Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.cer (raw, json)
Hash identifier: dUP0EAqAKuzb+sp7gU3wcAwhDS3mPqzAJpX4/oqySEo=
Subject key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682B64D618E2F1930DAECE50ED0BB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43500
AS: 50651
IP: 185.130.208.0/22
IP: 185.139.218.0/23
IP: 195.189.144.0/24
IP: 212.46.44.0/24
IP: 2a12:b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2b:64:d6:18:e2:f1:93:0d:ae:ce:50:ed:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:a3:06:7d:01:6c:2f:9b:ec:b5:e2:ee:6e:
92:a5:a7:6d:6e:23:dc:79:30:f0:54:f5:77:3d:f5:
33:88:b2:83:0e:1c:7a:ac:fd:ed:02:38:fc:33:ac:
ca:81:24:aa:8b:91:c1:c6:ba:25:58:96:63:18:cc:
f2:81:72:74:b0:25:f8:2e:5c:43:d4:77:72:bd:56:
dc:cc:29:54:e7:71:ed:f8:f8:22:65:55:2f:1f:29:
38:e4:21:14:8b:9c:5d:06:ac:fc:b5:0e:3d:e1:e5:
c1:c8:1d:4e:8a:be:e3:1f:57:56:da:ee:aa:06:87:
99:21:7b:2d:96:6f:b4:e9:bc:f0:e3:23:67:18:07:
15:ec:28:74:98:61:d8:67:5a:4d:d6:ce:5f:f7:29:
86:ac:69:fc:f3:32:d6:9e:c2:77:95:0d:d3:3b:18:
0d:75:75:27:65:b3:70:4a:80:8a:4d:87:bb:ab:72:
ae:71:5a:6a:08:3c:56:d9:aa:d1:d8:44:51:29:28:
ed:36:74:a9:58:ac:de:62:a7:e2:fa:03:e8:1a:d9:
9c:05:9d:81:9d:59:59:95:03:f8:5e:a8:79:8d:c4:
63:02:87:df:46:64:18:21:bb:d9:ce:e8:9b:76:c8:
3e:0c:cb:08:ff:a2:74:2d:93:2b:c3:1d:aa:5c:62:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/22
185.139.218.0/23
195.189.144.0/24
212.46.44.0/24
IPv6:
2a12:b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43500
50651
Signature Algorithm: sha256WithRSAEncryption
9f:81:f2:2f:85:49:3f:c7:68:ec:41:21:6b:40:a5:2e:78:50:
21:05:e0:9e:ea:6e:fa:77:5b:6d:cb:9c:3f:89:25:1f:2d:c7:
78:85:c5:23:ba:79:32:b6:ba:e1:7d:1d:3f:59:84:36:f1:63:
49:59:d4:bb:58:1e:ba:1a:d2:cd:22:04:40:e0:cb:a9:0b:96:
84:18:04:92:96:24:e8:d6:b2:56:c5:65:b5:7a:c9:fb:b6:a1:
4b:52:7c:6f:5c:f5:73:6c:57:2a:21:92:df:9f:99:80:4c:3b:
7f:a8:04:5b:b6:3a:08:27:0d:1f:8e:67:52:ea:54:07:b4:31:
80:f7:04:11:3c:11:46:f3:aa:23:d9:08:87:84:ca:93:17:ca:
ea:4f:47:19:8b:e6:d2:2b:99:54:c2:f3:f5:7e:b2:86:af:7f:
57:63:d8:12:e5:2d:98:f7:88:1e:a8:fc:6d:f2:e8:de:b5:74:
72:7a:d6:ae:7a:88:36:3e:81:ce:b3:00:27:95:ef:7f:8d:61:
cd:c7:a4:de:8a:71:b2:5d:3b:26:1b:d8:b8:2a:64:43:f1:21:
0d:e3:e4:69:cf:2e:9f:70:cd:62:6e:56:fc:25:c2:13:71:4c:
18:56:96:e7:c6:9e:09:8e:3f:89:1f:85:84:75:27:7b:84:ad:
25:5e:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net