Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer (raw, json)
Hash identifier: nOvkJyCgKr6AI8+6O5eIq4jiza1oC5KD9f4kcIu7pYM=
Subject key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194EA3D43B00573DE92EF052C78538D981E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 09 Feb 2025 10:24:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35795
IP: 91.196.120.0/22
IP: 195.10.210.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:3d:43:b0:05:73:de:92:ef:05:2c:78:53:8d:98:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 10:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:04:fa:b7:aa:d3:7d:b4:15:71:74:26:36:
cb:6c:c3:92:9d:fc:56:d4:a5:92:73:53:3b:83:8e:
35:3b:d6:53:bb:fe:a6:c0:c3:95:3f:09:d9:02:d6:
8e:ed:1f:d2:f3:51:84:32:7f:1a:75:5b:75:ef:00:
81:9e:ad:62:45:34:3d:4d:d9:29:51:bc:77:60:a1:
ce:3b:26:56:02:54:1c:4f:9f:d4:cd:96:c0:97:4e:
a1:92:55:6a:99:76:93:a7:5c:8d:2d:78:d0:53:24:
11:ae:15:5b:46:c0:7c:ae:64:88:b4:11:71:dc:5b:
11:4d:bc:6f:2c:70:ee:f7:ce:e0:e3:29:26:fa:6f:
da:c3:41:fc:11:02:a7:f2:fc:c6:c4:a8:d6:22:68:
b4:26:20:3d:fd:03:61:be:91:0a:f4:3d:23:f5:a4:
ae:38:15:37:bb:fc:7d:40:af:0e:df:0f:dc:26:b4:
89:5e:fb:d5:29:dd:cb:46:16:1a:e9:7b:a2:70:56:
67:75:81:e0:77:7f:97:07:81:3f:de:ef:3b:27:56:
00:c1:e6:46:df:5a:06:c7:8b:31:59:fc:c3:3e:43:
34:04:90:c0:d2:76:0a:d2:7f:02:51:50:23:60:1e:
01:64:ac:57:45:61:75:4a:60:8c:82:04:1e:3e:bd:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.120.0/22
195.10.210.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35795
Signature Algorithm: sha256WithRSAEncryption
85:da:77:16:7c:6a:f9:d1:c3:66:61:ab:cf:0d:c4:88:69:0a:
31:8a:dd:f5:2f:d2:6f:a2:36:1b:7a:ec:51:c9:d9:89:3e:3e:
ea:b9:e4:d8:f3:ec:df:59:a5:79:fb:ae:af:c2:1e:7e:c8:b5:
f6:3c:b9:12:e9:da:e9:74:68:54:a7:44:37:6a:6a:8c:84:20:
03:9c:9c:de:e2:8c:ed:7d:33:94:01:d1:0b:77:52:97:b1:85:
35:0b:54:c0:30:49:17:15:8e:cf:3f:7a:dc:86:a9:2a:7e:5d:
b5:03:72:c6:d7:24:4d:c8:b0:7d:0f:cf:4e:65:ed:3c:3e:72:
12:9e:14:be:53:fe:48:9f:b3:cb:22:2e:42:b4:88:50:c0:c1:
fb:ae:c2:08:5f:50:bf:7b:a8:bd:09:6c:19:4a:f5:06:44:96:
e0:2e:0b:96:f8:83:4f:49:9e:92:37:89:a6:04:05:b1:42:c7:
9e:0d:67:fb:06:be:ff:98:92:0f:be:d9:79:b7:71:fc:ef:92:
c8:a7:d1:0b:f4:4c:fe:41:fd:46:25:ec:1b:b8:63:db:03:35:
8a:a9:87:ba:19:01:dc:44:fe:cc:df:64:69:92:d8:1e:36:c7:
cd:91:c0:db:3d:e8:c7:b7:85:9f:7c:ed:56:23:16:62:d7:8f:
ce:70:11:ae
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZTqPUOwBXPeku8FLHhTjZgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA5MTAyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjQwMWRjMTNlNTBlOWNjM2Q0MmQ5MTNlYTY1YjE1NTRjOTVhNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUQE+req0320FXF0JjbLbMOSnfxW
1KWSc1M7g441O9ZTu/6mwMOVPwnZAtaO7R/S81GEMn8adVt17wCBnq1iRTQ9Tdkp
Ubx3YKHOOyZWAlQcT5/UzZbAl06hklVqmXaTp1yNLXjQUyQRrhVbRsB8rmSItBFx
3FsRTbxvLHDu987g4ykm+m/aw0H8EQKn8vzGxKjWImi0JiA9/QNhvpEK9D0j9aSu
OBU3u/x9QK8O3w/cJrSJXvvVKd3LRhYa6XuicFZndYHgd3+XB4E/3u87J1YAweZG
31oGx4sxWfzDPkM0BJDA0nYK0n8CUVAjYB4BZKxXRWF1SmCMggQePr2DnQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFE9AHcE+UOnMPULZE+plsVVMlaVIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0Lzk2Njkw
Yy1kNGU1LTQwZmEtYTg2OS0zYTA1YmI3NTMwYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvOTY2OTBj
LWQ0ZTUtNDBmYS1hODY5LTNhMDViYjc1MzBjNi8xL1QwQWR3VDVRNmN3OVF0a1Q2
bVd4VlV5VnBVZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCW8R4AwQAwwrSMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCL0zANBgkqhkiG9w0BAQsFAAOCAQEAhdp3Fnxq+dHDZmGrzw3EiGkK
MYrd9S/Sb6I2G3rsUcnZiT4+6rnk2PPs31mlefuur8Iefsi19jy5Euna6XRoVKdE
N2pqjIQgA5yc3uKM7X0zlAHRC3dSl7GFNQtUwDBJFxWOzz963IapKn5dtQNyxtck
TciwfQ/PTmXtPD5yEp4UvlP+SJ+zyyIuQrSIUMDB+67CCF9Qv3uovQlsGUr1BkSW
4C4LlviDT0mekjeJpgQFsULHng1n+wa+/5iSD77Zebdx/O+SyKfRC/RM/kH9RiXs
G7hj2wM1iqmHuhkB3ET+zN9kaZLYHjbHzZHA2z3ox7eFn3ztViMWYtePznARrg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:00 2025 by rpki-client on console.sobornost.net