Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.cer (raw, json)
Hash identifier: Mt4fG4wJfvJ03rKBcubAeVM/0TyOUShZXvjt7NXFuqI=
Subject key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7D876C4FB19C5D7227D5101717FA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13244
IP: 194.9.170.0/24
IP: 194.153.171.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d8:76:c4:fb:19:c5:d7:22:7d:51:01:71:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53550b2382e00fa7df194e6485fe1425836213ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:b5:5f:c3:31:32:ac:dc:44:96:7f:b4:00:
9f:24:1e:da:b5:98:5c:34:20:f7:73:a6:5a:a7:81:
25:59:c1:91:9a:ab:02:2c:9d:7d:3e:f5:73:5a:2b:
4b:24:7b:8b:35:e8:9e:01:91:cf:e7:ca:10:5d:41:
88:40:c2:15:01:6c:c5:67:bf:49:0d:ef:07:59:eb:
1b:a3:02:5e:a0:0b:f3:76:b3:89:db:b8:27:52:87:
0b:df:f6:dc:92:9b:13:09:4c:7e:d2:a1:93:1b:7a:
e8:70:ea:7b:57:5a:85:72:43:20:26:99:f7:76:ce:
4e:72:ce:64:18:62:00:29:7b:72:83:3d:a9:86:29:
b4:14:c2:f5:0a:28:93:31:9d:63:a1:f1:db:bb:48:
cd:54:39:ae:25:e7:a5:f7:49:bc:73:bb:56:98:4c:
ae:ba:7b:ab:80:3a:08:a5:4c:7c:c7:6e:81:ad:3b:
cd:aa:a0:3c:c9:59:e2:85:d4:4a:d4:93:c3:e3:a5:
ab:69:5b:d3:06:1b:f7:df:56:63:e5:3e:25:3b:95:
eb:31:4e:c8:6f:5c:46:66:df:10:af:b3:9b:7b:d0:
98:9b:cf:fe:8c:55:ef:dc:86:f6:e6:5d:43:27:8c:
8d:e3:74:e9:95:96:99:7c:94:19:4f:3b:4a:3c:3e:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.170.0/24
194.153.171.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13244
Signature Algorithm: sha256WithRSAEncryption
9b:6d:d2:b6:d4:29:5f:cf:e9:c1:95:48:08:5d:b7:1c:83:da:
05:9d:b9:49:3d:81:12:7f:8a:f5:c2:72:74:a3:0a:93:c7:f4:
9a:7c:bc:90:77:80:e0:48:cc:46:bd:d9:a7:9a:f2:ad:9d:b4:
a3:0e:65:75:e6:4a:5e:64:d0:3e:d9:93:5b:13:04:5b:bb:a5:
bb:1b:f6:5a:b5:aa:af:47:66:60:63:d5:35:6f:26:c2:55:20:
5f:97:e0:44:81:e5:7f:65:cc:e1:2a:c2:9c:6d:75:ba:20:24:
8c:a6:3c:49:55:18:a8:ed:5d:b4:f6:51:e1:6d:5a:2a:be:fc:
c8:96:4c:a4:06:29:05:ea:5d:ec:bf:73:a0:24:d3:69:60:09:
39:a8:9c:0b:fe:e5:61:89:fc:8f:c2:7d:d8:07:8e:b3:c2:7d:
35:fc:94:86:90:a6:c5:7f:ab:ad:36:85:9c:81:53:28:1c:de:
8b:48:4a:15:4d:d2:b8:ba:cf:af:98:80:2b:d7:43:a6:ec:df:
b9:5e:d1:82:45:98:32:25:05:6b:93:47:49:66:ef:81:30:76:
c1:dc:5e:57:7e:43:30:84:3f:ff:3b:9b:76:0b:24:e4:16:0a:
18:79:12:54:8b:2e:91:97:ae:90:5d:97:1f:e8:74:f4:32:3f:
6e:08:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net