Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
File: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer (raw, json)
Hash identifier: jcZZPYF128XvVQmSliUjn7HCGA98YM5cSEEgfI/FYpI=
Subject key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5DEC3CA3FA3C269D2386D30BEAA8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205394
AS: 206637
AS: 207827
IP: 46.226.72.0/21
IP: 139.28.100.0/22
IP: 185.176.124.0/22
IP: 185.180.172.0/22
IP: 185.201.164.0/22
IP: 2a00:5a00::/32
IP: 2a09:540::/29
IP: 2a0a:ab80::/32
IP: 2a0a:c840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:de:c3:ca:3f:a3:c2:69:d2:38:6d:30:be:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:c0:5f:f4:df:9c:1b:97:9e:81:e7:21:b7:
f0:fa:69:46:97:77:b9:14:03:89:08:6b:8c:7b:49:
79:be:7b:7e:ce:52:9a:5c:34:87:53:9f:97:eb:42:
05:30:7a:39:86:58:ee:83:5c:34:ca:85:6a:0c:74:
ce:3c:85:b0:0b:28:08:4b:eb:a0:65:82:b9:8a:1d:
42:f6:90:9b:a6:42:14:5b:d0:24:8d:f5:3a:b1:d8:
fe:1d:2b:f4:9a:41:30:d7:52:7a:30:b8:e1:b3:f1:
e6:63:ef:ad:6c:e5:86:31:62:31:6c:c4:e5:1f:38:
83:d3:78:16:9d:34:7b:ac:b6:ad:b6:fb:e7:47:46:
04:4e:e1:15:54:79:b5:00:20:20:b4:53:49:e6:29:
77:6a:45:2e:d2:8d:5c:63:25:2d:e0:37:15:a8:9d:
b1:e2:75:47:59:86:f5:93:d5:52:28:73:ef:4f:ec:
b1:fb:10:a2:56:24:d6:c9:aa:e8:1c:70:d5:fd:4b:
dc:dd:3c:4c:39:13:93:d0:b6:06:57:cc:f0:73:20:
a7:ae:6a:24:90:33:39:ce:ff:b3:9a:22:52:19:32:
e1:40:a4:f9:e0:8f:9e:0f:a6:7e:16:41:b7:66:b3:
0c:80:8f:25:99:d0:8a:76:3c:91:e7:3b:bd:d9:49:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
139.28.100.0/22
185.176.124.0/22
185.180.172.0/22
185.201.164.0/22
IPv6:
2a00:5a00::/32
2a09:540::/29
2a0a:ab80::/32
2a0a:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205394
206637
207827
Signature Algorithm: sha256WithRSAEncryption
52:03:c1:ea:24:33:64:50:cd:91:13:1e:f5:14:07:4c:fe:80:
a0:b7:a1:e3:3a:4f:bb:a5:2d:92:16:11:15:7f:55:70:a1:f3:
15:5f:56:e1:e2:9d:46:12:b9:de:a3:b2:b4:28:27:30:d6:ca:
bb:55:1c:dd:15:e7:55:91:8a:84:08:68:cf:95:cf:2c:f6:c6:
61:f1:75:f7:2e:3f:91:96:86:0c:65:dd:6a:17:a4:5b:97:e2:
c3:87:ec:2d:62:77:b8:55:36:3f:9c:69:c3:3c:f4:fd:2b:53:
a1:7c:8c:77:5e:1a:8b:3b:11:4f:5d:01:e3:8a:08:a2:00:9a:
ad:84:73:74:ee:5f:d8:2e:82:a8:01:08:b8:59:51:f9:f7:33:
9d:d1:98:ea:fe:93:ad:b6:2f:b3:17:cd:04:93:63:2e:f7:e7:
85:a8:7e:8f:d2:95:7f:f4:f8:b1:7f:17:b4:e6:d5:b0:5b:1e:
72:b0:cd:ab:08:55:52:9f:1e:81:60:2c:85:fc:f8:8d:90:b6:
b6:84:10:f8:36:eb:3d:1f:51:a3:5d:78:28:7f:35:3f:1e:23:
bf:b8:a4:b3:87:0f:2c:fb:85:ee:ee:cf:06:26:c0:5b:27:77:
fb:14:58:2d:d3:2e:56:af:da:57:38:7d:9c:b7:e4:c8:8f:1f:
fc:52:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:13 2025 by rpki-client on console.sobornost.net