Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
File: S8K4kvLb729UtFNg_rD4QUpahQQ.cer (raw, json)
Hash identifier: kHkTPS7gj/Suj56q9QezyVZQZnIoeriPqkk/HJBaLKA=
Subject key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F18D901102655CB5B717CCA5174C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41182
IP: 195.248.68.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f1:8d:90:11:02:65:5c:b5:b7:17:cc:a5:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:19:0d:6c:4f:9c:5e:2d:ab:c6:b7:64:43:
d5:bd:27:54:57:5d:15:24:6d:88:21:d8:d4:97:3c:
fc:7e:71:f8:79:5e:b1:2c:ef:99:b8:59:d0:5c:2f:
1b:f9:ff:35:15:b2:14:e6:49:c5:b9:0d:85:93:00:
88:52:72:f3:eb:33:7d:0e:ab:8d:64:ab:08:2a:02:
b1:0c:fe:ec:4e:b4:9c:57:3e:f6:8d:49:18:a3:1b:
4f:ec:25:e7:0e:dc:0e:46:4f:79:d1:fc:1d:e2:a8:
b0:ae:d1:f5:da:48:f0:95:f3:ba:43:27:29:7b:13:
f7:7f:70:fd:93:28:c3:4d:d9:01:54:02:a8:9f:2c:
ca:e4:ed:41:ad:0d:2f:e1:26:62:a6:4d:82:62:83:
29:c1:cd:0d:6c:fd:51:bf:62:4d:79:46:fa:28:40:
99:23:71:54:00:c4:86:34:17:12:12:a0:d2:42:8a:
cb:0e:23:b9:0c:59:8b:be:d0:eb:b2:03:0b:cd:d9:
47:7a:43:b1:b7:04:3e:09:56:9b:b2:90:04:76:40:
85:b7:b8:1f:c6:46:8a:d6:cb:e3:c9:0b:0d:12:e4:
f3:38:27:82:e9:74:74:a7:5b:9c:b6:b0:28:a2:47:
22:ea:ea:30:27:78:6a:3a:4b:f0:73:1c:20:39:45:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41182
Signature Algorithm: sha256WithRSAEncryption
6d:d2:65:8e:7c:3a:a6:90:65:1f:22:bd:dc:2a:b7:1d:5d:bb:
ac:0d:71:ef:6e:93:ed:69:84:98:86:ac:2f:24:c1:94:0c:12:
57:3e:02:f6:69:93:e0:a6:06:89:dd:e0:1c:b1:91:bc:39:76:
c8:67:9a:6d:ab:ab:86:18:73:c4:67:2c:52:61:bb:25:cb:91:
45:63:d2:66:77:cc:9b:46:bc:5a:d0:b4:14:c0:06:36:89:40:
88:6e:d4:c8:22:b7:cb:15:1f:ef:2f:70:f5:95:a6:a5:ed:77:
be:52:b8:f9:6f:8d:84:3d:6a:fb:ac:d4:81:fe:9a:fb:37:3a:
12:6f:a4:00:92:18:f6:ca:5f:3b:ea:00:8f:8c:c1:81:15:cf:
0d:ef:7d:8b:4c:80:68:cd:18:42:40:fd:e7:d7:ab:be:6a:45:
16:4c:6f:af:54:39:67:0b:ef:94:28:ee:47:67:4e:b5:13:e2:
d8:e2:2c:0a:8e:2b:3d:96:79:ee:53:55:51:bf:c5:cf:17:6b:
f5:be:72:49:07:c3:3b:ed:f3:3c:a5:ee:3b:e2:95:d8:27:be:
9b:f9:99:ff:4f:72:9b:c8:3f:ef:bd:5b:2a:98:69:4e:05:b3:
48:69:a5:e8:ad:e8:06:91:94:54:d8:2a:6d:4a:c2:cc:55:70:
70:c4:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net