Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
File: hJG76s9bDFiembk_hOHF5H2a9gQ.cer (raw, json)
Hash identifier: 2GvdOn2tEcfsVkX+jq99TJnLx9Du2mLZ/cYr0F8xCGY=
Subject key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BB2965E51D1794DA4ACE5565C1E26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35186
IP: 195.80.225.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:96:5e:51:d1:79:4d:a4:ac:e5:56:5c:1e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:48:4f:a1:6a:17:05:d2:06:6f:e4:b0:39:
d7:b5:79:3f:10:b7:b5:4c:01:50:e7:1b:0c:4e:6e:
55:f6:05:77:d3:87:55:53:e1:68:96:bb:77:2f:14:
bb:05:f8:80:0d:01:6c:a3:08:d9:18:d8:14:a5:88:
9f:54:08:8f:1f:72:79:8b:7f:b7:93:8b:cd:b2:ad:
fd:57:81:5f:7d:0a:71:93:62:5f:c5:03:43:4d:22:
8c:df:df:4c:21:52:3c:d9:58:68:b0:8a:98:67:ba:
c2:8a:d8:88:4c:5a:d3:82:1c:9e:d5:01:07:83:0e:
19:d4:50:00:7f:10:cc:8a:4a:97:76:ac:bb:65:25:
89:29:20:5f:e2:00:a0:dd:89:e2:0c:33:f4:e6:67:
00:46:99:2a:96:86:ca:78:3a:77:3c:98:7c:d0:eb:
e9:47:a7:90:7f:0d:52:eb:80:be:b7:f0:5a:12:22:
11:d5:9e:f0:4b:b4:bd:3d:e3:2e:9d:19:c9:64:b4:
7c:fa:b4:06:c0:f4:11:ab:93:2e:c2:0c:89:db:21:
3b:62:ca:58:cd:79:19:3a:99:c6:23:86:8d:7e:83:
29:bc:46:b1:0d:90:26:c1:15:52:92:31:70:f4:3e:
7c:b7:45:b6:1e:f0:fe:e5:aa:21:cc:8b:97:2a:61:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.225.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35186
Signature Algorithm: sha256WithRSAEncryption
55:b3:7f:00:fa:92:df:65:0d:96:c8:89:36:f8:52:ec:ce:15:
4c:cd:55:cd:8c:8c:95:52:0d:3e:7b:99:8f:95:b0:d1:62:db:
3e:a4:fc:88:07:43:72:34:60:f0:53:d2:0f:3a:e6:2a:79:d3:
ac:ba:3e:13:8e:7f:0d:47:7d:94:cf:e4:1b:f8:4e:40:40:41:
a2:c8:24:d4:d0:58:10:ce:86:1d:2a:c2:c1:90:66:20:59:91:
92:a6:5e:98:de:d5:8c:96:b1:62:25:36:b7:62:a8:3c:93:57:
0e:a9:2e:fc:34:23:dc:5d:e7:a4:1b:14:56:20:20:a9:56:6d:
f1:9b:e4:30:03:be:9f:01:4b:e9:de:6d:26:9c:34:2c:bf:0a:
76:b9:82:c1:7a:de:d3:54:71:e6:b2:30:40:ad:bd:d7:b8:0c:
14:c8:5f:25:62:e5:89:67:7f:8d:1d:e8:0f:39:0c:26:e6:7f:
ef:55:41:5e:17:b8:93:5f:f5:27:14:64:41:56:bb:3e:8a:c7:
10:da:31:f8:a6:6a:eb:65:cf:56:25:e1:b1:d7:43:a6:b2:71:
66:76:e8:59:dd:a6:8a:ac:8e:6e:f2:92:c3:2b:6e:78:9e:8b:
68:87:d5:cb:76:58:14:04:1b:d1:97:17:30:a3:fe:bd:de:d2:
82:df:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:14 2025 by rpki-client on console.sobornost.net