Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.cer (raw, json)
Hash identifier: gcWyWqdXc3KQ1Stj9jqaJ7GbHbtoC1BHEaSJN473WTI=
Subject key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA56D7722BD5437113C2F3727151CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211174
IP: 31.207.52.0/22
IP: 31.207.60.0/22
IP: 83.98.204.0/22
IP: 94.46.188.0/22
IP: 146.185.64.0/19
IP: 185.63.64.0/22
IP: 185.104.84.0/22
IP: 2a04:f340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:d7:72:2b:d5:43:71:13:c2:f3:72:71:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:18:94:b2:a1:ad:ee:e5:68:43:4c:8d:2c:
4c:03:b8:81:45:f0:4d:62:3a:36:83:d4:ff:54:8e:
56:13:9a:1c:f2:26:75:48:e5:59:92:46:f3:e4:51:
c1:85:cf:39:42:e8:96:f5:f7:bf:4b:38:72:f1:d1:
49:d0:30:2f:f4:c4:b6:05:d8:71:6e:b9:43:6f:9b:
ff:27:9d:98:1b:36:b7:c3:51:82:4f:80:9d:90:6f:
8d:26:b0:b8:bd:50:b3:c6:09:bf:c5:47:ca:f3:6c:
d4:96:e6:cb:e3:38:03:9a:a0:b0:af:92:9a:cd:a4:
07:87:8a:2f:f7:f1:96:d4:fc:fe:bd:9c:f9:06:3a:
41:33:6c:ef:d0:e9:15:05:65:ad:1a:af:a6:8e:7d:
4b:1c:34:51:ef:9c:81:70:98:9a:dc:20:8a:58:99:
23:81:d0:5b:56:8c:ed:a6:28:e3:15:0d:b3:88:d5:
6e:14:e6:9c:4b:cd:33:27:88:32:cb:84:4c:42:66:
33:90:65:21:e7:cf:d7:80:81:76:96:fc:e0:47:02:
5f:3b:e8:47:ac:4c:1f:88:ca:9a:7c:32:34:03:fe:
ad:4a:c3:c9:6a:4f:9f:05:59:00:6d:42:2f:ff:5f:
51:46:6b:c3:48:1c:c2:ce:ab:c6:6c:95:ac:4e:c5:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.52.0/22
31.207.60.0/22
83.98.204.0/22
94.46.188.0/22
146.185.64.0/19
185.63.64.0/22
185.104.84.0/22
IPv6:
2a04:f340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211174
Signature Algorithm: sha256WithRSAEncryption
3c:7e:10:5f:96:ae:16:c0:a1:8c:d7:26:a5:29:2c:19:ff:75:
1a:1e:e2:b1:3b:24:49:70:5b:55:c9:43:60:78:0b:06:38:75:
0f:a3:05:f0:af:35:6e:06:c8:85:95:71:40:4d:a2:bb:17:d7:
36:16:75:f4:ac:d1:fc:ba:76:b8:1c:2c:d2:04:8d:e9:25:ed:
09:18:b4:2a:fb:a4:40:f7:54:0b:df:0e:d7:c8:42:f3:4f:cf:
3b:76:20:65:d6:33:07:ec:bb:2b:aa:31:45:1c:ca:fe:df:8e:
76:cd:a5:8f:13:a3:b9:a5:64:6c:a7:a8:ba:4e:25:f0:dc:4a:
77:f4:e3:60:ea:2c:b7:95:c6:93:a4:9c:6c:72:2c:b0:80:df:
0d:08:e5:2b:f3:0a:02:73:c3:70:39:75:6b:7c:f5:3c:d8:5b:
b7:a0:cb:5a:a8:68:2f:46:cb:29:3c:43:aa:ec:2e:f0:0b:23:
3d:1e:4b:a1:7c:cd:5a:42:49:1f:e1:39:6a:cc:fb:2a:59:67:
9b:53:06:94:c0:40:38:82:b2:51:2b:27:37:67:79:61:29:42:
06:84:65:2f:fa:5e:37:95:b9:e2:b9:28:05:00:15:fc:d6:b1:
5d:8c:c8:a0:c8:e6:22:81:81:f7:38:7e:d0:5c:2e:11:c8:09:
96:15:80:d5
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAZQf+lbXcivVQ3ETwvNycVHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2UwZjdiYmJlNDAzMWEyNGVmMWI5ZGIxOTZhYWIwNjQyZTg0YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WUYlLKhre7laENMjSxMA7iBRfBN
Yjo2g9T/VI5WE5oc8iZ1SOVZkkbz5FHBhc85QuiW9fe/Szhy8dFJ0DAv9MS2Bdhx
brlDb5v/J52YGza3w1GCT4CdkG+NJrC4vVCzxgm/xUfK82zUlubL4zgDmqCwr5Ka
zaQHh4ov9/GW1Pz+vZz5BjpBM2zv0OkVBWWtGq+mjn1LHDRR75yBcJia3CCKWJkj
gdBbVoztpijjFQ2ziNVuFOacS80zJ4gyy4RMQmYzkGUh58/XgIF2lvzgRwJfO+hH
rEwfiMqafDI0A/6tSsPJak+fBVkAbUIv/19RRmvDSBzCzqvGbJWsTsW2dwIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFCfg97u+QDGiTvG52xlqqwZC6EoGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzhhYmE3
MS0zYmE4LTRiOGQtOGViNi0zNDZhM2VjMTg2OGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvOGFiYTcx
LTNiYTgtNGI4ZC04ZWI2LTM0NmEzZWMxODY4Yy8xL0otRDN1NzVBTWFKTzhibmJH
V3FyQmtMb1NnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQCH880AwQCH888AwQCU2LMAwQCXi68AwQFkrlA
AwQCuT9AAwQCuWhUMA0EAgACMAcDBQMqBPNAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM45jANBgkqhkiG9w0BAQsFAAOCAQEAPH4QX5auFsChjNcmpSksGf91Gh7i
sTskSXBbVclDYHgLBjh1D6MF8K81bgbIhZVxQE2iuxfXNhZ19KzR/Lp2uBws0gSN
6SXtCRi0KvukQPdUC98O18hC80/PO3YgZdYzB+y7K6oxRRzK/t+Ods2ljxOjuaVk
bKeouk4l8NxKd/TjYOost5XGk6ScbHIssIDfDQjlK/MKAnPDcDl1a3z1PNhbt6DL
WqhoL0bLKTxDquwu8AsjPR5LoXzNWkJJH+E5asz7Kllnm1MGlMBAOIKyUSsnN2d5
YSlCBoRlL/peN5W54rkoBQAV/NaxXYzIoMjmIoGB9zh+0FwuEcgJlhWA1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:15 2025 by rpki-client on console.sobornost.net