Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer (raw, json)
Hash identifier: tinX6YpSoMURrwIBDwKtORp6JOwKOrJBXU8p5csQEBA=
Subject key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214417C763CBC669EACBD62216FF02C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199811
IP: 109.237.60.0/22
IP: 185.43.244.0/22
IP: 185.74.32.0/22
IP: 185.214.152.0/22
IP: 2001:678:bfc::/48
IP: 2a01:71e0::/32
IP: 2a05:4880::/29
IP: 2a0b:9d40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:17:c7:63:cb:c6:69:ea:cb:d6:22:16:ff:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:99:35:9b:39:62:4a:c5:2d:ad:6b:17:2e:
aa:e9:18:87:ee:f9:dd:c5:95:a0:b3:9d:61:08:5c:
3a:88:7d:f2:71:15:d8:8a:24:82:d5:7f:9e:9b:2b:
fd:8e:89:d2:6d:87:58:82:23:89:b6:ae:32:33:b1:
48:d7:d5:86:95:a2:4a:d3:ee:32:6a:11:2a:7f:0d:
4c:41:f5:4c:e7:f6:7a:76:30:be:46:5e:92:c4:79:
ca:e5:c4:d3:83:1a:e9:b6:69:bf:90:f9:06:cd:4c:
0b:97:63:29:e6:f4:c0:05:54:ab:0b:13:2f:09:89:
c0:e2:60:40:55:ee:1e:5b:07:b1:e2:a7:b1:52:af:
70:6f:c8:33:10:a5:c3:fd:4d:35:c3:a1:0d:cf:69:
4b:57:ae:b0:a4:d1:5f:1d:eb:bb:a7:35:46:a1:e5:
7d:47:59:92:51:8b:78:b2:ea:e8:86:28:5d:99:c2:
19:9d:bc:dc:d7:79:ca:1a:e2:c1:bc:ae:52:af:86:
fb:61:cc:34:5c:e6:4c:1d:dd:b7:ea:73:38:4e:15:
08:25:a8:87:88:c2:19:61:7e:3c:3f:12:d8:9e:3a:
12:4d:05:f7:10:f6:db:06:da:08:91:96:69:ef:7b:
b6:e0:77:7f:47:38:02:ac:c2:35:7b:f5:48:8d:ab:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.60.0/22
185.43.244.0/22
185.74.32.0/22
185.214.152.0/22
IPv6:
2001:678:bfc::/48
2a01:71e0::/32
2a05:4880::/29
2a0b:9d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199811
Signature Algorithm: sha256WithRSAEncryption
0f:10:5a:6d:b6:01:94:a1:dd:10:c8:dd:62:6d:e1:f7:e0:a5:
c2:ac:ad:59:7c:d0:67:f8:0c:bd:16:c8:49:a4:6f:65:5b:7e:
11:ce:68:09:13:18:25:60:36:8c:eb:b7:44:73:68:21:2e:b1:
2d:ba:bb:67:fe:4a:88:a8:11:c3:1d:8c:4b:ae:c9:67:d1:35:
4f:51:c9:a9:73:fb:4a:0e:64:6a:a8:e5:3c:0b:3b:10:af:3e:
2a:e3:4c:53:7e:cc:8a:2c:40:5c:8d:f1:fd:a1:31:57:29:5b:
40:67:77:55:38:8e:63:b2:64:df:56:15:19:e3:74:3d:68:08:
d3:4b:05:ea:f7:5c:99:c5:7d:23:e2:af:12:1d:1a:e2:df:d0:
04:69:3c:88:03:3d:a8:46:d9:3b:23:1b:61:9d:9e:24:46:d9:
b3:75:3d:ca:9b:60:cc:ec:07:72:0d:56:ca:4a:c7:77:e5:ae:
bb:ce:1b:95:7d:33:dd:79:f3:3d:79:a5:1e:e3:08:6b:fd:14:
44:9c:47:02:3a:73:d4:7f:93:8f:04:00:02:d9:34:a8:27:10:
5f:9f:9a:26:1b:80:35:6a:05:8f:fc:f7:76:cf:48:00:4c:6c:
ab:f2:80:21:98:79:a8:3a:86:56:30:99:c0:14:c0:96:a8:e0:
f0:4b:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:29 2025 by rpki-client on console.sobornost.net