Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
File: HYKLeBsHn7Q92wynXcAm511_JeQ.cer (raw, json)
Hash identifier: Y792PmDLQ0h80HPet95K2apbrXsAKY0JT+8dtzlOps4=
Subject key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4184624D8D624D6A8ECF91491723
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31370
IP: 89.249.240.0/20
IP: 109.72.224.0/20
IP: 185.215.60.0/22
IP: 193.27.41.0/24
IP: 193.39.160.0/22
IP: 2a01:94c0::/32
IP: 2a0c:dc40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:84:62:4d:8d:62:4d:6a:8e:cf:91:49:17:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:e8:fe:47:61:74:8f:b4:86:4b:51:8c:32:
c8:d8:ee:4d:5b:39:ea:9e:98:a6:49:e0:6f:bd:47:
0b:34:17:c4:6a:1d:69:41:03:3e:1e:53:7d:bc:f4:
8c:c9:49:1e:97:f8:91:29:5b:1b:8b:c6:e1:26:82:
88:57:1e:b3:ca:d3:59:c8:76:00:d3:21:6f:12:f1:
53:53:cd:10:f2:26:e4:8c:ad:c9:26:34:a4:56:e4:
4e:d3:b2:8b:ec:b6:8c:f0:3d:aa:73:25:a5:84:bb:
2d:56:d8:9e:99:0c:b3:ea:79:bd:9c:ad:8f:0b:0c:
50:fd:63:8b:eb:5e:c3:e2:a7:59:1e:f1:cb:56:72:
59:9b:95:f6:ec:cf:fc:98:90:ad:4b:c4:dd:fd:a4:
b2:0c:b3:c7:8d:29:8e:76:e8:c5:41:f3:ee:e0:9d:
27:26:2b:52:28:34:ab:97:6b:39:89:bb:cc:a0:ce:
ed:21:3b:c7:7b:b6:3c:28:56:43:29:62:14:51:68:
59:2f:a2:41:b1:2c:1d:71:cf:92:f1:df:93:60:f4:
5e:a8:27:05:9c:d5:54:5c:42:57:7f:d2:18:1d:10:
f6:bc:85:90:ba:a8:7c:af:bc:a9:fe:23:79:34:98:
87:a7:0b:d3:5c:bb:f8:62:90:63:9b:a1:c6:65:5f:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.240.0/20
109.72.224.0/20
185.215.60.0/22
193.27.41.0/24
193.39.160.0/22
IPv6:
2a01:94c0::/32
2a0c:dc40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31370
Signature Algorithm: sha256WithRSAEncryption
7f:61:bb:9b:6d:4a:27:6e:ab:d4:f3:29:00:eb:06:56:5e:55:
14:23:e0:7f:ea:90:12:98:54:36:7a:76:d3:93:49:0d:7e:17:
c5:bb:bb:88:40:d6:1d:0c:43:59:b6:b2:b4:32:9a:f2:f7:bc:
be:80:06:78:30:a2:3d:59:5f:36:f7:4a:35:07:64:58:d0:60:
8b:c6:aa:88:00:92:dc:37:b2:e9:2f:99:3c:17:5b:f1:76:23:
80:5f:9c:93:ab:3d:66:04:f4:e4:c7:c0:bc:70:7c:68:d0:25:
7e:35:44:69:44:4f:1e:04:f9:e6:77:0d:d3:e8:54:dd:35:6b:
1a:7f:3b:a5:8d:d5:1a:8a:fb:1e:71:f5:e4:8b:dd:ff:b9:04:
08:91:24:4f:7f:13:f4:c6:d9:f7:26:8e:44:fd:6e:1a:d0:aa:
26:8d:ea:18:a9:2e:cc:c8:9c:1e:bf:64:88:b4:ac:f9:c6:d0:
cf:ba:a1:92:b7:93:3d:5c:cd:e0:e8:f4:62:15:8c:00:b0:35:
0f:e1:6e:a6:d2:19:1c:ef:4a:fa:51:99:cb:ec:f7:6a:85:88:
52:b5:ac:25:20:6b:1c:54:0e:85:0c:30:62:d5:07:66:48:6b:
96:c6:4e:3a:39:0f:1b:d8:db:81:c1:fa:7c:83:e5:f7:de:15:
c3:b7:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net