Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer (raw, json)
Hash identifier: +OyJaGiW+mzkPGS+DYf4YIh1cPkeSHAK9WdDCQTwB9Q=
Subject key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216E403F5A062AEA9CDA565EEE350C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50583
IP: 46.30.184.0/22
IP: 46.33.160.0/19
IP: 185.173.124.0/22
IP: 195.191.172.0/23
IP: 212.114.0.0/20
IP: 2a03:1d00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:40:3f:5a:06:2a:ea:9c:da:56:5e:ee:35:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:bc:70:ec:59:36:48:9a:51:fe:bc:d3:f8:
08:d6:9d:46:67:9d:3a:92:a5:cc:3e:6f:1d:1f:fd:
79:03:1d:71:51:67:7c:b7:c0:de:41:0f:78:f9:fb:
04:c6:12:55:8a:3b:97:6e:06:41:f8:30:53:25:08:
a8:f3:58:f7:ff:f7:eb:09:79:b8:42:6e:f7:07:32:
19:3e:ed:71:90:e3:fa:4f:2a:97:f3:2e:c0:5d:59:
e5:68:c7:2d:f3:10:0e:f8:2f:3a:2e:24:26:52:e9:
ee:c8:75:50:31:c1:b8:9c:a9:6e:3b:ed:13:05:d1:
e3:07:c9:7d:fc:0d:b4:fa:9f:43:07:7c:db:d7:cb:
37:87:85:d9:ca:bc:a6:1a:04:61:ef:71:be:d1:d2:
ca:34:8c:98:c1:72:e6:77:f5:78:e2:62:75:41:19:
2d:8a:e9:4c:cd:43:51:59:89:73:4c:91:c4:3a:11:
0a:b2:68:e4:9f:30:24:d7:83:2f:f2:4d:96:09:5b:
99:1d:80:f0:79:1b:a3:74:69:80:40:05:87:b5:e9:
f3:db:f7:df:a2:e5:28:ab:5d:ff:8a:06:91:af:00:
27:22:c3:68:91:38:f7:72:d9:88:96:13:3a:39:07:
58:ff:9c:ad:4e:c3:2a:ad:b4:0f:d0:03:d9:2b:90:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
IPv6:
2a03:1d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50583
Signature Algorithm: sha256WithRSAEncryption
73:7c:37:3d:e7:96:04:ac:ab:e9:46:fe:59:78:25:5a:32:57:
61:7b:46:12:c0:ae:ba:9c:73:80:ac:ae:bd:74:ec:68:e9:10:
f2:67:4c:da:42:61:32:77:cc:63:f0:71:b5:59:94:ab:28:03:
76:08:7f:5b:0b:18:3d:e8:07:e4:46:4c:98:a9:78:c5:cd:5f:
e3:80:8c:33:2f:2c:d1:4c:b7:78:69:fd:33:e2:54:c8:3c:fc:
f4:87:e3:67:6d:a7:d1:26:5e:67:a2:0b:3e:20:d2:2b:ae:c4:
77:8d:77:4f:74:c2:f4:74:ca:d4:32:6e:94:43:07:07:ba:7e:
89:02:46:dd:68:5b:7f:e5:2a:c6:85:f2:80:1d:05:d7:28:94:
ca:4a:d9:e2:68:d1:8c:73:fb:a6:8c:e2:8c:29:f6:e7:a3:45:
f2:43:39:52:c9:d4:37:08:5d:a8:6d:b7:47:d5:1b:1a:33:6a:
d0:95:3b:75:8f:57:b5:b6:06:4e:53:4b:99:1a:b0:b1:4c:86:
07:57:7b:b7:47:e6:f7:ac:4d:89:80:73:6c:78:7d:07:29:8d:
d7:1a:03:de:bf:d3:18:0e:ed:82:81:14:dd:b6:1c:02:5a:ba:
b3:72:e4:28:6b:d8:6a:61:1a:8a:f9:38:39:ad:e7:9f:33:ee:
7f:aa:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:14 2025 by rpki-client on console.sobornost.net