Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer (raw, json)
Hash identifier: 9MzwCE0r+Unr5aP3mZ6B+m5SS0cEleeWSPO0t8NTRBM=
Subject key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444E74DDA787C9366543A838A947939
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205295
IP: 91.196.208.0/22
IP: 185.219.24.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e7:4d:da:78:7c:93:66:54:3a:83:8a:94:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:96:20:3d:5b:ad:0a:ce:7a:73:6c:09:41:
e6:93:78:29:a3:38:24:9f:a2:53:6f:7a:59:d8:0a:
01:44:9d:90:8b:86:1f:ba:0a:a0:20:ff:00:fc:36:
ce:b5:34:70:8d:34:bf:96:73:1c:d7:fb:a2:9d:6c:
54:f7:99:fa:98:6a:d4:21:3c:bd:a1:93:5b:7b:18:
23:10:63:7b:9d:56:ea:8e:00:52:b9:f6:6b:75:d6:
87:8d:14:c8:4f:fd:76:13:6f:cd:5a:96:0a:95:53:
61:41:31:64:84:2b:88:9e:88:ad:79:3b:f6:2b:60:
f6:2a:b1:5f:90:d5:b1:21:e0:80:be:c3:77:c0:18:
b6:3b:e4:48:f9:87:9b:0b:fc:d1:21:13:04:8a:91:
e0:ba:fe:79:69:3a:80:ea:42:3b:d9:4b:ed:20:d6:
6c:d4:7e:49:fe:82:c2:c4:06:cd:78:a7:b8:60:cb:
9d:54:46:0c:fa:7b:fa:77:0a:5c:0f:b8:e9:f0:65:
c9:c0:9c:a8:90:89:90:39:b9:73:e9:dd:cc:5d:00:
d4:c0:64:20:35:88:f2:83:60:fb:11:db:6c:b8:d1:
4d:fa:6b:4e:4c:9c:6b:16:91:02:2a:e5:71:bd:79:
f7:40:e9:8a:a2:f3:bd:f2:17:ee:86:96:9d:c8:15:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.208.0/22
185.219.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205295
Signature Algorithm: sha256WithRSAEncryption
2b:f4:97:a9:06:0d:85:a5:72:cd:26:56:8e:5a:55:ed:ab:cf:
4f:bf:44:f1:f5:16:82:e0:11:71:25:02:03:3c:e4:3a:54:dd:
db:db:38:2e:56:e7:51:d0:5b:20:38:77:fd:39:96:2d:1d:7e:
04:8f:95:c4:be:aa:e5:0c:28:ff:8b:bb:bd:73:68:fa:f8:22:
96:54:de:b3:d9:37:bf:8f:26:1c:c2:e7:fa:f9:55:c3:e7:8a:
72:5c:6d:fa:96:21:ce:71:a6:5a:48:c6:80:d6:4c:e1:a9:fa:
a7:62:45:45:72:a0:93:25:d2:68:ea:c6:18:a9:2c:e0:51:c7:
ff:74:3c:03:a3:32:1f:4f:b6:ed:a1:ff:79:dc:c9:7a:fd:72:
13:b4:25:7f:37:52:09:d0:7e:cb:17:fc:3f:74:81:9d:e5:e9:
f7:f0:9b:11:39:4a:76:cb:b1:08:9a:ac:ef:c2:c1:b2:78:6a:
94:d2:0f:00:38:96:a7:73:92:23:ac:dd:cc:a5:a6:99:0a:42:
00:43:f7:c1:5a:21:6a:90:ed:2e:96:c0:22:bf:cc:6f:7a:e3:
01:4f:c8:2e:34:d1:74:8d:15:89:15:78:96:ff:27:34:2a:76:
b6:0a:2e:89:0e:3e:f4:9b:02:b1:39:e3:50:5e:b2:2b:90:1e:
41:44:0b:f7
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQkROdN2nh8k2ZUOoOKlHk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmRkMWU4YzIzOTRkMThlODc2YzJkNTcwMTZlN2VkODk4MDVhNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GGWID1brQrOenNsCUHmk3gpozgk
n6JTb3pZ2AoBRJ2Qi4YfugqgIP8A/DbOtTRwjTS/lnMc1/uinWxU95n6mGrUITy9
oZNbexgjEGN7nVbqjgBSufZrddaHjRTIT/12E2/NWpYKlVNhQTFkhCuInoiteTv2
K2D2KrFfkNWxIeCAvsN3wBi2O+RI+YebC/zRIRMEipHguv55aTqA6kI72UvtINZs
1H5J/oLCxAbNeKe4YMudVEYM+nv6dwpcD7jp8GXJwJyokImQOblz6d3MXQDUwGQg
NYjyg2D7EdtsuNFN+mtOTJxrFpECKuVxvXn3QOmKovO98hfuhpadyBUA5QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFF/dHowjlNGOh2wtVwFuftiYBaZnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2E2ZDQy
Yy1jZmQ3LTRlZDUtOWY4My01YWU5M2VjOGZiMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvYTZkNDJj
LWNmZDctNGVkNS05ZjgzLTVhZTkzZWM4ZmIxMS8xL1g5MGVqQ09VMFk2SGJDMVhB
VzUtMkpnRnBtYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCW8TQAwQCudsYMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMh7zANBgkqhkiG9w0BAQsFAAOCAQEAK/SXqQYNhaVyzSZWjlpV7avP
T79E8fUWguARcSUCAzzkOlTd29s4LlbnUdBbIDh3/TmWLR1+BI+VxL6q5Qwo/4u7
vXNo+vgillTes9k3v48mHMLn+vlVw+eKclxt+pYhznGmWkjGgNZM4an6p2JFRXKg
kyXSaOrGGKks4FHH/3Q8A6MyH0+27aH/edzJev1yE7QlfzdSCdB+yxf8P3SBneXp
9/CbETlKdsuxCJqs78LBsnhqlNIPADiWp3OSI6zdzKWmmQpCAEP3wVohapDtLpbA
Ir/Mb3rjAU/ILjTRdI0ViRV4lv8nNCp2tgouiQ4+9JsCsTnjUF6yK5AeQUQL9w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:10 2025 by rpki-client on console.sobornost.net