Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer (raw, json)
Hash identifier: +LNpS0u5s0u+op9cFuw7GeRsU2XlD33UrhJ7xL8tGdA=
Subject key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB53BF185A9B39451422273E2EF764
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44548
AS: 51222
IP: 91.220.199.0/24
IP: 195.54.36.0/23
IP: 195.93.156.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:53:bf:18:5a:9b:39:45:14:22:27:3e:2e:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:be:6c:1a:28:e3:86:e6:a3:e1:30:a9:f3:
0e:a0:55:b4:f1:3d:31:28:d2:d7:68:05:e6:86:07:
84:b9:1d:b6:8b:c6:c7:47:90:c5:3a:a1:04:2f:ff:
3e:62:36:c2:5b:9a:69:f1:83:0f:7c:de:79:19:31:
dd:e1:96:39:3a:f8:57:33:60:cd:f9:0f:e8:c9:b7:
39:bf:66:6c:13:b8:bc:6c:44:33:ce:72:c4:52:bc:
45:aa:ac:22:51:1f:6f:78:d2:f8:90:06:85:d5:80:
ac:e5:52:b8:e2:c0:c2:b1:93:5c:f2:d3:a6:7f:e3:
af:87:f3:b3:48:a1:6a:27:c5:63:4e:56:ff:e4:56:
40:c8:f0:f5:d8:11:73:18:72:32:b6:02:76:ae:59:
7c:6a:48:45:c2:53:df:4b:72:aa:5d:c4:b1:22:98:
28:8c:2d:8e:e8:d9:24:c6:e6:84:e7:4f:5e:b0:14:
f8:b2:18:c3:d3:39:38:ac:f5:72:a2:da:f0:15:b2:
76:ef:d4:6e:16:c4:0e:ee:9b:09:39:57:a5:b0:22:
cc:a7:ac:da:4e:17:92:58:03:24:b4:b3:2f:fd:19:
ee:42:19:33:d3:8d:0f:c2:67:13:51:f5:d7:2d:3a:
fa:a5:cf:a6:cb:d7:74:bf:bd:6a:6d:9d:fd:30:2e:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.199.0/24
195.54.36.0/23
195.93.156.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44548
51222
Signature Algorithm: sha256WithRSAEncryption
17:6e:ee:08:e5:72:3d:c0:01:1f:a3:1c:b2:ce:45:9a:66:8d:
99:85:0c:52:3b:5e:ac:3a:d7:ca:3a:fe:83:bf:c1:a0:66:3a:
dc:ab:dd:8a:d6:cf:94:5a:de:b9:1d:82:16:ed:7f:31:04:ee:
79:85:25:01:d0:a8:66:2a:93:d8:27:6b:97:9a:15:ee:8d:85:
19:16:6d:c5:01:36:1e:a7:98:65:c7:1b:d1:85:5c:d5:9f:30:
f7:b0:69:ec:f8:d6:a7:04:17:1e:55:86:33:a3:0e:03:e0:5a:
ca:70:06:ac:c7:f0:ad:04:fe:3e:cb:09:12:9f:59:67:6c:c8:
39:91:8b:80:7e:7a:88:2f:a5:50:77:e1:eb:69:ae:9e:3d:55:
15:08:f3:b0:57:f0:db:f2:b1:f7:9b:41:49:b4:e6:1b:08:bb:
d3:c1:f3:c2:88:da:23:a1:11:9a:e4:c0:0f:5a:70:26:c2:95:
8a:3b:61:d6:08:47:87:91:27:c4:2e:86:2a:02:2f:9e:6f:0f:
4e:d4:3d:20:bc:54:0e:cf:f2:19:c4:1f:26:b5:a1:e0:c4:29:
4e:69:81:b6:10:57:47:a7:16:e1:09:31:e3:56:c7:39:09:a4:
51:79:73:f1:fd:4f:8b:19:7a:f4:be:7f:f9:8a:a0:f7:54:3c:
9b:22:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:57 2025 by rpki-client on console.sobornost.net