Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
File: d5KQMR5unPpeUX-rsNlvqaccPaE.cer (raw, json)
Hash identifier: FbZ9OpVabL88dPiUCTIP8Ja+K2JEe4ZQn9PBGxUY9gE=
Subject key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAF9106F74C1BDDF69A5936B202F83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208071
IP: 45.159.160.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f9:10:6f:74:c1:bd:df:69:a5:93:6b:20:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:1f:ad:76:c8:01:23:85:95:4b:fb:f6:92:
99:99:41:af:a3:3a:b5:55:bc:1c:6b:1b:a1:57:29:
ed:57:37:28:5c:ed:ec:08:3b:3a:a8:87:be:5a:86:
15:ea:cb:7a:64:34:e1:24:20:cc:f8:62:f0:04:85:
4c:cf:a0:f8:11:bd:21:13:01:7d:2d:81:d9:e5:d5:
3e:3e:0f:37:7e:fd:55:d8:f7:4a:ca:66:50:05:a7:
ac:d5:a4:d2:1c:16:11:d4:b2:8f:db:27:0c:d9:c2:
cf:f9:ca:e9:54:22:26:6c:59:5b:b1:f0:a2:de:da:
e3:b9:1e:03:d4:50:ad:0d:46:75:9d:4e:78:35:a3:
08:b3:d2:d6:08:a2:88:3c:42:96:2e:d9:0b:0c:72:
1e:30:b6:40:41:20:32:f0:eb:cf:89:8c:e0:cf:71:
ae:49:bf:1f:fa:e5:21:41:99:68:26:ee:fa:f3:ac:
0b:c3:6d:29:48:ca:97:7e:01:1c:58:78:75:56:76:
d6:29:cf:96:e7:0b:ed:a1:f3:97:2e:cb:76:fb:f3:
38:ae:23:ae:a7:7d:68:19:ce:2b:65:0b:c0:51:c1:
8f:8f:c2:9f:25:f2:46:78:e5:44:85:c6:60:02:00:
61:a2:4d:1b:7e:c9:0d:a9:49:d8:62:ed:da:19:b4:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208071
Signature Algorithm: sha256WithRSAEncryption
a1:ae:1b:f5:e1:40:19:eb:47:04:16:da:32:47:7f:4d:9c:90:
ee:4b:0c:e0:36:4d:f0:de:b3:5d:0b:43:c6:e3:02:60:92:41:
f0:ca:39:4d:07:84:ff:7a:00:af:e6:1a:0e:df:d3:d5:aa:22:
7e:b1:85:e5:ef:46:f2:2a:0b:bd:ac:1f:cb:14:0a:da:34:15:
25:2e:da:3b:e8:56:41:98:2c:dc:7b:e8:d5:9f:d4:7f:15:33:
46:d4:7b:7e:6f:e3:9f:ec:17:66:1c:b0:b3:bb:7c:9b:c5:a8:
8f:e5:20:83:1b:3f:da:f0:03:dd:08:a8:50:4e:25:a3:eb:f4:
7d:09:9e:33:5b:0b:f7:e1:6f:94:8d:87:53:16:b0:44:76:70:
82:d1:e3:74:26:9f:66:5d:5c:75:23:74:bc:7e:9a:45:b0:ca:
6a:cb:ac:03:c4:0e:53:d0:e2:f6:3c:4b:e3:62:d7:c0:fe:64:
6e:1f:d2:66:fb:d1:af:a0:d7:55:8f:73:f0:ee:ed:4f:ac:ca:
53:d3:ce:10:19:2a:09:de:02:a3:cd:53:4d:0f:06:6b:48:98:
b9:ac:5d:36:77:3b:94:a3:23:66:b5:ae:5d:bc:73:72:23:72:
81:84:38:20:d0:1e:28:de:ed:cf:a8:26:60:12:54:05:85:b7:
73:77:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net