Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
File: ESunl1d-pgpWGvmkWYxFBg47cIg.cer (raw, json)
Hash identifier: IZXM+vyDp2Cewq9WrVq+nTPN8+q7slJ6ZptzfDaR+6s=
Subject key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3FEBFA680A047B803A3AF649B1695
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34779
AS: 197045
IP: 46.248.64.0/19
IP: 84.255.192.0/18
IP: 89.212.0.0/16
IP: 89.233.112.0/20
IP: 91.246.224.0/19
IP: 93.103.0.0/16
IP: 119.12.128.0/20
IP: 185.49.116.0/22
IP: 185.179.48.0/22
IP: 188.159.224.0/19
IP: 188.230.128.0/17
IP: 193.138.32.0/19
IP: 194.28.108.0/22
IP: 2a01:260::/29
IP: 2a03:f800::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:bf:a6:80:a0:47:b8:03:a3:af:64:9b:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112ba797577ea60a561af9a4598c45060e3b7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:5f:5a:17:ae:d5:c4:9e:cf:75:39:7a:0f:
04:3a:a6:a5:d4:12:d1:8b:9e:72:ec:73:51:66:db:
e0:09:2a:91:45:6e:d8:ab:2c:65:31:ad:56:3e:0c:
65:36:74:c7:ff:17:ab:65:10:38:90:40:42:72:90:
88:67:54:8e:77:aa:5a:1c:80:45:01:52:6a:d6:98:
5c:7f:5f:29:0d:9e:a3:76:6f:bb:bd:15:68:27:db:
cb:f0:66:f5:eb:cb:2a:fe:68:c3:f7:87:49:06:ce:
af:98:8d:63:25:4f:34:95:b8:ee:6c:65:e5:7b:4e:
b4:8f:cd:3f:53:38:87:62:09:3c:1f:44:b4:39:c8:
0d:25:88:58:42:ab:70:63:e2:15:f5:8f:4f:4a:16:
4b:1e:17:0f:8f:68:07:39:6a:72:a1:34:97:d6:d1:
4d:4f:6b:1e:c9:82:35:67:2e:22:b9:78:33:e8:af:
d6:91:95:63:85:67:cb:12:cb:27:88:49:88:36:0c:
cd:9f:5d:2c:3e:78:86:33:19:01:e5:b5:b7:91:0b:
a5:87:53:3f:d3:81:b4:ca:86:5f:cc:a6:44:31:85:
07:d7:59:51:35:01:94:64:63:8f:8d:38:f9:13:70:
bc:45:1a:7d:93:b8:b6:8e:be:7e:28:94:ee:f7:8a:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
2a03:f800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34779
197045
Signature Algorithm: sha256WithRSAEncryption
6c:3c:26:7d:8f:55:b2:c6:53:fb:31:52:4b:cf:ae:d2:d4:85:
18:92:ba:9c:e4:3a:f8:6c:3a:da:ac:6b:dc:96:39:b7:68:bc:
55:1f:7f:53:72:06:3d:71:b3:da:50:dd:8c:17:bc:47:48:e4:
f8:a6:9f:c7:7c:ba:ad:c7:51:77:3f:79:9a:5d:90:f7:4d:3c:
48:b1:7e:0c:f8:cf:b3:65:1d:de:e6:57:b1:d6:b1:ec:9f:ee:
cd:76:83:cd:b7:48:ad:4c:a7:60:56:ab:d8:ce:1d:1e:d0:80:
69:14:00:cf:d5:18:9c:f3:88:bf:71:e5:0a:7f:f1:e1:63:96:
df:93:00:48:7f:37:e3:1d:60:60:48:78:72:a3:39:73:f3:9e:
02:f7:db:25:cc:b5:2a:41:bf:a6:40:6c:27:d9:d4:20:65:3b:
da:9c:57:7b:ca:dc:36:d7:8d:7e:95:35:b0:77:35:e6:75:e4:
76:84:0e:f8:b2:a9:92:a1:2d:be:2f:0e:f9:f9:11:0b:fb:f3:
c1:df:4c:92:c8:e5:0f:6a:0b:02:cd:3a:7d:bf:b5:30:52:74:
d2:c2:3d:d5:d6:59:73:04:a0:f3:18:e0:80:77:fd:d7:17:72:
e7:9f:df:d1:89:3d:87:23:54:1a:fe:01:d6:27:11:b6:94:02:
17:16:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:06 2025 by rpki-client on console.sobornost.net