Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
File: biYdnc3dmGfliSrRpNII32lTEXc.cer (raw, json)
Hash identifier: bkT6Q/BBB9BAh+6IjYrQqosCyTbg3jtAXfR8z4BAf2w=
Subject key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4C23EF54888F149F6831AC1205B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48427
IP: 86.106.17.0/24
IP: 91.242.136.0/21
IP: 94.176.107.0/24
IP: 94.177.24.0/24
IP: 94.177.104.0/24
IP: 185.142.216.0/24
IP: 185.142.219.0/24
IP: 185.145.112.0/24
IP: 185.145.115.0/24
IP: 185.154.196.0/22
IP: 217.29.96.0/20
IP: 2a01:7560::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4c:23:ef:54:88:8f:14:9f:68:31:ac:12:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:41:89:d8:3c:43:60:c0:c7:17:22:41:4f:
1f:b1:b2:8d:c8:fc:fa:a5:61:bd:6d:4b:4d:0e:e8:
76:a8:5c:82:11:e6:f6:95:b6:37:b1:8a:92:3b:94:
d5:4f:b6:8d:12:74:73:fb:1e:f0:f0:4d:33:a6:74:
5c:54:51:99:1b:7b:5a:9b:2e:8a:c2:2e:78:52:4e:
fc:a4:62:0c:80:ed:cd:95:8e:e6:af:8e:0c:6b:fb:
8c:2c:ec:64:d0:54:14:5a:15:73:fe:4f:9f:99:3c:
c3:fd:a5:f8:9b:05:e2:4a:d0:6d:fb:f0:4d:65:7f:
7a:10:f7:ca:54:f9:ed:b8:b7:05:07:bc:35:23:ff:
8a:e8:c5:ca:0f:be:2f:98:c8:b8:d2:08:b5:10:53:
92:91:98:4c:60:c8:36:e8:89:5d:26:18:af:a6:b4:
95:6a:c2:04:22:c5:c6:67:58:9f:a1:07:e0:84:88:
38:38:45:14:d5:4f:a1:2e:f8:77:18:5a:61:4c:fc:
69:2a:87:07:46:b5:19:e9:0d:9e:d6:3d:84:ae:c9:
ee:49:33:4e:12:37:40:af:ce:56:ae:ec:3c:a1:fc:
4d:31:5f:cd:0e:7d:69:2d:31:5b:4f:b9:c6:8d:79:
91:33:b0:f7:58:75:3b:38:6c:5b:02:e0:e8:f9:f2:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.17.0/24
91.242.136.0/21
94.176.107.0/24
94.177.24.0/24
94.177.104.0/24
185.142.216.0/24
185.142.219.0/24
185.145.112.0/24
185.145.115.0/24
185.154.196.0/22
217.29.96.0/20
IPv6:
2a01:7560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48427
Signature Algorithm: sha256WithRSAEncryption
4a:5e:ba:14:73:64:ff:15:b7:69:fe:07:9f:38:5e:2f:c2:7c:
cf:c4:dd:b7:f5:e7:a7:80:4c:ca:88:a8:b8:b9:17:c3:15:7d:
cf:27:3d:5d:d9:8c:7c:84:01:2f:c3:f0:5b:ad:91:8c:da:26:
4f:2e:08:de:f2:f3:54:34:c7:45:ff:d5:f3:69:a3:b9:58:41:
b8:85:b2:68:a1:cc:a1:e0:85:2b:b6:4f:37:52:1f:79:f1:d0:
9c:bc:bb:4b:f7:9b:42:b5:5d:8e:e7:8c:3f:9e:87:50:6d:41:
94:d5:4f:f2:53:4e:5d:09:6c:75:48:af:0d:c0:1f:7b:f7:2a:
98:30:a6:d4:ae:1e:8f:a2:30:44:46:3f:3e:cb:18:eb:af:d5:
30:f1:96:f7:03:19:0a:63:ab:bf:9c:16:1f:00:50:88:99:54:
94:97:1a:7f:aa:bb:c4:54:a9:89:bf:43:17:55:99:d5:a6:38:
6a:cf:cb:69:50:1a:d1:6c:3b:86:ec:1d:33:78:68:10:03:c0:
08:0c:05:18:14:ad:d1:45:ed:c5:fe:c7:43:f5:00:72:75:d2:
50:15:fa:32:d8:d9:65:2d:0a:80:46:8d:bc:74:8f:62:ca:c3:
01:77:59:73:14:88:99:63:56:9e:86:4d:c0:5e:47:91:f0:9d:
f5:02:cb:6a
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgISAZQfjEwj71SIjxSfaDGsEgW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTI2MWQ5ZGNkZGQ5ODY3ZTU4OTJhZDFhNGQyMDhkZjY5NTMxMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ghBidg8Q2DAxxciQU8fsbKNyPz6
pWG9bUtNDuh2qFyCEeb2lbY3sYqSO5TVT7aNEnRz+x7w8E0zpnRcVFGZG3tamy6K
wi54Uk78pGIMgO3NlY7mr44Ma/uMLOxk0FQUWhVz/k+fmTzD/aX4mwXiStBt+/BN
ZX96EPfKVPntuLcFB7w1I/+K6MXKD74vmMi40gi1EFOSkZhMYMg26IldJhivprSV
asIEIsXGZ1ifoQfghIg4OEUU1U+hLvh3GFphTPxpKocHRrUZ6Q2e1j2ErsnuSTNO
EjdAr85Wruw8ofxNMV/NDn1pLTFbT7nGjXmRM7D3WHU7OGxbAuDo+fLzqQIDAQAB
o4IC6zCCAucwHQYDVR0OBBYEFG4mHZ3N3Zhn5Ykq0aTSCN9pUxF3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzdmNTJk
OC1jMmNhLTRhN2YtYmQ2My1mYmE1NjUyMzgxMjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvN2Y1MmQ4
LWMyY2EtNGE3Zi1iZDYzLWZiYTU2NTIzODEyOS8xL2JpWWRuYzNkbUdmbGlTclJw
TklJMzJsVEVYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQAVmoRAwQDW/KIAwQAXrBrAwQAXrEYAwQAXrFo
AwQAuY7YAwQAuY7bAwQAuZFwAwQAuZFzAwQCuZrEAwQE2R1gMA0EAgACMAcDBQAq
AXVgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9KzANBgkqhkiG9w0BAQsFAAOC
AQEASl66FHNk/xW3af4HnzheL8J8z8Tdt/Xnp4BMyoiouLkXwxV9zyc9XdmMfIQB
L8PwW62RjNomTy4I3vLzVDTHRf/V82mjuVhBuIWyaKHMoeCFK7ZPN1IfefHQnLy7
S/ebQrVdjueMP56HUG1BlNVP8lNOXQlsdUivDcAfe/cqmDCm1K4ej6IwREY/PssY
66/VMPGW9wMZCmOrv5wWHwBQiJlUlJcaf6q7xFSpib9DF1WZ1aY4as/LaVAa0Ww7
huwdM3hoEAPACAwFGBSt0UXtxf7HQ/UAcnXSUBX6MtjZZS0KgEaNvHSPYsrDAXdZ
cxSImWNWnoZNwF5HkfCd9QLLag==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net