Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer (raw, json)
Hash identifier: zdNaDt4THo4Y0i+iGcUuHzk2LHAIULuXg6hzIsBzVh4=
Subject key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5479A9CE97DBAAD61E04712B663D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208895
IP: 45.143.116.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:47:9a:9c:e9:7d:ba:ad:61:e0:47:12:b6:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67864477fe948bf47b9179718c3698eeff58111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e6:26:cb:f6:28:23:86:04:99:6f:ed:7f:bf:
77:55:04:b3:a0:5a:56:e2:59:24:ed:27:bb:99:e2:
f2:1e:91:53:bd:87:da:fa:60:c9:93:14:cd:5e:30:
6c:c9:f3:df:6d:5e:a2:0c:07:d2:54:9d:85:1d:23:
4a:a4:ab:25:d8:af:e2:de:a3:27:e1:2a:93:13:62:
0b:db:a9:8a:3c:98:92:3e:16:e3:da:65:e0:1d:86:
57:62:fe:12:f9:82:70:58:71:a3:71:66:93:f4:8d:
97:66:29:52:b1:57:b2:46:45:f2:9f:cf:a0:25:ed:
5c:ee:f2:e0:cb:60:eb:08:63:38:7f:8f:4d:15:a7:
ff:a4:89:e4:1a:e0:a4:80:52:d8:9a:d8:0d:96:d7:
79:8f:94:84:f8:fc:52:9f:10:31:65:b8:c6:26:69:
7f:09:cd:23:86:77:0c:ff:7f:8d:90:d7:5e:38:16:
45:50:2a:b5:98:5e:1d:79:fe:c2:80:d3:12:f0:58:
d9:3a:17:a8:a4:79:02:a9:01:4b:42:41:fb:02:6a:
96:f3:88:6c:ff:59:db:61:55:de:93:ce:a9:74:56:
53:e2:10:9b:17:2c:e1:7f:ee:fc:11:ac:71:40:e8:
63:e1:ab:80:49:be:f9:38:6f:88:82:45:cf:28:b6:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208895
Signature Algorithm: sha256WithRSAEncryption
56:0f:b9:36:6e:08:f9:b5:24:79:94:d1:27:30:5a:97:7b:e5:
ee:5e:4f:89:15:24:da:54:31:92:21:1f:17:5e:63:13:0b:dc:
87:ee:dd:52:f9:ad:20:91:ce:3e:eb:11:2e:0e:3e:33:82:f5:
78:d5:3a:53:3a:b2:d8:1d:bb:15:ba:2d:db:ee:cc:48:3c:57:
bc:dd:d5:18:22:8c:56:3b:dd:39:8b:40:3f:b9:64:02:8c:1c:
31:3a:0b:95:db:75:f5:91:89:af:8d:9d:c2:2a:39:2a:70:f2:
b5:1e:ab:b7:c4:f5:e7:4b:dd:66:9e:a6:ac:e9:c3:95:92:2b:
c7:1b:c0:79:e0:6f:e8:67:33:10:cc:1f:6c:09:46:60:3a:75:
dd:17:63:ce:9a:ef:3c:fc:dd:97:f3:b2:0e:8a:31:bd:da:10:
f8:80:e4:a7:89:d5:d1:4b:e2:98:24:df:c8:3a:e7:9f:b1:3d:
23:54:69:66:1a:90:85:3e:10:21:7a:2d:fe:d6:8d:45:e2:f6:
2b:91:7a:9f:c7:aa:c0:51:af:c3:2a:3d:51:b7:d3:7f:18:9a:
9d:b0:aa:ca:6b:9e:56:2e:cb:17:78:75:5b:08:d1:1f:32:a2:
b0:7f:c4:fc:80:ac:64:6e:0f:74:3f:10:d8:d7:7f:99:78:d9:
71:84:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:15 2025 by rpki-client on console.sobornost.net