
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
File: R1oGyte9DD25-KOB8euc1sdaqyg.cer (raw, json)
Hash identifier: aZTgGw9edFE7YqQ5Ns8aAeXoyn6u7XreKNkkOw8j4ko=
Subject key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194F4C50F9CB0E0E6A356160966A3B7FECB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Feb 2025 11:29:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8270
AS: 49412
IP: 188.95.176.0/21
IP: 193.34.142.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:c5:0f:9c:b0:e0:e6:a3:56:16:09:66:a3:b7:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 11:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:c3:8f:12:8f:4b:bf:6f:26:81:36:00:0d:
3e:73:9e:5b:16:4d:c4:a3:94:f6:ce:b8:e5:b1:3d:
2e:f6:91:de:fc:f6:fa:2f:a4:ec:18:04:68:57:03:
cc:b4:c1:cf:22:f3:53:82:f4:51:01:82:5e:cd:6e:
7c:f9:ec:aa:c0:2a:be:42:2f:17:da:42:db:49:39:
61:89:78:98:e8:0b:70:39:d7:35:b5:d7:ba:88:8b:
1f:f0:ee:dd:a4:8a:4d:94:34:59:4a:e0:2b:13:ce:
b8:26:63:05:5a:eb:7c:bf:88:5a:b7:8f:17:42:69:
ee:e7:3e:6e:5b:1a:86:e8:da:c0:97:8a:64:1b:a5:
be:d5:25:3c:e7:93:17:86:59:08:27:dc:91:ad:40:
1a:c0:9c:03:fa:20:e1:f4:33:59:22:c6:72:eb:72:
c4:29:b6:e1:ce:59:54:4e:aa:9b:39:ca:4b:d9:04:
29:e5:13:34:fe:35:5c:05:50:6b:d6:6c:bc:9b:d4:
e3:76:4e:98:99:89:ea:65:b7:13:9e:59:a5:9e:e6:
d1:78:d2:d6:b5:c3:46:84:10:d7:f5:7e:d8:5b:fb:
b3:1c:1a:30:81:93:c1:9a:37:5d:6d:ee:6c:0f:29:
db:34:96:c3:93:47:ce:69:23:94:f6:86:8f:ca:46:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.176.0/21
193.34.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8270
49412
Signature Algorithm: sha256WithRSAEncryption
4c:db:8e:33:77:c0:53:a9:58:9f:a1:e0:69:e2:9e:12:d1:5f:
82:ab:df:70:7d:b3:34:e8:5b:a7:db:81:49:c5:74:07:45:45:
53:90:5f:54:fa:26:99:20:74:f7:a4:04:cb:04:06:90:1f:31:
07:5b:3d:2e:4c:05:0c:fc:6c:81:a2:03:db:07:85:90:b7:51:
33:97:17:11:3a:2a:ac:00:61:b4:f5:5a:2d:57:01:f7:35:88:
8d:92:01:1a:d5:b3:e0:b0:f1:58:82:0a:a9:0b:ed:63:a6:26:
39:17:2a:9c:fb:9d:2e:51:0a:3a:92:a0:92:dd:fb:95:61:d2:
e7:3b:bd:8c:f2:5b:93:7c:02:57:1a:38:29:5b:9e:e2:01:ad:
a6:96:af:bf:f1:56:06:58:0c:45:1c:a1:e9:5a:ba:d4:81:f8:
26:d4:c6:64:3c:03:01:19:12:02:2c:af:f7:82:2e:99:c4:33:
4d:f4:16:b0:9a:4b:34:85:ef:c6:e0:fc:97:fb:1c:ee:74:b9:
56:02:d0:17:c9:d9:cf:d7:bb:f7:d7:4e:a7:44:b1:04:06:06:
8f:4e:c4:3b:93:9c:ab:25:ca:d0:37:f1:cd:b8:d3:5a:ce:53:
e7:00:e8:f8:37:b7:56:0f:d1:f0:b5:d6:a2:f3:62:82:1e:73:
de:56:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net