Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.cer (raw, json)
Hash identifier: VIRBCRw4oBkVU+B9K6GQPhJwsalKNJ0Kadw4oYDNf94=
Subject key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194746B3E6802FC688386B30E95B4ECA937
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 13:19:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216282
IP: 185.98.161.0/24
IP: 195.184.234.0/24
IP: 2a13:e1c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:6b:3e:68:02:fc:68:83:86:b3:0e:95:b4:ec:a9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 13:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:e5:b7:05:f9:0b:6f:16:1f:00:e6:52:34:
26:f4:33:67:ba:8b:c6:a0:51:da:99:3c:93:5d:ed:
cd:24:df:17:dd:8a:f6:7b:74:7a:f0:94:40:15:87:
6f:51:94:f7:57:2e:4c:46:6c:58:22:11:08:f1:58:
82:3c:07:2f:25:57:d1:01:5c:c0:fb:4d:93:de:7c:
06:fe:03:b7:1d:a6:2a:fa:74:d1:6a:73:67:5b:c4:
ee:bf:a3:21:ff:da:95:6b:36:eb:30:24:53:ee:2d:
b2:ba:cf:d9:bb:68:f8:37:a3:4e:d1:57:7f:2d:12:
28:8f:e1:e2:a5:50:f3:c0:62:95:c9:cb:f4:34:a3:
03:7d:61:d7:b6:c1:f9:b5:78:f0:06:7f:f5:2c:51:
46:7f:29:b4:40:6a:28:88:24:1b:ec:44:29:2d:86:
dd:00:72:fd:9b:03:87:7b:3c:1c:c4:2f:41:8f:9a:
43:02:98:22:83:4f:01:9a:1e:be:58:1b:2e:2a:d8:
2d:be:fd:48:64:db:e4:67:ab:cd:b0:89:18:40:a3:
7a:2f:b7:3c:f3:f2:8d:be:97:ce:cf:c5:55:74:2b:
dc:e2:82:6d:a0:7b:97:1e:37:05:84:44:e0:6b:6a:
49:07:b0:5f:33:c7:38:64:c2:8c:52:b6:7d:95:7c:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.161.0/24
195.184.234.0/24
IPv6:
2a13:e1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216282
Signature Algorithm: sha256WithRSAEncryption
8c:98:2d:b7:6f:65:43:48:fe:89:a4:6b:9f:a4:ad:8d:9b:ea:
f6:1d:63:03:f6:07:b5:4d:f7:f0:dc:ae:ae:b1:d7:a0:1d:21:
dd:00:ec:3c:49:4f:65:8c:18:41:48:db:4d:93:d0:6a:55:89:
d9:da:63:06:d9:42:14:86:22:8e:e1:10:1d:56:70:b4:23:b5:
39:f5:c0:41:17:6d:97:95:21:cd:86:f4:03:d8:c8:be:2b:ef:
43:96:60:b8:6b:30:6e:8f:33:52:b1:d3:0a:ab:a4:bc:30:8f:
4c:84:e5:35:06:74:27:1c:65:1c:08:d0:37:e1:bd:c0:dd:fc:
2d:99:b5:c2:9a:98:89:b6:8e:c7:55:42:60:39:a4:a8:c7:0a:
48:a9:0c:18:59:15:78:c2:58:20:97:49:bb:5f:53:bd:1e:6b:
c9:0e:69:74:f1:44:06:90:4b:eb:20:6b:c6:65:7b:46:c3:86:
19:8a:bb:8d:45:b5:ac:49:87:1a:1f:b6:11:ed:d7:c1:6e:68:
0b:35:f1:2d:cb:41:60:d0:c3:bd:26:37:5e:dc:7b:65:8a:ce:
ab:6b:b8:0c:82:8a:20:7b:08:a9:43:2b:fe:26:26:c5:31:34:
74:26:4d:ce:7d:3e:2d:23:93:61:12:3c:c7:34:cb:53:27:da:
38:25:95:38
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZR0az5oAvxog4azDpW07Kk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE3MTMxOTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmJiZDFiZmNhMmY4YTE1NzhmYWFiNWIxMGMwZmMzNTU1NjFjYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/nltwX5C28WHwDmUjQm9DNnuovG
oFHamTyTXe3NJN8X3Yr2e3R68JRAFYdvUZT3Vy5MRmxYIhEI8ViCPAcvJVfRAVzA
+02T3nwG/gO3HaYq+nTRanNnW8Tuv6Mh/9qVazbrMCRT7i2yus/Zu2j4N6NO0Vd/
LRIoj+HipVDzwGKVycv0NKMDfWHXtsH5tXjwBn/1LFFGfym0QGooiCQb7EQpLYbd
AHL9mwOHezwcxC9Bj5pDApgig08Bmh6+WBsuKtgtvv1IZNvkZ6vNsIkYQKN6L7c8
8/KNvpfOz8VVdCvc4oJtoHuXHjcFhETga2pJB7BfM8c4ZMKMUrZ9lXx3wwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFJa70b/KL4oVePqrWxDA/DVVYcxlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzczZjVi
NS0yOTNkLTQwMzUtOTJhYy1hODdlMjg3MmFkOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNzNmNWI1
LTI5M2QtNDAzNS05MmFjLWE4N2UyODcyYWQ4YS8xL2xydlJ2OG92aWhWNC1xdGJF
TUQ4TlZWaHpHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAuWKhAwQAw7jqMA0EAgACMAcDBQMqE+HAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNM2jANBgkqhkiG9w0BAQsFAAOCAQEAjJgt
t29lQ0j+iaRrn6StjZvq9h1jA/YHtU338NyurrHXoB0h3QDsPElPZYwYQUjbTZPQ
alWJ2dpjBtlCFIYijuEQHVZwtCO1OfXAQRdtl5UhzYb0A9jIvivvQ5ZguGswbo8z
UrHTCqukvDCPTITlNQZ0JxxlHAjQN+G9wN38LZm1wpqYibaOx1VCYDmkqMcKSKkM
GFkVeMJYIJdJu19TvR5ryQ5pdPFEBpBL6yBrxmV7RsOGGYq7jUW1rEmHGh+2Ee3X
wW5oCzXxLctBYNDDvSY3Xtx7ZYrOq2u4DIKKIHsIqUMr/iYmxTE0dCZNzn0+LSOT
YRI8xzTLUyfaOCWVOA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net