Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
File: ZGHiGIOECxNlwzhXExO30yqtnFc.cer (raw, json)
Hash identifier: 6SSK8rmYXz9QaIEpEdStuJZkT3a+id48/9Mcl5Jc3TU=
Subject key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC1C3B3ACE62557FADADFEBA9A7798
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199014
IP: 91.240.179.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1c:3b:3a:ce:62:55:7f:ad:ad:fe:ba:9a:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6461e21883840b1365c338571313b7d32aad9c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:25:b2:0e:cb:e7:a4:71:1b:9d:17:8a:04:
f8:0b:f8:9b:b5:23:82:8b:cc:b2:15:97:17:c7:4c:
99:3a:a8:c7:f5:cc:7a:c7:e7:a3:e2:a1:78:a1:e5:
e7:f4:20:5c:dc:03:03:cf:a4:0e:14:d6:1f:bc:3f:
4f:64:e1:8d:07:44:fd:8e:f7:68:e6:a2:b4:24:d6:
5a:62:ec:ed:8f:fb:e9:97:c9:64:7f:f3:cb:df:89:
24:1a:8d:88:f6:f9:d6:71:5b:59:89:82:5e:cc:72:
7b:91:c2:56:7b:dc:6b:9d:eb:75:bc:53:2f:e7:b7:
42:31:c3:f9:dd:63:89:82:42:e1:30:9d:f0:77:5b:
a2:6d:be:1e:cf:dc:9b:69:44:70:62:ee:de:1a:e5:
77:80:f5:b7:ca:74:1d:b6:3c:63:c6:f2:88:ae:75:
bb:3c:58:dd:22:c9:cb:47:1d:71:98:f8:95:b7:06:
2e:65:4f:e7:31:0d:69:71:d5:43:96:f0:22:8f:e2:
a6:29:a7:24:b3:7a:63:ea:5f:f5:82:dd:7c:39:c9:
64:53:04:cf:7f:b5:ee:91:ed:46:c1:fc:33:d4:c1:
d6:f8:b7:70:6f:d5:3b:11:08:bc:39:03:f6:2c:60:
45:63:1f:7a:e6:17:d2:aa:de:ff:70:d1:5b:a7:b1:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.179.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199014
Signature Algorithm: sha256WithRSAEncryption
aa:5d:78:79:53:9c:83:cf:1c:21:f1:b1:e3:43:1f:5a:53:fc:
76:c5:ed:0d:c1:28:c5:a3:bc:c7:de:31:8f:26:7c:0f:48:c5:
20:08:33:96:c2:a7:c5:8f:0d:02:d6:02:0c:ec:69:e5:1a:97:
0f:0f:aa:c3:a5:96:4b:f8:de:43:c1:3c:27:d0:70:40:96:0d:
3e:08:dc:53:6d:25:95:82:10:25:7c:10:5e:9c:bf:b9:59:fa:
fb:fe:b3:dd:3f:ca:00:63:01:ca:47:c7:2b:89:d0:a6:94:9a:
6a:e2:03:7c:14:c7:83:e9:56:7a:19:1f:a8:92:02:5d:72:22:
d2:c5:8f:03:70:30:7f:a8:33:69:13:d4:e9:47:55:61:d4:4e:
07:a2:d8:ff:9e:de:d1:6b:3d:68:88:1f:b3:a2:9f:4f:66:20:
12:bf:8c:41:00:6d:80:a8:5f:c9:be:63:85:50:c3:f5:1e:5e:
0e:ba:15:80:90:3a:c0:2e:f1:88:c6:9c:23:3d:c3:c7:e2:0a:
10:dd:e0:c6:3d:2a:84:15:d8:60:26:19:42:63:40:e5:7c:e9:
7d:ec:92:c5:4a:c3:73:b0:b9:51:f0:07:1f:46:15:3f:9b:d8:
15:68:5a:80:c8:0d:86:e7:45:56:48:24:04:5a:e6:2f:9c:7c:
59:af:1f:c5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQl/Bw7Os5iVX+trf66mneYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDYxZTIxODgzODQwYjEzNjVjMzM4NTcxMzEzYjdkMzJhYWQ5YzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Ylsg7L56RxG50XigT4C/ibtSOC
i8yyFZcXx0yZOqjH9cx6x+ej4qF4oeXn9CBc3AMDz6QOFNYfvD9PZOGNB0T9jvdo
5qK0JNZaYuztj/vpl8lkf/PL34kkGo2I9vnWcVtZiYJezHJ7kcJWe9xrnet1vFMv
57dCMcP53WOJgkLhMJ3wd1uibb4ez9ybaURwYu7eGuV3gPW3ynQdtjxjxvKIrnW7
PFjdIsnLRx1xmPiVtwYuZU/nMQ1pcdVDlvAij+KmKacks3pj6l/1gt18OclkUwTP
f7Xuke1Gwfwz1MHW+Ldwb9U7EQi8OQP2LGBFYx965hfSqt7/cNFbp7GQFwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGRh4hiDhAsTZcM4VxMTt9MqrZxXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2QyMDFk
ZC00N2RkLTRjNGUtYTQyYy0xYzFiOTc0ZmZhZmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDIwMWRk
LTQ3ZGQtNGM0ZS1hNDJjLTFjMWI5NzRmZmFmYy8xL1pHSGlHSU9FQ3hObHd6aFhF
eE8zMHlxdG5GYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/CzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMJZjANBgkqhkiG9w0BAQsFAAOCAQEAql14eVOcg88cIfGx40MfWlP8dsXtDcEo
xaO8x94xjyZ8D0jFIAgzlsKnxY8NAtYCDOxp5RqXDw+qw6WWS/jeQ8E8J9BwQJYN
PgjcU20llYIQJXwQXpy/uVn6+/6z3T/KAGMBykfHK4nQppSaauIDfBTHg+lWehkf
qJICXXIi0sWPA3Awf6gzaRPU6UdVYdROB6LY/57e0Ws9aIgfs6KfT2YgEr+MQQBt
gKhfyb5jhVDD9R5eDroVgJA6wC7xiMacIz3Dx+IKEN3gxj0qhBXYYCYZQmNA5Xzp
feySxUrDc7C5UfAHH0YVP5vYFWhagMgNhudFVkgkBFrmL5x8Wa8fxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:15 2025 by rpki-client on console.sobornost.net