Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.cer (raw, json)
Hash identifier: pM1fDNdJiiAg0XVJbVfersmtMb4t1tqs9RBui8n38xM=
Subject key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423698E0E367B5E59C939DFE7D79C7641
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.238.27.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8e:0e:36:7b:5e:59:c9:39:df:e7:d7:9c:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:a9:a9:5b:59:0c:54:f8:ba:53:da:04:f5:
f3:86:f4:ea:b2:57:29:08:1e:d5:b5:1f:81:04:f8:
49:63:54:e0:b5:be:5f:2a:37:25:7d:c6:d3:5b:0f:
15:26:39:05:d1:f7:8b:42:a8:0d:28:06:fe:c9:9f:
35:9a:0a:2a:cf:2c:80:c7:65:69:65:93:1d:26:ae:
d9:8e:9e:dd:ab:a1:de:cd:63:82:e9:7e:89:13:19:
a3:2a:0f:7e:10:ad:73:73:f6:5e:78:80:7f:fb:da:
ec:a1:b6:2a:41:29:3a:cf:9e:5f:dc:ab:6f:dd:19:
d1:a1:22:78:96:95:b1:07:0e:a4:e0:81:5c:ec:c5:
b5:f4:0e:8e:c0:9d:89:18:fb:de:96:e3:12:5e:bc:
27:2b:92:7d:81:bc:b7:90:2a:ec:67:1e:69:bb:5f:
61:ae:f1:87:a7:37:8e:c4:44:bb:eb:bc:50:e8:6d:
b8:3c:9e:5f:3d:39:37:ea:f1:9b:1c:1e:90:b5:9b:
37:6f:c9:8b:8d:00:6e:0a:b1:71:a4:93:e3:b2:b1:
09:da:0d:14:18:55:2c:46:b8:3e:0c:1b:1b:77:67:
d0:fd:1d:b0:5a:73:41:29:c4:62:b7:2c:ce:b1:fc:
5b:6e:93:d6:c9:f5:ef:e9:55:ad:c2:5b:f6:16:41:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:78:32:b0:f2:56:b9:5d:40:1a:b2:42:d8:3a:21:32:af:dd:
86:c7:62:36:60:9f:f3:1f:ef:0a:8a:39:aa:9f:a0:23:86:e1:
ff:ba:d1:57:0e:8f:c3:c5:5c:64:9a:60:50:98:b3:08:cc:d7:
5b:82:73:8e:1d:59:ed:77:54:f3:db:09:b5:d8:21:4c:b5:7b:
e0:20:f8:0d:c2:e4:38:77:bd:78:bd:aa:1e:b0:ce:b7:92:74:
e7:b0:55:7b:af:10:3a:44:58:45:7f:27:ff:d4:a5:69:12:d4:
45:be:92:c3:77:23:25:92:fe:2e:e2:aa:6d:08:6d:e7:a6:44:
0f:18:20:57:a1:d8:42:98:18:41:eb:c3:a3:81:29:0f:38:d9:
d6:bd:70:ae:18:b0:69:ca:59:dd:82:fc:46:9a:da:cb:2e:03:
09:a2:da:b7:b3:58:e2:98:bc:be:ac:ed:2c:1f:13:1e:d4:e5:
d9:49:c2:ed:46:69:76:0f:ed:ff:ab:b6:df:51:ed:33:76:30:
a3:a0:1b:29:fb:b0:70:2f:d3:d2:7b:7a:9e:59:6c:d9:50:28:
c4:05:e8:ba:40:7d:d7:60:6d:0d:10:70:d6:e0:01:5d:5b:1f:
a3:b4:c0:2e:70:db:4f:d4:45:d5:05:b6:30:cb:03:1c:15:c9:
eb:4c:ed:b3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQjaY4ONnteWck53+fXnHZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDA5NmUzNzQwOTJjYzMwMGJkMGJiMDZjNDE2NDA5MzJlY2Y4YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pqpqVtZDFT4ulPaBPXzhvTqslcp
CB7VtR+BBPhJY1Tgtb5fKjclfcbTWw8VJjkF0feLQqgNKAb+yZ81mgoqzyyAx2Vp
ZZMdJq7Zjp7dq6HezWOC6X6JExmjKg9+EK1zc/ZeeIB/+9rsobYqQSk6z55f3Ktv
3RnRoSJ4lpWxBw6k4IFc7MW19A6OwJ2JGPveluMSXrwnK5J9gby3kCrsZx5pu19h
rvGHpzeOxES767xQ6G24PJ5fPTk36vGbHB6QtZs3b8mLjQBuCrFxpJPjsrEJ2g0U
GFUsRrg+DBsbd2fQ/R2wWnNBKcRityzOsfxbbpPWyfXv6VWtwlv2FkGSZwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGAJbjdAkswwC9C7BsQWQJMuz4tJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzkxY2Zl
Ny01YzJkLTQ3NGEtYjU4Ny1jNDU4NTJjN2JlMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOTFjZmU3
LTVjMmQtNDc0YS1iNTg3LWM0NTg1MmM3YmUyMC8xL1lBbHVOMENTekRBTDBMc0d4
QlpBa3k3UGkway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwe4bMA0GCSqGSIb3DQEBCwUAA4IBAQBLeDKw
8la5XUAaskLYOiEyr92Gx2I2YJ/zH+8Kijmqn6AjhuH/utFXDo/DxVxkmmBQmLMI
zNdbgnOOHVntd1Tz2wm12CFMtXvgIPgNwuQ4d714vaoesM63knTnsFV7rxA6RFhF
fyf/1KVpEtRFvpLDdyMlkv4u4qptCG3npkQPGCBXodhCmBhB68OjgSkPONnWvXCu
GLBpylndgvxGmtrLLgMJotq3s1jimLy+rO0sHxMe1OXZScLtRml2D+3/q7bfUe0z
djCjoBsp+7BwL9PSe3qeWWzZUCjEBei6QH3XYG0NEHDW4AFdWx+jtMAucNtP1EXV
BbYwywMcFcnrTO2z
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:13 2025 by rpki-client on console.sobornost.net