Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
File: lmbCOPf_2s8VyALjILUuCYCGnOw.cer (raw, json)
Hash identifier: YxLc5SudvTyIZ5L3ziC2my9hMINX1YvU1pdQrJye/JI=
Subject key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DC5494071A74B8EDB7456DDF6F718
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197864
IP: 195.225.50.0/24
IP: 2001:67c:2424::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c5:49:40:71:a7:4b:8e:db:74:56:dd:f6:f7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:13:f9:0d:b4:f2:32:1a:2e:51:b3:45:49:
7a:35:86:ca:4c:8f:15:37:ee:22:28:9d:b8:08:3e:
22:f1:ba:38:a3:f8:0a:14:45:35:dc:b0:cd:d7:c9:
89:89:a0:09:3d:a5:db:53:d3:dc:d1:55:b5:0b:0d:
f4:73:66:95:02:5b:16:1d:36:56:30:b3:19:b3:00:
73:23:ab:39:2c:f0:0d:b0:c7:62:16:57:bc:4a:72:
af:82:99:2b:1b:6b:1a:26:2b:81:93:51:e8:e1:1b:
59:ba:2a:8f:5b:4c:a8:e9:bc:f0:3e:bb:82:c6:ed:
57:12:ab:e3:9b:92:57:23:7e:7d:79:28:e1:2e:9c:
40:1f:33:7a:29:b6:50:a8:1a:a0:e8:8a:5e:56:80:
8c:7c:63:7d:60:ce:f3:5a:fe:9c:62:70:6d:a6:12:
1d:98:b2:e5:9f:a1:77:30:87:6d:f5:48:3f:68:eb:
cd:cd:57:1b:06:ae:9c:9c:a2:d0:ea:4b:e2:73:96:
85:c5:bd:84:69:9a:cd:a4:6a:7a:33:77:02:5d:e9:
2a:25:7e:9b:dc:b3:a7:2a:20:63:10:c5:ba:4d:cd:
c2:ed:b0:74:e1:f0:7f:05:1e:c8:a5:40:5f:6c:77:
ca:4c:7d:e5:e8:ee:63:04:0f:f0:5b:44:dc:58:87:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.50.0/24
IPv6:
2001:67c:2424::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197864
Signature Algorithm: sha256WithRSAEncryption
55:75:29:5a:50:f0:7f:10:7c:6e:c6:f8:76:dd:c8:e0:e6:ad:
2d:3c:38:ea:0d:f6:6e:cd:b0:3c:a6:0e:1a:4e:32:df:3e:23:
d0:94:54:42:ca:31:f8:45:ee:d7:ac:ec:b2:59:42:a0:6f:22:
7d:52:bb:40:6d:c6:e5:03:37:58:30:29:80:e0:6b:46:ba:58:
48:51:c6:e9:22:06:4d:e2:98:63:c2:1e:23:d6:d4:a4:f8:3d:
98:2b:d8:f6:46:2b:7b:85:3b:e2:8d:53:70:19:2c:10:e5:87:
bb:14:05:ae:62:d5:25:5c:1d:e6:93:fe:44:c7:32:08:5c:9d:
78:d5:cb:bb:54:46:23:65:1e:9e:6e:33:5f:b9:63:d6:29:ca:
6d:87:c9:32:8d:99:db:61:50:54:81:38:bb:48:6c:ed:72:4e:
ff:06:c1:4a:09:ac:2c:89:bd:ba:13:cd:aa:a3:82:6b:bf:cd:
ff:23:43:6b:27:cf:8b:60:bc:2a:59:63:b5:bd:4d:de:02:9c:
a7:22:51:31:77:75:f5:70:82:40:0c:e8:0a:00:3a:47:40:44:
30:33:8f:43:c3:88:4c:55:52:9d:f9:8b:64:0b:85:76:79:19:
1f:d7:fc:68:7d:e3:74:5a:52:e4:db:3f:8b:9b:10:f0:5a:7a:
3a:41:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net