Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer (raw, json)
Hash identifier: +Rn/dPZrJDNOUGDvWgI+puIK/khJajoY4YgU/uNOOkc=
Subject key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951E64CC51143D4E6B81EF8AEC94883A47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Feb 2025 13:27:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205803
IP: 185.201.156.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:64:cc:51:14:3d:4e:6b:81:ef:8a:ec:94:88:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 13:27:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d32c121735449f1538ff0036f4abd0600a825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:bd:7e:bd:8b:c1:93:9a:47:18:d9:e7:3c:
fa:04:28:d2:c1:76:e8:7e:2e:57:cd:2f:03:3e:81:
69:74:8b:90:41:b0:33:7d:99:fe:6d:ee:6e:7a:ab:
fb:79:81:45:df:dd:42:4d:d5:23:42:e5:51:90:5a:
72:40:b4:3e:f7:ff:46:74:93:3e:75:23:9c:bd:dc:
76:8a:ad:bf:5e:c4:2f:26:a2:ac:98:84:0d:53:a2:
12:ce:54:d5:9b:93:1d:16:ad:27:81:9c:72:86:c5:
42:35:da:19:0c:b4:78:b3:41:fe:11:ea:24:56:11:
16:29:6a:7a:3c:9c:33:f5:f4:7f:57:08:85:31:44:
3b:a5:7a:e4:2b:f7:32:b6:f0:b6:f1:e1:f9:cc:d4:
5d:3a:07:c1:cb:ab:67:54:87:e5:f9:19:4c:1c:01:
a2:15:71:4d:98:c2:9f:d0:fd:b8:9a:64:37:aa:4e:
86:c6:cf:6c:52:e5:fa:35:5b:49:ab:22:6b:66:85:
09:ef:31:04:40:78:2f:5e:ce:6f:87:43:5a:24:17:
df:df:2f:e8:8d:28:4b:a7:17:4f:52:60:e6:1a:40:
47:3d:d2:86:d2:e5:79:2c:fb:37:b4:ef:34:25:8b:
7a:fd:5c:d9:9d:88:8d:4f:9a:61:c3:17:43:47:a2:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205803
Signature Algorithm: sha256WithRSAEncryption
93:22:32:13:bb:28:61:23:1c:43:d3:bb:45:21:4b:b3:d5:9b:
0a:ca:a0:07:ba:d2:3c:c2:e4:dc:79:c0:29:38:04:7b:a7:88:
1b:fc:0c:bf:4a:90:0e:3d:a0:f9:64:96:64:58:00:d6:65:76:
72:c0:8f:85:19:54:c1:32:8e:6d:09:54:cf:d0:cf:a8:e6:a2:
13:d1:4f:9b:6d:59:e1:5f:77:35:ad:e0:4d:96:45:b0:53:59:
68:5a:0b:80:16:11:c6:cc:64:ab:c7:3f:f7:27:2b:36:80:6e:
47:01:da:31:6c:4c:c5:67:9c:32:32:9d:c6:31:ad:99:8f:0e:
72:36:a7:21:13:1e:a4:c1:27:76:85:a2:63:36:98:8c:d2:86:
d1:cf:7e:c3:5d:86:04:13:b9:fc:72:3e:6a:c6:bb:78:56:62:
24:ec:ee:5c:e4:93:21:08:4a:e7:b8:8a:d7:c4:f4:36:f8:ec:
c4:7b:6c:12:92:c5:d5:f7:22:ca:39:98:e2:bc:fd:33:95:65:
0f:59:34:5d:28:d2:48:c8:16:a4:f1:81:f8:11:cf:b9:d9:40:
45:43:8b:ed:9a:f5:3f:c4:5e:b9:ee:92:88:4b:22:c8:11:a0:
15:68:81:a9:49:20:77:f0:9f:ee:5a:95:e8:cd:21:43:c7:04:
6a:99:24:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:40 2025 by rpki-client on console.sobornost.net