00:b0:1b:3d:d0:58:63:ae:3d:9a:12:
bb:61:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:06 2025 by rpki-client on console.sobornost.net