Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer (raw, json)
Hash identifier: ElTWwvq+lQTgjiKZr8/prNq1AmRVml12uwsILyK5l2U=
Subject key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942746E86725B69C07D0DA68D7E3D57F96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207786
IP: 195.85.218.0/24
IP: 195.85.223.0/24
IP: 195.85.226.0/24
IP: 195.85.244.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:e8:67:25:b6:9c:07:d0:da:68:d7:e3:d5:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:58:e6:5f:54:7c:93:ca:da:4c:c6:39:c5:
53:03:c4:cf:f5:16:d6:c6:69:8f:c6:fa:01:7b:1f:
ae:c3:43:f0:e0:82:cf:6e:d4:61:7c:17:2e:2d:1f:
07:22:94:c9:66:2c:0a:59:ab:6d:c7:d5:f1:93:f6:
96:b7:10:6e:f8:e6:aa:88:96:cf:80:4e:cf:18:aa:
7f:b1:db:a4:22:d6:9b:23:0e:bd:66:1e:fd:92:3e:
20:db:27:db:c0:6f:b3:8d:ac:34:4b:d9:71:16:4b:
24:59:c2:95:aa:84:3b:4b:ad:ad:a4:43:25:ff:b1:
34:f2:0b:aa:3d:30:b1:80:8d:2e:b8:8b:a8:2d:95:
12:1c:e3:77:f7:78:9e:67:3d:ef:c6:8a:91:ea:04:
9c:a3:2e:b0:08:3e:0c:fd:70:6f:4e:da:ef:04:ee:
e5:e0:5e:b3:85:66:5f:ec:d4:94:b2:63:41:24:fc:
6a:76:05:75:de:31:ca:88:f7:35:7b:16:78:0b:4a:
a0:aa:5c:da:73:32:60:b6:a5:20:aa:8f:58:ab:f5:
dd:d0:bc:37:de:2e:38:d2:20:1a:5e:6f:49:71:0a:
cb:13:70:86:b2:a5:0f:fa:66:51:de:c3:7d:9c:69:
ad:17:e3:ed:f0:6f:1e:9a:6d:f2:b3:9e:ac:d2:dd:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.218.0/24
195.85.223.0/24
195.85.226.0/24
195.85.244.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207786
Signature Algorithm: sha256WithRSAEncryption
20:8e:cf:bb:87:33:0c:70:5e:55:5d:d3:f5:93:80:32:b4:01:
3c:fe:36:68:eb:bc:a0:34:49:b0:ba:b6:34:eb:2f:58:db:7c:
44:f1:1e:01:c2:9b:f0:b2:9d:f0:58:11:12:94:84:99:2a:c5:
9f:45:20:68:fd:c2:55:3e:1d:16:88:3f:d1:e5:c9:63:4f:49:
cf:96:e9:a2:cf:bd:61:46:4b:ec:56:51:66:f7:06:8c:9e:6c:
89:c7:dc:cc:c1:29:74:5e:58:e2:ac:10:ba:c3:8c:c5:72:36:
98:84:e6:de:36:54:44:17:14:79:4f:21:59:9e:36:1a:db:79:
a5:11:05:31:4a:2e:92:00:40:aa:b9:5f:c9:75:c5:5d:a5:dd:
73:4e:62:54:4f:00:c5:8f:56:9e:08:7d:e6:84:7a:d3:86:87:
7a:66:4b:cf:9c:b6:8e:34:fa:1d:3e:45:e3:f6:c1:4a:d7:c1:
b3:01:e3:c0:74:f1:af:81:7e:10:0d:09:2c:d2:2d:31:ca:cb:
b1:72:dc:85:3c:12:47:6a:3c:46:78:69:7b:71:d0:3b:f1:3a:
d7:f0:13:94:1e:a1:2c:47:1e:35:94:af:cf:0d:09:9b:1c:4e:
99:92:0c:52:40:43:ae:df:b2:87:85:f5:a6:aa:3d:b7:fd:27:
84:72:e0:6b
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZQnRuhnJbacB9DaaNfj1X+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Q5Yzk2OTY3NWEyN2Q1MTVkOGZhYjJjNjNjZGUwZWQwNTY0OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3NY5l9UfJPK2kzGOcVTA8TP9RbW
xmmPxvoBex+uw0Pw4ILPbtRhfBcuLR8HIpTJZiwKWattx9Xxk/aWtxBu+OaqiJbP
gE7PGKp/sdukItabIw69Zh79kj4g2yfbwG+zjaw0S9lxFkskWcKVqoQ7S62tpEMl
/7E08guqPTCxgI0uuIuoLZUSHON393ieZz3vxoqR6gScoy6wCD4M/XBvTtrvBO7l
4F6zhWZf7NSUsmNBJPxqdgV13jHKiPc1exZ4C0qgqlzaczJgtqUgqo9Yq/Xd0Lw3
3i440iAaXm9JcQrLE3CGsqUP+mZR3sN9nGmtF+Pt8G8emm3ys56s0t132QIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFFPZyWlnWifVFdj6ssY83g7QVkkeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4Lzk5MTA3
YS0zYjFiLTRiNWUtYWUxNS1mOTVjNjBiNDY2YTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvOTkxMDdh
LTNiMWItNGI1ZS1hZTE1LWY5NWM2MGI0NjZhMC8xL1U5bkphV2RhSjlVVjJQcXl4
anplRHRCV1NSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQAw1XaAwQAw1XfAwQAw1XiAwQAw1X0MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwMrqjANBgkqhkiG9w0BAQsFAAOCAQEAII7Pu4cz
DHBeVV3T9ZOAMrQBPP42aOu8oDRJsLq2NOsvWNt8RPEeAcKb8LKd8FgREpSEmSrF
n0UgaP3CVT4dFog/0eXJY09Jz5bpos+9YUZL7FZRZvcGjJ5sicfczMEpdF5Y4qwQ
usOMxXI2mITm3jZURBcUeU8hWZ42Gtt5pREFMUoukgBAqrlfyXXFXaXdc05iVE8A
xY9Wngh95oR604aHemZLz5y2jjT6HT5F4/bBStfBswHjwHTxr4F+EA0JLNItMcrL
sXLchTwSR2o8Rnhpe3HQO/E61/ATlB6hLEceNZSvzw0JmxxOmZIMUkBDrt+yh4X1
pqo9t/0nhHLgaw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net