Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.cer (raw, json)
Hash identifier: RuNqkTO+OgczTsMpMURr/yA7WsZi1w7BThydSpArAoQ=
Subject key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747B7A602A8F55EC36C694323066B84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41833
IP: 46.227.248.0/21
IP: 89.249.208.0/20
IP: 93.185.224.0/20
IP: 95.141.48.0/20
IP: 141.138.176.0/20
IP: 185.58.200.0/22
IP: 2a02:f50::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b7:a6:02:a8:f5:5e:c3:6c:69:43:23:06:6b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:59:b0:62:4f:61:40:4e:be:3b:6a:c1:9a:
92:f0:aa:93:73:ae:8f:cb:dc:04:a1:b4:52:d8:84:
4e:11:5e:83:1e:fc:40:b4:46:ef:66:b4:af:41:53:
d9:e8:c8:52:15:8c:a2:26:10:eb:13:d6:16:5d:4a:
e6:a6:be:e8:c3:68:3b:02:10:c2:8d:2f:0a:e0:a8:
0b:09:54:32:a8:ce:8f:9a:d5:03:1e:fd:9c:02:d4:
98:1b:c7:5f:b0:c7:41:ec:d8:df:4b:c7:fc:40:7a:
48:e9:35:71:34:d2:c3:f8:d7:4b:6f:fb:24:67:2c:
e3:8e:f6:a1:94:fb:37:47:f2:14:e3:d9:4c:76:5b:
3b:a0:1e:f4:9a:37:cd:24:58:a1:77:49:71:de:06:
73:d9:b7:91:a6:fb:c3:3b:57:f9:d0:b6:af:82:f5:
be:f5:21:91:3d:82:93:74:af:0c:63:1a:c4:89:8d:
b0:c4:6e:17:72:d2:33:14:c4:cf:a2:14:f6:79:a4:
40:e3:96:56:bc:a9:57:f3:a1:79:fb:5a:0d:0d:5f:
97:bf:02:ea:f5:5f:53:4f:60:3f:64:55:f7:6f:66:
14:16:11:a0:2a:bb:c5:d3:01:62:0a:2b:05:4a:8a:
fd:81:38:af:9a:8c:81:94:cd:b4:e3:a0:02:f5:28:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.248.0/21
89.249.208.0/20
93.185.224.0/20
95.141.48.0/20
141.138.176.0/20
185.58.200.0/22
IPv6:
2a02:f50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41833
Signature Algorithm: sha256WithRSAEncryption
82:ad:cd:93:09:7f:87:92:96:1c:ba:16:75:71:d2:a0:86:cc:
aa:83:29:47:fe:60:59:9a:ff:47:f8:c3:c7:e9:de:85:e4:af:
8f:c8:08:42:e2:ce:f9:1b:45:2a:d0:c7:d8:34:22:bd:5b:4b:
73:ce:42:9c:8b:1d:d4:58:c0:7a:2a:f9:40:48:e4:35:23:e0:
c9:a2:87:87:ba:18:87:b6:3d:2a:db:e4:7b:63:9d:ef:f1:b3:
49:b0:3d:fd:47:45:b1:75:02:69:9c:cf:2f:a7:42:10:42:10:
62:8b:c2:bd:51:a7:6e:6c:dd:7c:a6:c5:51:b1:f5:93:d5:70:
5e:27:89:52:6b:e2:e1:62:35:c1:78:4e:26:11:00:52:a7:61:
01:70:cd:57:4e:b8:53:56:e1:aa:a5:2a:67:36:39:8e:60:27:
cd:11:53:62:65:9c:a6:bb:b8:91:09:35:a4:66:44:c0:61:59:
96:d5:2b:94:e4:ba:bf:ef:3d:db:4b:a6:4c:cf:2c:6f:94:7b:
c4:89:37:fa:a1:ce:2f:9a:59:6b:ae:06:38:44:98:27:fd:bb:
54:1b:87:0b:f8:17:34:ac:47:b8:f4:b4:34:ee:47:17:c0:c8:
f7:74:80:e4:83:fd:f2:cf:e1:4c:e8:31:10:07:05:57:39:9b:
25:ed:f4:9e
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZQnR7emAqj1XsNsaUMjBmuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQyOWRlOGJjYzNiZTQ3NGFiYmRhMmJlMmE4OWQwZjMyMDhjMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1ZsGJPYUBOvjtqwZqS8KqTc66P
y9wEobRS2IROEV6DHvxAtEbvZrSvQVPZ6MhSFYyiJhDrE9YWXUrmpr7ow2g7AhDC
jS8K4KgLCVQyqM6PmtUDHv2cAtSYG8dfsMdB7NjfS8f8QHpI6TVxNNLD+NdLb/sk
ZyzjjvahlPs3R/IU49lMdls7oB70mjfNJFihd0lx3gZz2beRpvvDO1f50LavgvW+
9SGRPYKTdK8MYxrEiY2wxG4XctIzFMTPohT2eaRA45ZWvKlX86F5+1oNDV+XvwLq
9V9TT2A/ZFX3b2YUFhGgKrvF0wFiCisFSor9gTivmoyBlM2046AC9Sh+dwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFJdCnei8w75HSrvaK+KonQ8yCMOFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzk5MTFh
Yy00Y2YyLTRlZTUtOGQ2My0wNDliZGM2YjhlZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvOTkxMWFj
LTRjZjItNGVlNS04ZDYzLTA0OWJkYzZiOGVmMy8xL2wwS2Q2THpEdmtkS3U5b3I0
cWlkRHpJSXc0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDLuP4AwQEWfnQAwQEXbngAwQEX40wAwQEjYqw
AwQCuTrIMA0EAgACMAcDBQAqAg9QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCj
aTANBgkqhkiG9w0BAQsFAAOCAQEAgq3Nkwl/h5KWHLoWdXHSoIbMqoMpR/5gWZr/
R/jDx+neheSvj8gIQuLO+RtFKtDH2DQivVtLc85CnIsd1FjAeir5QEjkNSPgyaKH
h7oYh7Y9Ktvke2Od7/GzSbA9/UdFsXUCaZzPL6dCEEIQYovCvVGnbmzdfKbFUbH1
k9VwXieJUmvi4WI1wXhOJhEAUqdhAXDNV064U1bhqqUqZzY5jmAnzRFTYmWcpru4
kQk1pGZEwGFZltUrlOS6v+8920umTM8sb5R7xIk3+qHOL5pZa64GOESYJ/27VBuH
C/gXNKxHuPS0NO5HF8DI93SA5IP98s/hTOgxEAcFVzmbJe30ng==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:23 2025 by rpki-client on console.sobornost.net