
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer (raw, json)
Hash identifier: JCyUi3MKV7E1ZxB/UqAf162CQtdW9gAkl7TrB9Zf+6g=
Subject key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274826D460A01C48BDD6F387CC62FFBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213038
IP: 31.220.151.0/24
IP: 89.36.197.0/24
IP: 89.40.170.0/24
IP: 89.42.24.0/24
IP: 103.95.116.0/22
IP: 185.145.252.0/22
IP: 2a0e:9980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:26:d4:60:a0:1c:48:bd:d6:f3:87:cc:62:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:e9:df:f7:ce:ef:14:80:b9:f1:6d:d9:73:
46:71:d0:3b:dc:01:a4:f3:31:3a:38:75:2a:54:c7:
fe:86:62:d3:b7:bd:7f:9d:2c:86:5d:ce:05:47:d3:
8e:90:a6:bd:de:4f:52:b0:10:14:70:ae:91:d0:32:
32:51:65:7a:6b:e1:ff:7a:3b:ff:8d:63:75:c3:9a:
ca:69:65:e6:35:2f:3e:d5:62:ec:be:bd:a9:d3:3d:
42:bf:97:1e:57:cb:bc:58:77:c9:fb:18:45:22:62:
1f:24:d9:fb:b1:5c:14:c7:c7:b8:92:4a:9e:98:85:
2d:5a:82:51:4e:a7:52:cc:15:a7:fe:a3:56:80:52:
34:12:ef:af:ad:5e:52:04:cf:68:4a:f6:6c:dc:52:
6c:94:ff:a9:a4:16:10:26:40:f4:bd:70:84:17:79:
e3:da:b6:00:ef:5a:a7:ff:e9:c2:a4:0b:34:84:48:
0f:d8:06:b7:03:18:13:74:5a:2a:2f:ec:10:5c:3f:
35:6d:a6:b0:89:79:9b:13:60:28:ef:fb:e9:32:7d:
9c:0e:5d:91:f0:06:51:f9:1d:21:f2:d1:43:ea:3b:
17:58:7b:8a:f0:2c:07:d5:2d:70:8e:9e:af:4a:c7:
bf:ae:fb:5d:8c:a4:0c:9d:18:d9:91:9a:13:4e:58:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.151.0/24
89.36.197.0/24
89.40.170.0/24
89.42.24.0/24
103.95.116.0/22
185.145.252.0/22
IPv6:
2a0e:9980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213038
Signature Algorithm: sha256WithRSAEncryption
a7:5c:b0:ae:30:8a:80:60:fd:1a:e2:38:8c:37:e6:86:0b:e2:
57:d5:1c:99:c1:8c:aa:8b:3c:a0:c1:1c:0e:48:c9:86:87:84:
c9:a8:45:1c:a4:8c:20:d5:c1:c0:03:61:f3:40:40:4c:59:50:
19:ad:d9:e3:4a:e4:4e:78:37:14:c7:b2:08:78:bb:ab:e4:d1:
40:49:8b:37:e8:fc:39:53:4d:e7:65:ee:ad:68:9f:ee:aa:df:
d4:a9:8c:49:2e:79:ff:a9:44:eb:04:8f:48:b4:34:8d:7f:4a:
b4:7a:16:b3:b6:a9:e2:28:35:1e:7d:e9:07:30:37:f9:cf:b5:
e3:f4:6e:ae:04:59:5f:fe:c5:da:e3:39:5d:6d:58:d8:f1:9c:
d5:55:35:f5:35:c2:d0:61:cf:6f:dd:75:b0:80:c0:0a:20:5f:
a7:e6:bc:af:0b:74:36:e8:67:72:97:8a:71:63:1a:4a:d4:24:
47:82:6d:5c:ed:a2:b1:9f:2b:bf:9f:9b:7c:00:f4:00:f9:24:
8a:b4:fa:e6:15:95:f0:4b:44:64:60:9e:2a:4b:64:83:c7:5f:
0f:c6:ee:a2:b7:13:d9:f4:d2:82:ed:dc:3e:dc:11:5f:2b:8f:
8d:35:93:21:33:53:79:a6:43:73:df:9a:6d:c6:f9:2c:3c:37:
17:ff:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net