Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer (raw, json)
Hash identifier: 4ir1wR0ff16DROUl4r9LNSEjTysd57FYzKxfwT4C120=
Subject key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA83646ADF7B1EFC90C2E16A117EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210964
IP: 194.150.78.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:36:46:ad:f7:b1:ef:c9:0c:2e:16:a1:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:bc:69:2f:95:fe:50:9c:21:16:48:85:60:
e3:8e:6a:aa:06:cf:f1:5c:aa:8c:1d:4c:d2:35:4d:
e2:86:86:4b:d0:3d:2b:44:71:19:55:f8:c0:ae:c9:
87:af:df:d8:45:29:16:e4:c8:92:07:18:d9:ed:88:
77:ac:b0:b0:f5:4b:dc:f0:39:47:b5:ec:6f:75:ee:
c9:af:52:2c:a2:4e:9a:68:fa:a4:93:e8:02:0e:5a:
fc:46:a2:93:fa:11:3b:a1:bc:96:af:c7:9b:53:3b:
07:62:f8:73:5e:a2:38:93:9a:a0:a1:a8:19:a6:b3:
12:a8:07:19:8e:ce:97:17:ae:2c:24:22:2c:a4:dc:
a7:00:32:62:70:b6:9e:b4:84:2e:65:30:cc:79:e1:
e5:cd:fd:bf:31:72:33:35:5b:93:c0:22:09:c2:03:
4a:2d:6e:4f:49:43:2e:76:80:3a:7e:1e:ae:d5:b4:
a7:58:81:b1:64:74:f2:61:71:a4:29:c7:54:c7:70:
a6:e7:4b:ec:6b:aa:c9:c2:72:ef:9d:b9:27:0d:66:
8d:0c:73:1b:b8:9f:58:ea:37:60:a0:0f:5d:9f:88:
67:53:1b:cc:81:e1:d2:c7:67:20:a4:bb:36:e7:ad:
75:e5:61:e4:bb:a5:a9:6e:fb:06:0d:83:56:e8:5b:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.78.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210964
Signature Algorithm: sha256WithRSAEncryption
90:70:21:ac:5a:ad:78:e8:25:fa:c2:54:3a:88:21:be:0b:95:
e0:ef:28:fd:b5:35:ee:37:35:50:e7:dd:dd:4b:95:0d:35:58:
e5:4f:ee:19:76:28:c9:39:71:15:3c:8d:70:8d:c7:71:94:bb:
24:f2:b8:32:c6:40:40:d0:c1:36:1f:9c:9b:7b:30:bb:00:bc:
b5:aa:a3:73:27:6c:7a:93:db:a3:b7:1f:88:69:c1:12:e3:90:
d2:67:e5:19:5b:1b:9a:a5:3d:b8:b0:55:58:db:5f:32:4a:fe:
a6:5d:00:6b:35:b4:16:13:bc:11:02:fa:75:da:bd:a1:93:9e:
65:f9:fc:04:87:f2:93:d6:cb:0b:82:e3:a8:6a:ce:92:8b:7b:
33:fb:d7:b9:fb:04:19:27:45:d5:de:d2:15:25:c7:13:0b:54:
e5:63:2e:f3:e4:96:1d:ab:2c:38:7e:e5:28:3e:d5:d5:c0:07:
34:24:90:37:69:5a:29:6d:c0:33:f2:59:74:2a:bd:fd:44:9b:
9f:4d:7b:3a:3e:97:02:69:a3:81:ba:73:a7:88:f1:f1:7a:19:
5a:38:60:83:ab:e4:ea:1d:8c:f6:be:5f:86:cd:b3:56:2d:55:
a9:b4:1a:1b:66:41:93:2c:09:f5:34:24:00:3b:d3:76:40:b6:
e4:f2:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:14 2025 by rpki-client on console.sobornost.net