Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.cer (raw, json)
Hash identifier: XhqYENji8nB3CzyCfXI+61gHe58y2gTA/9HFOu34MqE=
Subject key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FAAC62D1BAFC2DD46178180BF429
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43054
IP: 45.91.121.0/24
IP: 45.93.148.0/24
IP: 45.131.180.0/24
IP: 45.140.132.0/24
IP: 45.147.95.0/24
IP: 46.229.240.0/24
IP: 80.91.219.0/24
IP: 87.236.163.0/24
IP: 185.201.16.0/22
IP: 185.209.51.0/24
IP: 185.218.226.0/24
IP: 185.225.27.0/24
IP: 188.190.112.0/23
IP: 193.41.32.0/24
IP: 193.200.214.0/24
IP: 2a01:ebc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fa:ac:62:d1:ba:fc:2d:d4:61:78:18:0b:f4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:12:6b:a6:fa:f1:3b:37:7c:e6:91:cc:5e:
c0:42:bd:28:7f:e9:57:0c:76:46:44:0e:87:1c:96:
55:80:19:0b:8f:6f:06:fe:fa:81:6a:53:85:97:57:
11:34:d0:4d:c0:d6:e4:b0:98:37:c2:8e:b6:06:02:
c8:24:15:11:54:72:c7:ff:6f:25:52:ce:67:a5:c7:
1e:c7:9b:39:b4:b4:45:fc:fd:4d:1b:87:1e:33:b4:
9d:c5:a0:45:4c:99:d9:c6:5a:05:5f:ce:74:e8:88:
e7:2a:6b:6c:25:32:4f:4d:cc:04:d5:ef:5b:28:6d:
f8:58:ab:37:8d:28:c0:3b:4c:b5:73:f7:83:59:45:
d4:1a:f6:c1:7e:eb:85:8e:5d:9a:23:56:00:f4:ec:
2b:14:ec:7b:76:06:c6:4d:42:79:f3:98:1c:91:b1:
2e:8e:99:89:cd:47:b2:c6:09:6e:02:47:44:96:58:
c2:ad:0f:07:15:3d:be:f1:40:46:06:b5:f7:35:41:
d9:b3:8c:d6:36:7f:0e:12:84:21:04:47:de:9b:e3:
7f:7f:b6:7d:4c:11:1e:fe:de:a9:cd:b3:0a:b1:fd:
bd:c4:c1:72:d7:30:4c:65:11:d7:85:89:47:af:66:
cc:58:ed:99:0f:4b:0b:60:f2:c2:e0:c6:cd:a2:3e:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.93.148.0/24
45.131.180.0/24
45.140.132.0/24
45.147.95.0/24
46.229.240.0/24
80.91.219.0/24
87.236.163.0/24
185.201.16.0/22
185.209.51.0/24
185.218.226.0/24
185.225.27.0/24
188.190.112.0/23
193.41.32.0/24
193.200.214.0/24
IPv6:
2a01:ebc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43054
Signature Algorithm: sha256WithRSAEncryption
73:52:51:26:78:72:97:3d:ab:36:62:32:cf:13:14:18:87:62:
21:e7:1e:10:d4:75:6a:3c:96:87:78:cf:bb:92:23:f5:02:7b:
62:d2:5e:7c:bc:e7:21:d5:e5:92:e9:69:58:bf:04:81:74:86:
e2:50:f9:b9:b3:9a:2d:fa:af:67:6d:ba:47:7e:50:18:b7:36:
c7:bf:36:e1:90:20:ac:ea:50:d2:d0:90:ac:1b:0c:47:2d:35:
1b:f5:6f:e8:b9:18:b6:5d:84:c5:3e:0f:9e:5a:f8:93:9c:c4:
c3:7d:f3:9f:a7:ec:c9:5f:71:70:9d:19:0c:01:35:03:f5:1e:
64:02:27:7d:8d:92:9e:85:41:1a:e4:19:ac:e0:8f:f0:be:61:
37:4e:f8:90:fb:9f:f3:12:33:96:56:d4:24:be:71:c3:c5:de:
10:b0:86:51:bd:94:47:94:73:6e:88:c6:0c:7c:22:16:5e:1c:
f4:c5:63:1e:fc:b9:4c:71:c4:56:c3:b1:6c:69:0c:94:e7:92:
94:07:c6:8b:33:ea:96:a5:42:2e:0f:8b:ae:55:f3:ee:f7:3c:
f8:42:26:48:09:11:45:52:f6:27:61:d9:02:8f:aa:6d:4a:c4:
8a:59:34:2a:98:20:a2:84:12:85:1d:ce:7b:41:9a:0c:ff:7a:
b2:1f:0d:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgISAZQg1fqsYtG6/C3UYXgYC/QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmVlMjAxYzY1ZDY1NWVlOWNmZTI1MWY5NTFlYTkxYmJhMTU0NTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YsSa6b68Ts3fOaRzF7AQr0of+lX
DHZGRA6HHJZVgBkLj28G/vqBalOFl1cRNNBNwNbksJg3wo62BgLIJBURVHLH/28l
Us5npccex5s5tLRF/P1NG4ceM7SdxaBFTJnZxloFX8506IjnKmtsJTJPTcwE1e9b
KG34WKs3jSjAO0y1c/eDWUXUGvbBfuuFjl2aI1YA9OwrFOx7dgbGTUJ585gckbEu
jpmJzUeyxgluAkdElljCrQ8HFT2+8UBGBrX3NUHZs4zWNn8OEoQhBEfem+N/f7Z9
TBEe/t6pzbMKsf29xMFy1zBMZRHXhYlHr2bMWO2ZD0sLYPLC4MbNoj7V0wIDAQAB
o4IDBDCCAwAwHQYDVR0OBBYEFIbuIBxl1lXunP4lH5UeqRu6FUVnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzEzYTcz
NS0zYjFjLTRkOWMtOGNmYS1hOGNhOGU0YzdlNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMTNhNzM1
LTNiMWMtNGQ5Yy04Y2ZhLWE4Y2E4ZTRjN2U3Ny8xL2h1NGdIR1hXVmU2Y19pVWZs
UjZwRzdvVlJXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF
BQcBBwEB/wRzMHEwYAQCAAEwWgMEAC1beQMEAC1dlAMEAC2DtAMEAC2MhAMEAC2T
XwMEAC7l8AMEAFBb2wMEAFfsowMEArnJEAMEALnRMwMEALna4gMEALnhGwMEAby+
cAMEAMEpIAMEAMHI1jANBAIAAjAHAwUAKgHrwDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMAqC4wDQYJKoZIhvcNAQELBQADggEBAHNSUSZ4cpc9qzZiMs8TFBiHYiHn
HhDUdWo8lod4z7uSI/UCe2LSXny85yHV5ZLpaVi/BIF0huJQ+bmzmi36r2dtukd+
UBi3Nse/NuGQIKzqUNLQkKwbDEctNRv1b+i5GLZdhMU+D55a+JOcxMN985+n7Mlf
cXCdGQwBNQP1HmQCJ32Nkp6FQRrkGazgj/C+YTdO+JD7n/MSM5ZW1CS+ccPF3hCw
hlG9lEeUc26Ixgx8IhZeHPTFYx78uUxxxFbDsWxpDJTnkpQHxosz6palQi4Pi65V
8+73PPhCJkgJEUVS9idh2QKPqm1KxIpZNCqYIKKEEoUdzntBmgz/erIfDSc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:15 2025 by rpki-client on console.sobornost.net