Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dotOLq79y-wVupnop6IcieSyzL0.cer
File: dotOLq79y-wVupnop6IcieSyzL0.cer (raw, json)
Hash identifier: K8S0wxU5BBcb0GlP7IOnyz5M4g3M5CylIhOFwmsLSik=
Subject key identifier: 76:8B:4E:2E:AE:FD:CB:EC:15:BA:99:E8:A7:A2:1C:89:E4:B2:CC:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01958E56CEC763DD282F24C36DA936450AFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Mar 2025 07:10:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211837
IP: 194.39.247.0/24
IP: 2a14:8680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:56:ce:c7:63:dd:28:2f:24:c3:6d:a9:36:45:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 07:10:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768b4e2eaefdcbec15ba99e8a7a21c89e4b2ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:b1:88:3e:45:dc:cc:32:01:1a:8a:b8:82:
95:cd:7a:34:8e:aa:90:45:08:1e:cd:d9:bd:44:6c:
f7:29:64:4f:2c:95:9b:9a:ac:14:a5:eb:b6:76:7b:
02:b7:58:44:57:c2:64:57:eb:f9:2d:91:04:9f:82:
b2:f0:8a:be:43:bc:0b:42:da:5f:1e:ab:22:73:41:
90:d3:7b:c1:83:56:9f:ad:56:49:e7:8e:5f:dc:3a:
a3:66:60:46:59:69:ea:6a:02:45:57:6e:ef:df:fa:
6f:5a:dc:e3:01:30:d0:46:f1:54:09:2f:18:03:fe:
65:ee:74:78:3a:58:82:0c:38:f9:18:71:df:19:38:
20:c1:c0:1c:d0:76:5e:cb:21:2d:4e:eb:63:fd:a7:
de:ab:85:d8:d1:d2:35:f2:87:76:65:d3:f4:6e:a6:
67:e6:68:79:04:28:51:9d:97:5e:0e:8f:0e:7d:19:
3a:15:15:2e:ab:aa:7f:cb:7f:21:78:53:0b:19:c1:
07:4c:ce:67:0e:b6:84:7b:41:42:46:f9:78:cd:33:
ab:ec:44:1a:64:84:9f:a7:ea:11:eb:8b:4e:93:00:
55:3d:3a:b1:f5:01:2e:cf:34:22:59:14:2f:ee:85:
0f:69:fa:17:db:b8:7b:ca:da:a3:51:20:04:4d:b8:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:4E:2E:AE:FD:CB:EC:15:BA:99:E8:A7:A2:1C:89:E4:B2:CC:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.247.0/24
IPv6:
2a14:8680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211837
Signature Algorithm: sha256WithRSAEncryption
ac:16:ca:e2:6c:8e:bf:f5:2f:85:57:00:38:c5:d2:88:1b:8e:
2b:81:a8:70:80:ea:01:31:ad:0b:c3:52:90:e0:2c:a7:14:fb:
7b:98:3d:1f:e6:47:63:63:87:bb:bc:7c:17:2a:1e:8f:40:20:
ba:64:32:70:22:1e:6e:10:6e:50:2b:ab:93:b2:51:17:5b:61:
29:2d:5e:63:ff:03:cb:fc:40:78:75:8a:8c:3f:e6:a4:7d:a5:
73:c5:04:1c:ad:19:92:92:bf:a1:f7:ba:83:bf:d8:60:7e:a9:
88:0b:e9:ca:6b:1b:04:cb:0e:f5:22:c9:3c:f2:0a:15:fe:6f:
90:3e:14:99:09:1b:11:df:a2:96:4b:06:7f:01:c6:3b:8a:9e:
5a:e6:b9:54:c5:bb:05:8e:7a:71:e3:8d:af:f7:7d:51:3a:c9:
a4:76:50:71:bf:e8:10:55:4b:5f:1e:e9:2e:6a:19:6e:52:8e:
c3:a9:19:af:67:0e:d8:f8:0d:71:38:30:9b:93:44:9c:f6:00:
91:0f:1b:19:5a:1e:a2:02:10:6c:be:54:ef:23:2e:dd:45:7c:
f2:a5:1c:07:8e:86:2d:de:da:a6:07:11:c6:ac:8b:48:af:56:
c4:c9:ef:ad:22:10:1e:ff:7d:97:93:4c:50:ee:bb:6a:8e:34:
8d:55:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net