Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.cer (raw, json)
Hash identifier: YcjbIGgN3ZYsVx9iigMSKDBI67p/glgfC13/U3JjRiU=
Subject key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01955C76BE27FBB58F4C6FF9166A6AE820FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Mar 2025 14:44:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213096
IP: 93.177.83.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:76:be:27:fb:b5:8f:4c:6f:f9:16:6a:6a:e8:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 14:44:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:18:60:6d:5e:6a:d4:13:9a:d4:bd:7b:e4:
83:f2:4b:c8:8c:fc:34:10:ba:cb:9c:fe:78:ed:f4:
69:82:b5:53:c2:5f:d9:8c:37:f6:e8:91:5d:2f:ed:
a1:23:87:8e:02:7b:40:b5:3e:f3:7c:e0:ac:f5:94:
9e:ed:dd:27:97:17:04:3c:84:10:29:e1:c6:42:05:
79:04:7f:a3:df:79:aa:ba:24:b4:aa:04:bb:88:8f:
c1:3e:85:ba:62:55:0c:80:6e:0e:87:23:c6:e5:f0:
90:a2:d1:28:c0:6c:2b:25:5a:d9:63:e6:94:71:53:
1b:c9:49:58:9c:98:6d:ef:18:1e:d2:75:1c:39:a1:
f1:58:29:90:7a:45:87:57:c1:a5:39:38:c1:20:b1:
6a:5f:e9:e5:1f:42:8e:05:89:42:e5:8f:be:52:d4:
4a:dd:1a:cd:57:d0:56:d2:a1:79:d8:ad:66:64:61:
95:2b:1d:9a:f0:f2:92:55:3a:98:b7:5d:d0:8c:e6:
c3:2a:cf:f3:5a:be:0d:10:5b:d5:38:fe:e4:ef:4b:
e0:84:97:07:a4:67:68:5c:33:4a:1b:92:00:e8:94:
65:2d:4b:87:a3:48:17:e9:dc:6b:cd:c8:87:c4:eb:
3d:b1:d6:7a:42:87:85:73:8c:17:85:46:f0:96:03:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.83.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213096
Signature Algorithm: sha256WithRSAEncryption
5e:da:db:66:49:22:92:7a:08:53:32:1d:26:2a:b4:5d:5c:e6:
2a:59:cc:da:70:29:38:bb:de:cc:df:64:47:fc:37:8c:14:4b:
07:90:f1:03:ba:83:7a:50:a7:f9:6f:a2:d8:13:93:c9:04:95:
8f:f3:f8:d4:13:7e:87:df:04:da:c2:9f:a1:ca:c7:14:db:ec:
cc:9e:85:ad:aa:d8:03:5b:4d:3d:13:b9:3c:ab:c4:a7:5d:a6:
97:39:d9:1b:17:5e:bc:6f:36:97:55:74:d7:2f:7e:45:5b:1a:
4c:c0:8c:44:ac:be:37:cf:fb:e5:81:1c:80:9d:9c:37:27:5d:
1c:2f:0e:26:78:43:87:c9:23:a3:c4:c8:33:f8:fe:2f:63:3d:
62:b2:50:c3:3b:08:f3:7c:a7:33:ff:fd:10:e5:71:10:e1:18:
16:84:ba:39:5a:92:86:b3:b6:42:a2:8f:25:2d:56:c6:48:3a:
66:0a:ba:ef:b5:25:a6:c3:9e:cc:c0:99:4e:76:02:a3:0a:75:
72:1f:ee:a1:1f:53:cf:fe:7c:a2:27:c9:cb:26:b8:5c:00:fd:
68:8c:08:a9:db:e7:36:f0:cb:ba:7e:eb:1b:fc:b5:ce:65:5f:
a9:97:c0:5c:c2:16:3a:0c:a2:46:6c:ea:ea:bf:0b:9a:41:0f:
84:e6:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:59 2025 by rpki-client on console.sobornost.net