Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
File: aH2bViukcmGPk5jiZcoOcQj2h6M.cer (raw, json)
Hash identifier: TLO7+wCTBJaRaHZ8dZZFtl9yPkB/yYFIYk7RmCNM3mM=
Subject key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067CCF428C12BF8E47A213F478E31C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.55.138.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:f4:28:c1:2b:f8:e4:7a:21:3f:47:8e:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:19:00:fb:a8:0b:9d:91:ec:ed:6e:3d:fe:
b4:c3:54:f1:fc:2a:c6:fd:78:a1:d8:25:08:fc:8a:
36:3f:07:57:08:46:4f:57:8b:43:1a:c2:e1:92:5e:
33:5c:8f:c8:07:89:ff:d5:3c:e2:d8:00:58:c6:9d:
03:7f:35:7e:71:88:9c:fb:53:b8:7e:2f:34:9f:60:
ad:37:1c:5e:76:0f:e7:ae:72:7c:db:c1:eb:fc:25:
85:a0:30:1f:2d:82:64:5d:d3:22:5a:29:ed:db:93:
61:82:93:f9:0e:87:6b:cc:16:95:10:cd:25:3a:11:
26:79:9c:65:aa:5c:82:8e:79:7c:51:90:aa:24:e8:
03:10:cb:a6:31:d7:4b:cb:36:46:8a:9c:04:4b:3f:
03:04:a5:d8:2b:c9:8c:15:0b:2b:98:0a:3a:06:bc:
bf:b6:be:d2:64:66:64:91:50:48:85:f4:60:f5:3d:
41:ec:41:a0:c4:93:e1:e9:33:b1:a1:a8:25:4d:6e:
e5:3d:2d:e1:fa:2f:08:78:c8:b1:30:2b:85:69:1b:
36:eb:4d:73:77:ce:39:f3:f9:c9:b5:cf:f0:02:84:
04:44:f5:f9:c4:41:ab:b3:12:1d:f4:12:3d:51:f3:
b6:e7:23:12:d0:ae:3e:da:07:98:ed:a8:20:16:6c:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8b:c8:e7:76:1a:5d:80:5d:77:4f:67:05:eb:c8:f0:a6:67:
1f:e7:c0:ea:f7:d2:db:db:c9:4c:7c:81:e2:c7:6e:79:3a:07:
87:06:42:4e:f0:37:7d:cb:b9:cf:3e:7c:37:d2:fa:ca:36:82:
ce:db:93:00:50:e5:20:67:c0:aa:0f:77:2b:b1:6b:7b:a5:2c:
e9:31:45:83:37:45:2a:52:d2:d3:c1:cd:ef:33:36:d3:60:e7:
e3:c3:4d:9b:e0:62:f3:ea:56:b1:57:b0:9b:ec:67:c1:84:5e:
a9:36:39:f9:52:56:f8:6c:f7:c9:e0:f5:ea:38:91:cc:33:b9:
82:a5:91:e4:42:61:db:15:50:3e:f2:30:ed:be:c6:73:f6:78:
dc:ec:6f:d8:e8:24:53:23:b3:55:26:b4:16:3c:4a:5e:3c:98:
16:54:b4:d1:0f:9a:8a:8b:b9:cc:ae:10:78:b1:14:bb:03:f7:
18:0b:e2:52:ea:2b:70:b8:87:3b:2d:95:22:21:ae:5f:33:4c:
7d:24:cb:bb:9b:a6:76:15:20:cc:f9:d8:33:97:f1:58:4b:d4:
26:02:2a:cc:e9:77:5e:da:c0:8d:32:db:67:99:fd:68:d0:03:
4a:46:60:25:ae:cf:e5:3d:78:47:61:d3:9a:27:2a:77:b8:24:
82:dc:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:30 2025 by rpki-client on console.sobornost.net