Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.cer (raw, json)
Hash identifier: ek7zIoxeo2SWY2dRDJkX5tTz1gIVPGnDd+vf05j6zIw=
Subject key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144352A23DD7A96DC57A68D96BDD963
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209923
IP: 213.190.8.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:2a:23:dd:7a:96:dc:57:a6:8d:96:bd:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:84:08:63:c7:cb:8c:76:f7:81:77:fa:c8:
06:1f:58:2d:30:5b:5b:fd:fa:59:89:57:33:fc:51:
ae:9e:46:63:5c:b8:ba:79:c4:29:21:83:dd:9e:fb:
b8:10:73:7f:c9:69:f5:59:27:f3:c1:8e:af:36:50:
bb:4e:3d:b1:f9:35:32:82:17:cd:a9:e1:a9:e1:e8:
4c:6d:41:5a:5e:fa:03:52:ae:19:a4:3a:36:ec:d8:
ab:74:f7:1d:84:5c:56:f2:5a:4b:a4:1f:40:c7:44:
1f:08:bb:eb:e1:62:83:09:da:bf:bc:5c:95:93:4d:
20:33:9f:49:39:96:8a:43:db:1f:be:c6:5f:ff:7c:
bf:9d:88:45:84:e3:56:c3:32:8d:3c:bd:1c:d9:7d:
ce:46:90:9c:84:fe:bb:a5:c6:48:ca:59:a6:a1:d3:
3c:4c:79:0a:7d:4e:e6:f7:0a:94:d3:c8:e7:28:51:
18:3b:30:61:57:12:19:a7:c6:e3:7b:9c:a6:8a:7e:
62:28:4d:90:58:d4:b8:58:6e:74:ec:28:8d:a9:e7:
24:f9:f5:a7:4e:ad:6c:40:19:55:27:5e:2c:68:3c:
5c:9b:73:6a:19:1c:61:a1:ac:d4:46:24:a9:48:49:
f9:7d:1f:74:7f:86:70:57:67:2e:e4:fb:ad:90:a4:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.8.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209923
Signature Algorithm: sha256WithRSAEncryption
9d:6f:63:bf:82:e6:6a:52:5b:35:39:8c:a4:bf:77:02:29:72:
bb:9c:f1:f7:fd:89:58:fa:75:f5:ba:2a:f8:a4:4d:08:8c:f4:
7b:a9:4c:ce:76:eb:91:64:e4:b8:d6:fd:a8:0e:b2:73:55:1e:
de:c4:5d:f1:6f:aa:17:43:f3:2a:99:47:a8:42:74:a0:8a:4a:
a0:fd:89:58:9c:e4:15:7c:54:a9:3a:53:b8:91:31:08:fd:29:
77:5c:a7:bd:5c:67:4e:e6:4c:2f:0f:e2:ac:ff:cc:22:91:35:
5e:15:cb:82:d5:34:25:30:5a:94:db:5b:2f:06:a8:ea:a2:3a:
da:ff:8d:c8:cf:3f:ad:b8:bd:cb:4b:57:1f:8e:dc:3b:e4:2a:
7e:eb:20:1d:85:84:71:4d:9c:c1:2e:82:f4:b3:81:e8:77:c5:
93:26:5e:70:e9:d5:88:d6:1f:b1:c5:bd:67:6f:68:f6:63:a1:
e0:46:5b:5a:07:4b:27:12:27:a2:dc:d5:ad:fe:16:86:aa:62:
41:83:70:30:2d:54:84:4a:35:55:e8:81:bc:e4:f9:71:89:59:
6b:69:e7:1a:6e:db:35:b1:17:cc:07:23:4c:2c:a6:d8:c8:5a:
65:35:69:24:f8:2a:10:c9:53:db:9f:19:66:cc:fc:39:48:2f:
b3:55:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:30 2025 by rpki-client on console.sobornost.net