Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer (raw, json)
Hash identifier: OEHTm0+T+f8itCWRjCyt4PR4R5V6M0rqzPv8ORZRMYg=
Subject key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65B0EB89DFD7E1E11408917FAEB86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204566
IP: 185.243.208.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5b:0e:b8:9d:fd:7e:1e:11:40:89:17:fa:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:f5:e7:8b:4a:69:92:56:d0:04:0a:af:09:
ed:6d:69:bd:08:88:4e:f0:28:85:f6:6a:56:03:54:
5f:d0:c0:31:c9:45:68:42:a6:32:74:eb:c3:2d:13:
14:69:a5:9c:85:9e:87:ce:b5:1a:c4:22:bc:68:7d:
34:c3:83:79:30:a2:43:03:fd:88:1a:0e:f3:b0:2c:
ee:b7:50:e9:47:c9:9f:c0:22:b2:83:d5:a6:97:52:
a6:17:ae:15:63:f4:01:da:fb:bc:aa:e7:bf:78:50:
9c:04:34:15:53:87:81:b6:75:9f:45:d5:51:81:bc:
95:d8:c0:3c:de:ea:c2:05:c2:b1:b1:7d:3a:59:d4:
95:c9:fb:64:d9:f6:50:29:c2:d5:a2:67:13:43:27:
cc:9e:9b:94:38:a1:19:69:08:fb:98:e2:1a:1a:c4:
ce:64:e7:91:b9:d0:51:6b:29:26:f6:7b:48:d1:9e:
94:ce:f9:c4:40:52:8a:72:c9:be:fc:9d:e8:2e:d5:
ef:b5:a2:99:f9:cf:88:05:71:35:52:f0:99:8d:0f:
e9:cb:2c:a7:4b:5c:d7:e0:36:62:de:d6:87:9b:2f:
fd:ff:7b:2a:14:58:2d:ff:c4:1e:4b:d7:e6:da:9c:
1f:8b:ad:96:a4:50:9d:c9:ff:4c:a2:05:cb:88:94:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.208.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204566
Signature Algorithm: sha256WithRSAEncryption
0a:97:37:5a:8e:a2:55:fb:60:54:f6:39:ac:c2:d1:b1:84:99:
f4:21:7b:34:ba:97:e8:fd:e4:a4:91:1d:31:98:c2:0a:be:e6:
7b:d4:3b:8d:c3:38:5b:a4:ad:5d:9a:c5:5c:fb:dd:4c:f6:c7:
75:fa:f6:8d:14:4c:0a:0f:b5:18:8b:0d:12:b7:a8:aa:85:1e:
ad:2d:da:0b:81:4a:ee:39:ba:f7:a2:3b:71:59:07:b7:b6:9f:
33:9b:95:c4:fb:c0:69:13:8e:e2:61:bb:30:15:62:ae:f3:fd:
44:8f:91:08:20:37:0f:d9:ad:83:ba:04:74:c7:75:19:9b:77:
cd:cc:91:8a:d4:a4:f3:5f:8b:a4:6e:c5:da:db:0c:1b:b4:1b:
87:b2:da:8e:c2:c5:59:93:6b:28:84:bd:51:0f:47:40:d6:95:
e8:de:01:a1:51:9f:5e:a0:e6:6c:ed:6b:af:44:05:b8:39:50:
8b:13:8a:be:5d:58:f5:f3:43:e5:ca:74:24:e0:54:3e:89:13:
ee:ae:85:0e:f3:59:14:56:46:73:bf:5b:27:57:bd:d9:06:92:
c9:d6:f7:9f:de:9f:78:c4:20:ff:8c:79:e0:ab:bc:4f:83:fd:
ba:76:54:38:a9:5f:e5:1b:4d:66:df:ca:e4:4d:82:5a:43:9b:
99:01:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:12 2025 by rpki-client on console.sobornost.net