Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
File: nSP0y0urXBCAGncGWN-JHPuMaMY.cer (raw, json)
Hash identifier: jL8gPoM7JfySnyjEIiEV5jEczyZpMO7crq7bx8GYUgg=
Subject key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B28E3903729D09A50FF9F3B57EB381
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61317
IP: 37.72.168.0/21
IP: 45.158.36.0/22
IP: 46.21.144.0/20
IP: 89.233.104.0/21
IP: 94.100.16.0/20
IP: 149.255.32.0/21
IP: 178.236.176.0/20
IP: 194.126.172.0/22
IP: 195.242.152.0/23
IP: 217.79.240.0/20
IP: 2a02:748::/32
IP: 2a0f:5180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8e:39:03:72:9d:09:a5:0f:f9:f3:b5:7e:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:3c:55:9f:d4:32:87:c3:17:bd:ea:fe:8e:
1d:17:36:d9:4b:03:e2:19:d4:a7:4d:9e:d8:fa:10:
25:29:6f:6f:e5:bb:9d:82:53:f1:14:ce:23:ba:3c:
99:03:4f:19:2d:0f:24:bd:4e:e5:2c:9b:0e:b1:c0:
e7:9b:d4:3f:92:34:63:33:a3:e1:57:38:ed:38:fb:
42:70:15:76:d3:f9:e3:ba:d5:d9:6d:75:56:f7:47:
39:af:39:40:c0:ca:73:b4:40:e8:d1:02:d8:a6:e6:
ba:f8:a2:bc:b7:1b:94:74:1b:8f:a2:11:5f:47:be:
c5:8b:36:cf:76:35:a6:bf:74:ae:bb:25:50:b6:19:
c6:bf:0b:71:da:ff:46:5d:9f:24:68:52:b1:84:89:
70:8a:9f:ed:f6:c4:e4:1b:d9:a5:09:84:b9:40:63:
01:c7:9f:3d:4d:8b:c1:9f:29:57:69:0c:51:07:6f:
98:0f:b8:f0:b4:99:fb:99:cc:a5:e4:97:a7:39:65:
62:24:e7:38:16:53:be:f8:e8:80:26:ef:6c:d6:70:
18:78:68:7d:07:1e:41:34:d1:5d:17:e8:40:0a:57:
1a:74:cb:25:d7:c8:ec:0d:51:a1:31:c3:f6:86:61:
df:ed:3f:bc:1c:9f:b9:80:3f:30:3c:52:86:6a:37:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.168.0/21
45.158.36.0/22
46.21.144.0/20
89.233.104.0/21
94.100.16.0/20
149.255.32.0/21
178.236.176.0/20
194.126.172.0/22
195.242.152.0/23
217.79.240.0/20
IPv6:
2a02:748::/32
2a0f:5180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61317
Signature Algorithm: sha256WithRSAEncryption
93:a7:f0:b4:b6:20:ba:bd:0d:bc:7e:ad:e2:08:2d:c8:ec:cc:
a4:37:d5:93:01:ac:86:9e:d1:28:2f:61:bc:cf:fb:bc:fc:11:
be:3b:ea:c4:72:c3:1e:bd:54:63:65:ce:f6:1a:89:f4:6f:b2:
85:a4:51:e5:0f:cb:1b:56:48:69:b3:2c:28:1c:01:d8:09:27:
90:67:51:dd:aa:2a:12:9e:7a:7f:11:c3:be:d6:99:49:78:cb:
0e:c6:ea:bc:84:66:0e:3d:b7:2a:01:64:e8:31:39:7b:6a:02:
44:71:d2:96:4a:1e:da:a2:c9:2e:cb:a9:7c:e3:38:ba:b3:e7:
70:cc:d0:c6:d5:bc:16:de:ba:69:e9:5c:87:e8:82:d7:e1:aa:
f0:5e:75:d8:63:14:80:87:c6:b7:2d:55:59:64:1f:73:4b:a8:
05:32:56:b8:94:ba:53:30:d0:2a:47:dd:ff:db:e4:58:f6:e2:
6c:bb:9c:c7:50:96:bf:a3:c9:f0:8c:72:d8:a6:74:86:3a:2e:
05:41:55:77:c8:12:de:2f:41:b0:5a:99:30:64:3f:c8:a3:33:
89:66:94:13:55:fe:1f:4f:49:6b:a4:c9:c1:1c:c2:01:14:11:
c4:21:06:dd:4d:68:32:e6:4c:ee:bb:7a:ae:cd:80:52:f5:5f:
6a:b5:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:30 2025 by rpki-client on console.sobornost.net