Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.cer (raw, json)
Hash identifier: wEPNgUNexcNFH7wZlpvnhnE/49z3gy40RGjoZRYxwxQ=
Subject key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B369D1A35C23AF80C006184551C57B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208033
IP: 45.158.204.0/22
IP: 185.132.236.0/22
IP: 194.120.124.0/23
IP: 194.120.190.0/23
IP: 194.122.240.0/22
IP: 2a0c:dc80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:69:d1:a3:5c:23:af:80:c0:06:18:45:51:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:9e:52:5d:02:67:86:ee:46:85:c1:77:24:
63:bd:08:ea:8a:1a:6e:4e:62:3d:24:c7:69:e0:24:
16:c8:59:cf:9d:3f:3f:55:b0:fd:a0:6e:e9:4f:f0:
98:6a:3d:eb:cd:82:97:d0:e0:32:b1:7e:e8:5b:16:
94:28:73:dd:e9:12:37:4d:d0:f1:1d:18:76:b8:df:
9c:92:4e:f4:c5:a8:53:bd:53:06:df:03:c8:d0:6b:
68:ec:00:49:dc:53:29:d2:8f:4d:08:d7:2b:df:4c:
ed:de:28:a5:dc:f8:21:6a:05:ba:45:f7:da:be:cf:
8c:eb:b5:40:f9:3a:c8:4f:4a:8b:bb:2f:da:e6:5e:
d9:71:be:c9:b5:6d:ab:ee:db:e5:62:66:a2:4f:13:
16:6f:82:a3:bc:06:2d:2e:6b:11:98:e8:37:f8:fe:
f8:c0:53:45:45:5d:79:df:bf:d2:cb:75:a9:7d:3c:
07:85:45:e8:53:e2:a6:cc:16:cf:96:25:bf:bd:9e:
f1:6b:77:96:2d:2b:e6:d1:31:2d:9d:4d:63:a2:1f:
0a:33:d1:ba:bb:5b:f3:36:61:b2:ef:e2:87:21:0a:
ce:14:52:cb:d6:24:43:f1:76:a3:3f:86:42:f2:81:
02:94:76:8c:c8:3c:c5:e0:8d:7c:bb:c3:be:e1:9c:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.204.0/22
185.132.236.0/22
194.120.124.0/23
194.120.190.0/23
194.122.240.0/22
IPv6:
2a0c:dc80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208033
Signature Algorithm: sha256WithRSAEncryption
86:d5:75:0b:1a:64:bd:c9:9f:83:d2:e6:34:86:18:8e:03:71:
87:bb:d3:08:98:1a:3b:6d:51:d8:91:70:f4:aa:7e:9c:80:78:
57:c3:cf:ff:96:7f:3c:df:40:05:0e:e4:57:fd:c2:f9:f8:97:
fb:6e:0f:0b:f8:17:25:d9:bf:3c:69:54:76:12:95:cb:72:01:
c6:e7:98:d0:cc:1f:56:82:50:f0:69:ab:b2:68:ec:ef:ae:af:
b4:3e:44:2c:2d:5e:6a:60:c0:98:b6:8d:d2:60:6f:0c:d8:12:
4a:80:03:1f:c7:85:7e:cd:5a:f7:c1:59:26:2c:d4:9e:bd:63:
3e:52:2b:d5:e9:d9:a3:cc:02:21:63:5a:d6:43:38:cd:e2:68:
19:9d:96:0a:f2:e3:ac:dc:e0:ae:f8:16:80:88:30:be:09:1a:
65:65:68:b7:d6:08:77:ff:e9:ad:38:46:a7:c5:40:c9:97:81:
4c:d5:01:63:d6:6c:e9:6b:5e:8b:46:33:96:9f:d4:ba:2c:a8:
9a:a8:91:03:30:68:55:b3:20:40:86:61:a4:59:94:c4:a4:43:
db:77:73:90:f1:c6:e3:d5:54:fa:26:c6:7f:95:95:12:7c:70:
17:b2:8c:e5:72:6d:98:09:ca:6c:ed:89:eb:71:00:c1:2a:5c:
8b:1d:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:18 2025 by rpki-client on console.sobornost.net