Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.cer (raw, json)
Hash identifier: eIOPBYSzUEE7K0+wvkDhp+BdHb3x1JCYqKF7m8A5SKA=
Subject key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B371D4FD1A5FDA948BC0315460A8AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60475
IP: 37.202.16.0/21
IP: 45.10.84.0/22
IP: 185.241.200.0/22
IP: 2a02:ff00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:71:d4:fd:1a:5f:da:94:8b:c0:31:54:60:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:6f:8b:c6:90:88:43:0f:22:92:98:6a:79:
c6:49:01:0e:0c:a4:c2:dc:b9:8c:da:be:76:51:78:
bc:2a:56:5f:ff:d7:5f:21:6d:0e:4a:a7:fd:d1:e5:
14:5f:ee:ca:98:4e:b1:3b:97:1d:83:9b:86:ae:bf:
13:d5:84:40:1b:2b:f6:5b:ac:79:03:a5:fa:3e:63:
4c:a7:92:a1:72:f3:fb:85:9f:3e:24:0c:72:a1:b2:
e7:dd:33:db:de:69:68:ce:37:77:2c:fb:ab:14:53:
70:b0:4b:24:a0:38:61:21:91:51:ff:3f:67:25:96:
df:2f:58:2d:53:54:a3:66:17:f1:0a:ab:55:11:26:
ff:66:56:03:81:42:d2:c5:f4:6e:2d:a4:27:34:fc:
95:d6:3e:9b:dd:35:40:fb:2b:d0:23:1c:2f:83:f6:
6c:3e:2d:d7:0d:db:d5:e7:01:ac:91:ff:2f:e4:3c:
9d:66:94:86:16:82:87:b1:fa:c5:3a:43:e5:fa:32:
7d:c8:e2:be:99:f7:35:37:ee:26:b9:1a:0c:19:ac:
ff:dc:fc:c4:cf:de:59:5b:4e:02:c7:a0:ae:6d:b9:
99:44:c1:cf:58:36:8d:22:6d:87:d7:75:7d:a8:1b:
5d:2c:65:d9:1a:17:d1:3a:91:da:52:e0:d4:c4:a4:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.16.0/21
45.10.84.0/22
185.241.200.0/22
IPv6:
2a02:ff00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60475
Signature Algorithm: sha256WithRSAEncryption
5f:e3:20:21:d5:ec:c2:a7:87:87:2d:35:34:01:ef:86:33:de:
16:49:40:f7:04:d9:c5:1e:c7:38:46:92:5e:14:99:71:73:77:
3f:f6:31:33:91:81:e8:3a:ae:cd:1a:0d:7c:18:c8:23:93:db:
9e:7c:c4:2a:c5:29:b9:37:d6:19:b2:2b:8b:35:59:fe:6b:f7:
ef:79:74:3f:72:7d:43:8a:03:ca:c4:6d:ec:fd:15:92:c2:2e:
4f:1d:f5:84:e6:83:79:c2:d0:2c:b0:81:04:38:eb:51:2b:46:
58:3e:c5:99:74:70:51:86:3d:e4:12:70:07:84:39:2d:82:22:
b3:4b:e0:4b:3d:a7:8c:7d:d0:3d:b0:1e:6a:b7:1c:f6:c9:f5:
ab:5e:46:4a:29:91:b3:7d:ae:25:58:6e:7f:84:09:ca:d6:84:
5e:22:c3:d0:ca:94:85:00:e2:e7:88:5d:61:61:24:9d:30:87:
e5:c9:19:4b:aa:3c:ce:c6:c4:f3:39:9e:ec:31:4d:20:17:87:
de:0c:b9:27:2f:b1:e6:85:00:ea:0c:7d:9e:b4:87:cf:9b:36:
32:b2:9a:ed:7c:cc:b7:ae:2a:18:f2:30:7d:da:b6:c7:7e:32:
60:b2:7a:31:47:4a:ad:c8:f3:d4:a3:d2:ed:5a:32:f0:b5:e5:
6b:2a:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:49 2025 by rpki-client on console.sobornost.net