Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
File: iXj_XaszxC2mX-Thq_vKTq-90qo.cer (raw, json)
Hash identifier: SX4jh2IN7yn20cyvr+2amvMrw6poWkbeuEHL2x6mjGE=
Subject key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195FBD69B512F1700F403440CBD50757F17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Apr 2025 13:28:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207147
IP: 45.11.68.0/22
IP: 45.88.128.0/22
IP: 45.143.208.0/22
IP: 84.247.4.0/22
IP: 85.204.148.0/22
IP: 89.37.228.0/22
IP: 130.0.88.0/22
IP: 176.223.176.0/22
IP: 185.164.212.0/22
IP: 185.178.88.0/22
IP: 185.194.120.0/22
IP: 185.237.40.0/22
IP: 2a0b:9c00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:d6:9b:51:2f:17:00:f4:03:44:0c:bd:50:75:7f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 13:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:df:d0:bd:db:d0:59:bd:3f:87:47:96:e4:
55:a5:19:a0:01:c0:d6:01:98:d8:17:0c:40:3f:a2:
91:ed:35:a7:cb:17:2c:fe:ba:07:64:7a:d5:0c:13:
e1:1b:2f:5a:ab:16:83:c7:b3:c6:a2:42:e4:fb:e3:
9a:c0:37:6d:31:b3:bb:4c:e4:db:95:e1:1e:26:ae:
ae:d9:0a:ab:5f:dd:a8:a5:18:db:b9:a8:98:bc:05:
04:2e:ee:b5:72:2e:f4:fd:35:92:e2:94:9b:9e:63:
a9:2f:b6:40:86:a2:f7:99:01:92:fc:c4:f0:b2:ff:
c7:9f:84:64:ee:8b:83:d7:03:d9:2c:7a:9a:a2:d6:
a9:16:48:61:4b:44:7d:6b:6b:ce:6f:0c:fb:e9:84:
bb:58:eb:59:d8:86:0e:50:e5:1e:8d:ed:b0:19:1d:
9e:0e:45:f0:11:5e:32:5c:f1:46:a4:cb:43:6a:2c:
6c:e0:59:61:c9:82:90:6e:0f:71:f8:16:d8:61:cf:
ec:4b:d2:6a:52:2e:46:67:61:7d:25:9d:8b:6c:99:
12:ec:dd:5e:93:86:57:48:4f:49:af:90:df:06:ce:
78:d5:8e:ca:d0:22:e3:ac:36:3f:ac:3d:3a:a4:e0:
a0:32:23:25:97:2d:52:75:52:af:b5:28:06:49:3f:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.68.0/22
45.88.128.0/22
45.143.208.0/22
84.247.4.0/22
85.204.148.0/22
89.37.228.0/22
130.0.88.0/22
176.223.176.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
IPv6:
2a0b:9c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207147
Signature Algorithm: sha256WithRSAEncryption
02:7e:f7:13:5b:f0:a3:64:05:bd:21:71:50:78:43:4d:d2:e8:
bf:fa:c0:0d:3e:5b:95:d5:05:4c:5f:29:73:25:ec:b2:95:0d:
07:bf:33:ff:c9:7f:79:e4:ac:de:78:e1:ac:b3:1e:42:6d:02:
65:25:47:53:ad:66:df:5f:8d:f0:fd:3f:2e:ce:4a:8f:51:70:
9a:3d:28:79:af:77:76:6b:fc:f0:23:01:a6:f4:f5:75:8e:ad:
18:a0:a2:d2:41:77:72:e4:50:14:24:33:fa:ce:10:c6:2d:9c:
eb:50:7c:8f:09:aa:f1:84:82:aa:0b:b0:12:f5:c4:9e:b2:75:
f8:75:7d:e9:3d:df:f7:82:15:bb:c2:a9:71:f5:cf:75:59:95:
11:3e:11:a1:58:31:87:16:bf:40:2b:42:ca:5e:09:40:79:32:
65:1c:81:b6:d8:a7:bc:cc:88:5c:83:99:9c:59:08:65:ae:bb:
d2:77:16:75:4f:f7:6e:d3:4f:26:a2:6a:9d:d6:6a:bc:90:63:
7b:ae:d5:83:4e:4e:f9:dd:98:e9:bd:92:ea:73:ea:f4:a5:4e:
b9:c5:81:7e:c9:36:ef:7f:d8:30:9e:53:c6:29:90:83:00:75:
a6:14:21:db:ec:3c:37:4b:8c:90:26:03:42:4d:4d:26:d5:34:
3e:74:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:17 2025 by rpki-client on console.sobornost.net