Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
File: m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer (raw, json)
Hash identifier: Y8CmyGnSgwCnhel2Uozyv6B+8x0L6OzzB6/QKHLhpkY=
Subject key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6691AB17F9D1F4E46D8A2F52E7670
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12843
AS: 215996
IP: 37.16.64.0/21
IP: 37.228.160.0/20
IP: 46.167.16.0/21
IP: 46.232.224.0/21
IP: 81.26.160.0/20
IP: 85.115.0.0/19
IP: 88.214.60.0/22
IP: 93.189.152.0/21
IP: 109.109.200.0/21
IP: 185.9.176.0/22
IP: 185.106.0.0/21
IP: 213.144.0.0/19
IP: 2a02:788::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:69:1a:b1:7f:9d:1f:4e:46:d8:a2:f5:2e:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:c8:ff:8d:f7:20:bf:7d:08:2b:6a:8f:b4:
30:94:fa:9d:63:b9:f8:e8:e1:35:55:5c:1e:a9:4c:
82:40:4a:6a:30:a4:47:a5:3c:70:eb:4d:89:45:24:
0e:ae:05:11:44:ae:40:ff:30:2a:92:4f:8e:d3:de:
c8:d3:9f:0a:39:b2:12:51:4e:50:c9:e9:ec:b5:b1:
a8:64:58:02:fc:a4:76:b3:2b:15:c5:4d:5d:dd:ed:
0a:c8:1b:f9:47:19:ce:4a:53:af:92:08:bd:8a:b0:
f2:b3:8e:35:23:b1:02:0e:e3:01:0a:53:a0:0f:ed:
ab:d3:7c:7b:23:18:65:df:92:94:a7:1d:34:4f:74:
05:bc:2c:53:54:3b:00:37:19:97:5e:07:26:8c:af:
bc:3c:07:34:9e:3c:d0:ee:be:7a:fc:5d:5a:ab:04:
f3:bb:b9:08:cf:25:ba:bc:36:d7:72:cb:65:06:5e:
d4:d6:b1:69:c0:ec:25:af:96:67:77:2f:92:20:0c:
ba:ee:28:e7:04:23:0e:8d:16:1e:a8:6d:cc:bc:c3:
80:59:c2:d6:c3:e5:d0:26:09:b9:01:4a:ac:cf:00:
d1:ee:7f:f7:c6:6d:4d:a5:4d:f9:e0:33:93:86:61:
6e:3b:cb:e9:c1:8d:fb:28:69:f2:51:7c:3b:37:b9:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.64.0/21
37.228.160.0/20
46.167.16.0/21
46.232.224.0/21
81.26.160.0/20
85.115.0.0/19
88.214.60.0/22
93.189.152.0/21
109.109.200.0/21
185.9.176.0/22
185.106.0.0/21
213.144.0.0/19
IPv6:
2a02:788::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12843
215996
Signature Algorithm: sha256WithRSAEncryption
5a:4e:20:9c:41:74:16:b1:43:c6:f6:7a:5d:37:49:f4:f9:f1:
0f:35:dc:08:00:26:71:19:e4:7a:b1:d6:8c:cd:1d:db:e7:23:
7c:6e:5f:03:5d:1b:8d:e2:ff:a5:5f:25:76:53:3b:23:a1:a2:
9e:d5:a6:f7:a1:a0:91:b9:2a:ac:b4:3e:43:c9:ea:f8:11:61:
bc:76:00:df:60:70:26:27:d9:d4:7f:46:05:af:bb:ce:c7:3a:
e7:1d:3c:88:83:49:e8:c2:58:af:e0:f8:83:1d:b9:0f:aa:b4:
cf:db:56:fb:c1:64:a1:3f:b7:af:81:4c:32:5b:06:0b:ff:0b:
91:03:f0:40:ce:2e:0b:0e:46:4c:a5:0d:ff:d3:dc:63:64:80:
f4:bc:23:5b:de:06:86:e0:a1:d1:00:c1:62:7d:0f:8b:c6:33:
46:7f:f6:74:18:ce:59:14:01:9b:71:39:1d:5d:d6:44:70:6d:
2a:ae:c4:2a:77:4a:0b:66:12:bc:2a:16:d5:ca:69:6e:09:23:
35:14:63:0f:e4:99:fa:b3:c0:bf:99:50:39:42:cb:0a:ec:56:
fe:e0:0e:4d:92:1e:c2:7b:e4:85:4b:1c:3b:41:ec:da:de:c0:
2e:40:e0:c4:b4:7c:28:e1:90:09:57:ef:34:0a:70:0a:dc:89:
e6:c1:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:26 2025 by rpki-client on console.sobornost.net