Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
File: _j0jo57TZW-aYGS2CdAqL25KOCc.cer (raw, json)
Hash identifier: Q4PXKcJcb90JDLIcRUgzb57RepjdqpdkBsfH3zrtMA0=
Subject key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B37AF12B1691AFAEBFCB9FC269DA18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.96.208.0/22
IP: 2a06:180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7a:f1:2b:16:91:af:ae:bf:cb:9f:c2:69:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:39:18:28:9b:ae:ca:30:34:93:6e:cf:62:
7d:d3:bb:c2:16:56:81:1d:2b:8c:6a:8c:37:54:9f:
1c:25:73:ba:3f:1a:e6:9a:4f:99:1b:39:b9:fe:43:
00:1d:5b:36:00:cd:e4:18:6e:3b:81:88:af:c4:b1:
ed:ab:ce:43:d6:00:44:51:a4:ab:e3:1a:1d:df:78:
30:89:5a:db:df:83:09:9d:fd:e2:6a:a6:2d:28:6e:
10:b1:51:4f:90:0a:5f:3e:99:c8:84:3b:9c:e7:4f:
e1:7c:5d:ad:43:a8:fa:b2:df:1b:e7:8b:62:7c:08:
59:f7:cc:f4:78:a7:5c:95:54:97:85:af:f9:a5:11:
92:b8:6a:59:55:dd:29:bb:f6:af:b4:7d:1a:af:df:
5e:33:68:3f:e9:1a:c6:d6:2c:3a:8a:35:02:05:dc:
41:6d:4b:72:19:71:7f:fb:15:9c:b9:40:4e:be:7f:
10:6a:98:9a:fb:be:9d:50:68:ac:80:52:9e:93:2c:
0c:23:58:de:37:f8:88:32:8d:c6:6d:be:fc:c5:ec:
64:93:90:ee:cf:eb:90:46:dc:82:a1:de:cc:55:ec:
6a:37:b2:90:e5:8c:93:46:70:23:ba:81:0f:1a:cc:
30:63:67:85:03:5d:e3:58:98:be:34:84:24:7b:f5:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.208.0/22
IPv6:
2a06:180::/29
Signature Algorithm: sha256WithRSAEncryption
78:cc:c9:07:41:b7:36:47:ad:e3:f2:57:22:b7:54:ba:83:db:
95:ba:9d:d8:5e:e9:ab:31:e8:22:6a:ef:26:a7:c3:22:d1:63:
d5:94:9b:36:5f:6b:ec:61:73:1b:b1:27:e7:95:b0:85:a9:b8:
f6:a1:1d:f9:c4:4b:0b:a7:55:74:bf:44:d4:9f:ac:fd:53:8d:
01:79:b8:06:b4:26:1a:ad:cf:c5:66:ff:44:d2:13:f0:9b:de:
43:1d:5d:10:87:93:65:00:50:3c:fb:3b:40:82:53:65:97:cd:
5b:52:b9:98:6c:24:53:cd:43:9f:33:13:b4:87:96:80:4e:d0:
21:85:2e:9f:21:58:2e:d2:29:7f:dd:3a:c6:c5:6a:ad:2e:17:
b2:27:80:11:0a:da:75:25:4b:d6:ea:ed:4b:93:90:0c:b5:3d:
29:f0:e7:ba:b9:ee:82:3b:f2:89:0a:d3:07:20:ce:41:47:5b:
3e:3d:b2:c4:cc:82:28:7e:bf:37:cb:65:b5:b7:85:54:94:c7:
d3:4a:05:b2:6e:91:a8:d2:90:c3:2f:f1:65:c2:68:a8:03:e4:
67:05:9d:49:74:b1:f1:38:11:45:11:69:93:2d:70:99:da:48:
32:00:d3:98:5d:50:76:4c:bd:64:57:a4:99:b5:e2:ca:25:93:
35:d5:00:47
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQks3rxKxaRr66/y5/CadoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTNkMjNhMzllZDM2NTZmOWE2MDY0YjYwOWQwMmEyZjZlNGEzODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ow5GCibrsowNJNuz2J907vCFlaB
HSuMaow3VJ8cJXO6Pxrmmk+ZGzm5/kMAHVs2AM3kGG47gYivxLHtq85D1gBEUaSr
4xod33gwiVrb34MJnf3iaqYtKG4QsVFPkApfPpnIhDuc50/hfF2tQ6j6st8b54ti
fAhZ98z0eKdclVSXha/5pRGSuGpZVd0pu/avtH0ar99eM2g/6RrG1iw6ijUCBdxB
bUtyGXF/+xWcuUBOvn8Qapia+76dUGisgFKekywMI1jeN/iIMo3Gbb78xexkk5Du
z+uQRtyCod7MVexqN7KQ5YyTRnAjuoEPGswwY2eFA13jWJi+NIQke/UdXQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFP49I6Oe02VvmmBktgnQKi9uSjgnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzhlNjJl
OS00MDZkLTRhYjAtOGZkYi1kOWE4MDhlYzFhYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvOGU2MmU5
LTQwNmQtNGFiMC04ZmRiLWQ5YTgwOGVjMWFiMS8xL19qMGpvNTdUWlctYVlHUzJD
ZEFxTDI1S09DYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWDQMA0EAgACMAcDBQMqBgGAMA0GCSqGSIb3
DQEBCwUAA4IBAQB4zMkHQbc2R63j8lcit1S6g9uVup3YXumrMegiau8mp8Mi0WPV
lJs2X2vsYXMbsSfnlbCFqbj2oR35xEsLp1V0v0TUn6z9U40BebgGtCYarc/FZv9E
0hPwm95DHV0Qh5NlAFA8+ztAglNll81bUrmYbCRTzUOfMxO0h5aATtAhhS6fIVgu
0il/3TrGxWqtLheyJ4ARCtp1JUvW6u1Lk5AMtT0p8Oe6ue6CO/KJCtMHIM5BR1s+
PbLEzIIofr83y2W1t4VUlMfTSgWybpGo0pDDL/FlwmioA+RnBZ1JdLHxOBFFEWmT
LXCZ2kgyANOYXVB2TL1kV6SZteLKJZM11QBH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:18 2025 by rpki-client on console.sobornost.net