Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer (raw, json)
Hash identifier: frT2LXFifEuMQsRMEqBM6NGcAIfrHMmAP1OLSXPDeQ0=
Subject key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E6954CEF27D5E8C15C2DCE3C30FD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31704
IP: 91.216.170.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:69:54:ce:f2:7d:5e:8c:15:c2:dc:e3:c3:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46224dc9396e580ff7120f257353a70c72379c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:a9:64:55:b3:f0:a5:ab:f3:8c:a1:ba:ed:
52:26:3f:ea:13:65:ee:80:52:c0:d0:59:98:f1:1f:
11:be:ed:00:da:92:f7:4b:10:69:9b:c6:98:64:8c:
18:ae:db:a0:19:23:51:bd:5c:b6:2b:c1:f3:26:91:
77:1b:02:7b:e2:99:45:13:60:d0:ba:9b:f6:99:5f:
03:56:36:f9:0f:76:03:08:2d:8c:11:d2:6f:ba:ac:
d9:4b:ee:d9:e1:6c:23:94:8c:27:57:b8:29:14:40:
79:5a:18:57:cd:2a:28:ba:f4:99:37:bf:0e:ec:95:
47:59:1c:71:cd:95:63:3e:6b:cc:c4:87:c7:97:30:
73:1f:fe:42:bd:64:74:7d:5a:9f:e9:10:ad:7d:94:
6f:84:19:61:a9:76:78:22:de:3d:5c:2c:98:df:91:
56:f3:2b:27:9a:35:99:8c:7b:8d:d6:13:5e:e3:c0:
d2:83:91:5e:8b:46:4e:4d:61:47:40:5a:8b:af:63:
10:97:eb:3f:ae:2e:0a:8b:d7:b9:15:4b:fc:6e:8a:
de:d2:06:3b:be:be:49:02:c0:61:19:ff:a6:d2:71:
15:6a:04:89:ac:8b:50:06:1b:d5:82:d6:92:8b:c3:
0e:85:bb:57:11:91:33:03:3d:37:b4:ae:9d:f6:90:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.170.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31704
Signature Algorithm: sha256WithRSAEncryption
3b:87:a6:97:e9:6e:75:85:f8:5f:30:ef:ac:e9:37:fb:92:74:
f5:1a:2e:be:7e:a3:d3:bf:eb:68:a5:d8:c5:5a:c9:74:8a:87:
c0:c8:1e:03:e8:89:33:d5:85:86:32:03:d0:f4:4c:e5:4b:b4:
72:62:6e:a5:42:ae:ce:40:e8:88:06:4d:ee:9a:88:52:20:3a:
00:59:3b:32:cc:75:34:5f:c1:72:0d:64:e3:bc:86:00:32:f0:
35:c4:70:67:e6:90:d5:9c:f1:90:c0:60:e2:19:6f:7b:58:d6:
54:12:71:e4:d0:54:2f:23:1a:dc:6a:f3:b9:93:37:b7:d4:d7:
b5:dc:5e:e4:b4:9d:d1:c7:b6:6d:64:0e:7b:48:5d:b4:fc:82:
9c:8d:96:f3:74:64:a5:ec:6a:f8:83:ca:3a:f7:a3:ad:8b:23:
20:ba:41:60:ac:13:f9:1b:36:89:e2:1a:04:07:04:ab:18:26:
d6:ed:4c:3d:07:dc:e7:ae:85:a3:02:c0:56:0f:c8:d1:97:10:
47:a9:38:38:39:23:be:2d:9a:d0:02:49:ea:30:8f:ce:93:86:
9c:d7:df:c5:29:ac:39:83:e2:cd:43:1f:67:21:8a:36:4d:0d:
0c:c5:91:82:8d:ef:c5:aa:23:f5:6e:1f:1e:8f:81:65:bb:20:
53:66:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:57 2025 by rpki-client on console.sobornost.net