Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer (raw, json)
Hash identifier: KDQ7tbsVtHeqQQvIeabTSxjxQefQXP3T32jVkBrISKA=
Subject key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F33F78AC446FE11B2500E2F69961A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.111.24.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:33:f7:8a:c4:46:fe:11:b2:50:0e:2f:69:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:61:73:bb:e4:07:96:8d:de:4a:18:d1:bd:
c5:f0:fa:d4:63:3c:5e:e1:30:69:e9:65:c6:d2:57:
6d:97:9d:a3:93:8e:eb:36:a1:73:22:dd:21:eb:d5:
44:af:9a:a2:af:b1:0b:fa:46:d4:97:e5:22:8b:66:
00:44:20:a7:4d:5c:5b:33:9a:cb:7f:7b:6f:ce:00:
f2:fb:94:f0:27:0b:24:71:14:e8:88:5d:e8:df:ce:
29:97:f1:6a:13:a8:0d:7d:10:39:9f:d9:ec:3c:38:
c9:a0:7b:1c:f6:f0:2a:13:67:dd:3d:e5:86:c8:49:
12:ef:cd:5a:41:7c:05:74:c0:89:a6:05:16:96:15:
97:cf:73:a2:08:fc:15:2a:77:e8:63:26:6f:c3:90:
64:ef:9d:b8:2d:03:1b:af:34:8a:6a:84:18:72:cf:
56:ae:f5:f8:2c:dc:a6:1b:6c:65:36:82:04:c4:3a:
d7:07:43:75:6b:27:29:09:65:eb:64:19:ab:08:a9:
d1:a2:6b:bc:b0:73:91:0d:61:39:b6:08:5b:36:5a:
cb:27:ae:79:24:ca:04:2d:69:3e:35:83:0c:de:7d:
85:0a:35:c6:01:3f:1f:32:91:28:98:1b:42:d6:dd:
f8:f0:46:f2:29:92:55:e9:83:c2:ef:a2:7c:21:f5:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:4e:e5:00:98:e6:f5:23:65:e3:b1:31:8a:81:dd:6f:d8:66:
af:aa:30:bb:05:df:15:41:fa:9d:0c:1a:07:e8:82:94:e4:8b:
c9:9c:53:e3:fd:e3:7d:ad:65:06:4e:7b:6c:71:83:c3:48:bb:
84:e9:2e:b5:48:05:08:76:ec:21:58:31:ad:8a:aa:c2:4e:ba:
78:2a:09:bb:27:a2:f1:cb:ba:27:e0:56:b2:27:45:b2:31:93:
62:e1:d6:0e:62:0f:ab:7c:d0:73:35:44:86:69:b5:5c:87:38:
aa:66:f8:e7:8e:96:b0:c0:0b:bc:3b:69:94:e6:6b:f9:61:ee:
33:dc:22:8f:6b:72:a7:fa:4e:67:a8:07:97:3e:27:4a:6c:71:
33:bb:3d:95:b1:a9:ea:9f:24:e9:7c:18:71:33:ed:3b:b3:d3:
b5:01:d5:c0:f5:30:f6:99:46:be:87:35:c0:ca:7a:13:10:42:
0a:5e:3d:63:5e:bd:38:1e:0e:3a:bf:82:0b:fa:5f:51:bf:59:
13:90:b1:eb:39:ec:2f:9b:22:b0:26:d7:2f:38:00:cd:2a:d0:
1f:33:48:31:63:1e:06:c2:37:58:5e:bf:e5:5e:b4:ef:5b:bb:
27:29:5c:44:9f:31:9a:f6:ad:51:cb:12:e4:bb:67:9b:63:1b:
ff:1e:77:cb
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQljzP3isRG/hGyUA4vaZYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTI2YzEzOGFmYTQyYTdkNjVjYzc3NjFhYzRmMTg2ODM2NmZhN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5hc7vkB5aN3koY0b3F8PrUYzxe
4TBp6WXG0ldtl52jk47rNqFzIt0h69VEr5qir7EL+kbUl+Uii2YARCCnTVxbM5rL
f3tvzgDy+5TwJwskcRToiF3o384pl/FqE6gNfRA5n9nsPDjJoHsc9vAqE2fdPeWG
yEkS781aQXwFdMCJpgUWlhWXz3OiCPwVKnfoYyZvw5Bk7524LQMbrzSKaoQYcs9W
rvX4LNymG2xlNoIExDrXB0N1aycpCWXrZBmrCKnRomu8sHORDWE5tghbNlrLJ655
JMoELWk+NYMM3n2FCjXGAT8fMpEomBtC1t348EbyKZJV6YPC76J8IfVTJwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCUmwTivpCp9Zcx3YaxPGGg2b6fjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0Lzg4NmYw
My1kYzkxLTRhNzQtYjAzNC1iMDYyMjhmY2YyYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvODg2ZjAz
LWRjOTEtNGE3NC1iMDM0LWIwNjIyOGZjZjJjMS8xL0pTYkJPSy1rS24xbHpIZGhy
RThZYURadnAtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwW8YMA0GCSqGSIb3DQEBCwUAA4IBAQBeTuUA
mOb1I2XjsTGKgd1v2GavqjC7Bd8VQfqdDBoH6IKU5IvJnFPj/eN9rWUGTntscYPD
SLuE6S61SAUIduwhWDGtiqrCTrp4Kgm7J6Lxy7on4FayJ0WyMZNi4dYOYg+rfNBz
NUSGabVchziqZvjnjpawwAu8O2mU5mv5Ye4z3CKPa3Kn+k5nqAeXPidKbHEzuz2V
sanqnyTpfBhxM+07s9O1AdXA9TD2mUa+hzXAynoTEEIKXj1jXr04Hg46v4IL+l9R
v1kTkLHrOewvmyKwJtcvOADNKtAfM0gxYx4GwjdYXr/lXrTvW7snKVxEnzGa9q1R
yxLku2ebYxv/HnfL
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:16 2025 by rpki-client on console.sobornost.net