Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
File: U1vkU3bViYdFK9Bka5p0z562yy0.cer (raw, json)
Hash identifier: pRJ4+NpXn+cOYY42rOlDGM1/imRD1XmoA/h1dzNr7Ro=
Subject key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD29CF5430B30736C1D440E675FF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200069
IP: 45.14.148.0/22
IP: 87.253.232.0/21
IP: 185.189.236.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:9c:f5:43:0b:30:73:6c:1d:44:0e:67:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:13:26:8f:da:f7:29:9b:59:b9:35:43:a0:
0b:dc:64:36:c4:cc:7a:03:ae:a8:a8:16:d7:6d:fc:
4b:e5:38:6c:df:fb:83:6d:a5:02:93:17:34:ac:86:
8a:13:09:2c:17:75:fb:35:42:fb:0b:fc:9f:b9:51:
ca:6b:ef:3b:aa:67:13:54:f5:00:c7:8b:07:c3:ff:
f8:20:d3:ff:5c:a6:5d:60:a5:76:c3:e1:7f:e7:f6:
72:34:00:d5:3c:6d:3f:45:04:07:d3:e9:e5:67:6a:
67:2b:46:d8:dc:be:f9:33:69:bc:4d:77:ac:43:d4:
5c:c2:87:24:5c:f3:28:1e:e1:2f:a7:f7:55:9f:51:
81:3b:c4:47:e5:85:7c:7c:f1:2d:fd:08:04:12:f0:
d0:38:a3:c7:f4:ac:26:f1:ed:28:24:9b:72:fd:fb:
21:8a:43:89:8f:11:b0:85:f9:e7:06:49:89:54:43:
c4:d9:c0:55:ed:be:cc:c2:4d:16:df:0d:bc:ea:05:
0d:3a:32:5b:5c:dc:70:f9:c4:ae:e1:81:93:9c:d4:
0d:29:14:93:f0:28:a1:94:ea:f9:7c:d6:e5:d4:3b:
31:40:1c:af:6d:b9:f3:01:70:45:e5:73:b4:66:04:
01:20:82:58:27:00:73:1b:01:d5:e0:4e:40:27:e4:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.148.0/22
87.253.232.0/21
185.189.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200069
Signature Algorithm: sha256WithRSAEncryption
95:8c:de:3a:9a:8e:a0:f6:78:e3:e9:46:09:64:c4:0a:3c:58:
e8:58:1d:39:c4:2c:e1:77:fd:aa:20:e2:a8:18:8a:74:80:81:
4f:00:8d:21:2c:11:4a:0e:52:87:0a:53:7a:65:46:a5:fe:0f:
e7:1c:3a:e0:de:9a:cc:06:48:5e:1b:c6:eb:ec:68:6c:91:48:
e8:06:d5:d5:d9:3f:8b:a4:9c:b1:51:ab:07:16:18:64:d2:6c:
79:a7:03:f2:de:0a:09:a2:7d:22:e7:c4:c6:24:39:7b:ae:0b:
df:95:c4:35:4f:2f:2c:b8:dd:33:60:a9:ea:27:f4:ce:5a:79:
ae:8e:83:76:af:ba:f5:15:f6:d6:42:01:d0:4c:9a:9c:fb:c0:
29:d4:de:33:74:17:69:11:43:16:7d:24:d1:38:b4:3a:69:47:
c6:ea:c0:1f:d2:39:96:d6:36:52:db:6e:56:34:32:70:0f:5f:
6c:6b:9f:49:2f:c2:e1:92:ec:f8:a4:c7:05:cc:3a:35:1c:c9:
96:07:5a:de:80:21:a1:bb:da:be:0b:9b:1d:0e:bb:87:fa:01:
67:df:6b:f9:f5:a3:c3:11:e2:38:8d:c6:b2:a8:7b:30:ec:c9:
9c:2f:64:aa:d3:23:29:71:c7:22:05:04:01:6d:fc:cc:40:98:
c9:f2:ad:15
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZQijdKc9UMLMHNsHUQOZ1/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzViZTQ1Mzc2ZDU4OTg3NDUyYmQwNjQ2YjlhNzRjZjllYjZjYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC8TJo/a9ymbWbk1Q6AL3GQ2xMx6
A66oqBbXbfxL5Ths3/uDbaUCkxc0rIaKEwksF3X7NUL7C/yfuVHKa+87qmcTVPUA
x4sHw//4INP/XKZdYKV2w+F/5/ZyNADVPG0/RQQH0+nlZ2pnK0bY3L75M2m8TXes
Q9RcwockXPMoHuEvp/dVn1GBO8RH5YV8fPEt/QgEEvDQOKPH9Kwm8e0oJJty/fsh
ikOJjxGwhfnnBkmJVEPE2cBV7b7Mwk0W3w286gUNOjJbXNxw+cSu4YGTnNQNKRST
8CihlOr5fNbl1DsxQByvbbnzAXBF5XO0ZgQBIIJYJwBzGwHV4E5AJ+TDBQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFFNb5FN21YmHRSvQZGuadM+etsstMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2ZiMzlh
OC02MjNiLTQ0MzUtOTRmZS1jZWM5MmI1NzgwMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZmIzOWE4
LTYyM2ItNDQzNS05NGZlLWNlYzkyYjU3ODAwNi8xL1UxdmtVM2JWaVlkRks5Qmth
NXAwejU2Mnl5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQCLQ6UAwQDV/3oAwQCub3sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwMNhTANBgkqhkiG9w0BAQsFAAOCAQEAlYzeOpqOoPZ44+lG
CWTECjxY6FgdOcQs4Xf9qiDiqBiKdICBTwCNISwRSg5ShwpTemVGpf4P5xw64N6a
zAZIXhvG6+xobJFI6AbV1dk/i6ScsVGrBxYYZNJseacD8t4KCaJ9IufExiQ5e64L
35XENU8vLLjdM2Cp6if0zlp5ro6Ddq+69RX21kIB0EyanPvAKdTeM3QXaRFDFn0k
0Ti0OmlHxurAH9I5ltY2UttuVjQycA9fbGufSS/C4ZLs+KTHBcw6NRzJlgda3oAh
obvavgubHQ67h/oBZ99r+fWjwxHiOI3Gsqh7MOzJnC9kqtMjKXHHIgUEAW38zECY
yfKtFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net