Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.cer (raw, json)
Hash identifier: ryejdprvG4iFmI0NHqIKKW8aquKUP6jFiGkXshEabtQ=
Subject key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942522232F8A94D492954A7BA8711AB8A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202591
IP: 45.154.164.0/22
IP: 92.119.28.0/22
IP: 185.150.184.0/22
IP: 2a07:7280::/29
IP: 2a09:b340::/29
IP: 2a0f:bd00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:23:2f:8a:94:d4:92:95:4a:7b:a8:71:1a:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53ef2884e4a13355db649a3493527c44228973b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:d4:16:ec:be:4c:02:b7:1e:fa:ce:74:01:
5a:af:16:09:92:44:da:e5:3f:6f:9f:e5:f0:c3:e3:
83:e8:c5:84:61:44:76:06:1c:21:6d:76:b6:51:cd:
bf:9f:85:56:ae:ce:17:e8:5a:5d:a7:68:fb:76:00:
d7:58:94:2c:5d:79:b9:f7:60:c2:63:65:82:f5:89:
f6:96:a1:0e:d6:34:57:3f:e6:8e:38:37:0a:10:c9:
cc:1d:e7:2c:51:ef:d3:e8:d5:72:b0:4f:81:32:33:
be:4f:5c:e0:90:b9:ee:48:01:5f:ff:05:c3:00:d6:
cf:67:88:0c:98:da:c3:3b:2c:1d:34:19:da:e0:50:
fd:5c:dd:4d:ec:cb:9a:1e:55:27:e6:d5:d3:21:45:
fa:07:33:91:bb:e7:c8:33:fd:24:ac:5a:49:8d:80:
08:d4:f7:f2:d5:c5:83:c6:97:bf:4f:ad:6a:ac:e7:
55:0c:12:14:33:b5:b5:46:2e:af:08:52:1b:aa:f6:
a2:13:a6:e5:11:18:82:3b:97:1c:8b:6e:f0:2c:09:
81:aa:e9:4a:79:32:fd:35:d6:27:1f:e1:65:4b:28:
53:36:0f:e7:74:e4:3b:89:1c:37:6d:c5:8d:94:1a:
39:6e:71:9e:64:24:9e:9f:e1:cd:c1:fc:f6:27:d6:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.164.0/22
92.119.28.0/22
185.150.184.0/22
IPv6:
2a07:7280::/29
2a09:b340::/29
2a0f:bd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202591
Signature Algorithm: sha256WithRSAEncryption
4c:43:f2:45:0d:8f:5d:9f:08:25:a9:dd:76:e7:b7:3a:90:de:
4f:45:83:44:f2:39:fd:cb:c7:5e:4b:e7:e1:23:ad:9d:88:9b:
c8:cb:dc:63:98:d5:25:54:ef:67:cc:ab:48:01:a3:c6:5c:ef:
28:ef:87:3b:ef:b0:73:5b:75:6f:5b:40:77:6b:db:1f:c0:f5:
23:e6:a4:cb:df:ba:72:07:2e:82:2c:4c:e1:51:51:b5:4a:bf:
e2:ee:19:d5:eb:2f:fb:a3:67:7d:98:69:50:42:0d:6c:bf:66:
02:7c:90:d7:0a:f9:63:f8:4f:2b:73:ad:dc:26:35:3a:27:f0:
82:df:43:cc:bb:07:05:68:1f:70:20:f4:c9:b4:63:a5:7a:40:
2c:d0:56:72:97:ad:ec:92:35:bb:43:b8:97:59:7e:ec:b7:82:
92:44:54:72:25:eb:14:13:4d:18:66:99:df:eb:dd:e6:6b:46:
ce:2f:4f:82:8a:bb:e4:5f:6d:d0:90:8d:e2:8e:18:62:bd:07:
bd:57:69:33:f5:b8:24:53:df:e5:9b:03:65:b9:14:20:27:3a:
dc:8c:fa:90:7f:56:a4:20:83:7a:b6:0c:d2:af:5e:05:4e:50:
fa:11:2c:85:77:b9:34:43:6f:7a:16:38:c5:c7:c1:0f:6f:ec:
fb:df:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net