Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
File: hSC3fQNbkS_6QG393ynjopY-aQQ.cer (raw, json)
Hash identifier: E9/2DL0U34DOh9OCER81OOcL8aggCF29GkOBXuYrv+w=
Subject key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB110C6C64AF3F8F02158C2BE54627
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29505
AS: 215275
IP: 85.233.0.0/19
IP: 149.249.64.0/18
IP: 185.111.68.0/22
IP: 2a07:6c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:0c:6c:64:af:3f:8f:02:15:8c:2b:e5:46:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:80:e8:03:fe:f3:55:c2:c5:dc:b0:c3:5f:
1d:c6:5b:00:89:9e:c0:d4:99:e6:51:e6:69:61:43:
06:14:e5:d3:1b:e1:97:4a:b0:2b:46:a4:2d:24:73:
1b:c6:1d:65:b2:1c:24:03:16:0d:47:5b:17:5e:4e:
12:fe:3f:19:3b:f2:96:5a:a1:d8:a4:79:dd:1d:85:
5b:26:6f:f3:d6:dd:38:d6:d2:c5:ef:ac:ad:68:33:
7a:a9:98:18:62:2e:41:7f:4a:c6:60:2a:b2:00:28:
67:9f:1d:55:01:3d:21:b4:f0:af:fd:e6:2d:ca:f5:
9e:46:d6:7d:76:86:39:ef:f8:b4:99:fb:0f:77:ee:
18:2e:9c:69:9f:6f:65:f4:a0:99:fe:af:30:0d:82:
53:a2:8e:a8:a0:0f:8c:a3:4b:3d:46:1f:da:cc:9b:
e2:89:20:e6:b1:9f:80:86:8f:0f:05:c8:2b:aa:8d:
ed:80:9f:13:d2:27:b9:89:e5:8e:2d:a7:63:48:88:
62:35:c6:98:61:d7:c7:f6:14:73:01:60:0e:6b:a0:
54:1b:08:28:f0:6b:d2:48:f8:b8:ac:87:9a:6c:35:
9d:8b:0a:0f:6e:8d:7e:1a:e1:18:6a:9f:81:2f:c6:
0d:9e:86:9e:3b:27:d3:da:31:b2:b6:1f:94:df:2d:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.0.0/19
149.249.64.0/18
185.111.68.0/22
IPv6:
2a07:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29505
215275
Signature Algorithm: sha256WithRSAEncryption
73:ae:33:23:22:28:cf:da:e9:0c:67:74:38:8a:c3:fb:d7:dd:
66:18:58:01:d6:9c:7f:52:49:e5:c3:e2:23:0d:19:fc:dc:31:
05:9a:61:88:c5:68:d2:01:2f:f6:72:39:25:8a:ea:a5:94:11:
d5:f0:4d:cc:38:2e:64:3c:ba:0e:d6:ca:f4:cd:73:da:57:ea:
1f:46:98:ca:38:01:7e:d5:a7:95:cf:8d:b1:89:e9:99:e3:4f:
18:64:19:01:3a:04:0c:0a:f7:d1:d0:f6:9f:42:0e:34:de:c9:
89:ea:b2:d4:09:9c:cf:ad:5a:b4:49:fa:e4:a9:c9:76:13:9d:
9a:75:50:0a:e0:57:d4:0b:47:d3:92:7e:3d:0a:3a:a8:ab:ed:
e7:a3:b3:e6:4d:3b:24:52:4b:03:04:56:0d:83:2f:ad:7a:64:
dc:f9:87:82:5a:60:7a:bd:c3:22:95:7a:6e:41:dd:0e:41:14:
bb:17:16:32:4c:32:cf:ec:36:9d:b1:f3:e6:21:a0:bf:46:e9:
00:c5:48:95:ca:23:bc:93:ed:3c:df:83:65:26:3f:7f:ba:df:
b4:ec:58:4b:a9:de:97:ed:83:0f:8c:cc:17:20:37:36:e9:ef:
40:02:1b:f7:9a:bb:09:aa:5e:57:4e:e7:f7:df:b9:e9:16:ce:
8a:f4:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:14 2025 by rpki-client on console.sobornost.net