Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
File: hP-lQvPYybB7926uioaYWj17Tcc.cer (raw, json)
Hash identifier: g7DtX3L0ZXHOfxI9XTbD+FAj8DygwhoEIs7w8Jt8daU=
Subject key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C19B8434C63D7C90B483C90106E59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207058
IP: 185.167.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:b8:43:4c:63:d7:c9:0b:48:3c:90:10:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:9e:91:4a:9d:66:e2:bc:63:5a:5c:0d:f1:
b7:d3:68:32:47:c3:7b:b7:f8:1e:7b:cf:63:a0:6b:
73:bf:22:0b:72:87:23:ac:09:2d:fd:79:35:45:97:
e4:4a:96:74:ad:52:96:91:50:9d:be:70:3c:7e:d3:
97:98:d6:b3:53:a1:42:b8:81:f5:00:f3:a7:4e:70:
42:9c:b1:5a:9e:54:5f:81:62:b2:81:ee:5c:8b:f8:
86:59:f1:22:84:18:2d:55:65:1b:aa:29:9b:7c:42:
28:90:6f:34:55:85:8f:ab:a9:63:d4:8c:41:0f:18:
11:c4:0e:fa:5a:93:d9:61:2d:f8:d1:5b:05:21:58:
0c:f1:22:6d:74:59:5e:12:9f:ab:2a:00:e0:15:09:
31:48:c6:80:ae:5c:c9:d6:a4:e8:cf:81:36:43:d5:
6a:db:da:71:dd:aa:d2:64:f1:1d:56:70:d1:a2:9a:
e3:fb:e6:ac:fa:25:92:c3:88:fa:c6:7a:e7:d1:cb:
85:13:a9:11:77:81:df:b8:18:1e:94:3b:75:d8:97:
74:96:de:02:bf:1c:d1:8b:f1:54:1c:d2:01:6a:72:
34:7c:cb:e3:e8:2c:d1:79:4b:9e:62:ed:9e:69:cd:
9e:3e:38:38:e4:1e:a3:9f:dd:d5:57:2d:49:52:8b:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207058
Signature Algorithm: sha256WithRSAEncryption
1f:77:b5:86:69:1f:df:9b:9f:13:01:04:19:8c:f6:ba:07:8d:
a6:3d:75:68:62:63:e9:9e:27:dd:84:2e:e7:97:1b:20:02:11:
78:1d:5e:aa:15:f3:d0:d9:ce:d9:65:95:ab:55:42:7e:6b:91:
08:f7:28:8d:ae:b0:98:ac:b0:e7:04:15:7e:87:79:b9:d5:41:
0a:93:50:da:fb:e0:af:12:e3:db:f7:50:f6:5b:9d:28:f8:66:
40:f5:95:04:7e:50:9d:97:17:e4:75:a5:d3:af:e1:ac:ea:fb:
00:82:a8:dd:c6:97:00:5d:c5:2f:f4:48:45:09:a5:12:2a:98:
b1:01:21:86:05:53:62:0b:bd:e6:1c:53:1b:fe:e2:8d:a9:12:
9d:45:50:7c:bb:26:fd:d2:b8:4e:5e:6d:15:ff:c6:52:0a:e0:
85:2c:21:68:ba:d7:16:f8:01:37:17:db:46:8a:a9:d6:9a:f9:
7d:6d:46:6e:1d:3f:ce:f9:1b:8e:b8:4e:66:24:0c:c0:3b:16:
06:cb:6f:43:ef:5a:08:a2:bb:86:d5:9a:1c:9b:64:f3:d4:d0:
b5:ee:32:ef:a8:b8:1b:2d:6d:e7:e2:94:7a:cf:bc:ea:7a:dc:
06:59:97:1c:80:ea:38:b8:4e:3d:cf:62:28:7f:15:e8:6d:79:
6b:ad:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:14 2025 by rpki-client on console.sobornost.net