Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer (raw, json)
Hash identifier: NbCl5uZrLKTTs5I6lgBbID1LEP6hnrGqle5zNP7cG+Q=
Subject key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428261A2AD553CFF7FBD5884BEF8CF00D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39422
IP: 176.108.232.0/21
IP: 195.182.202.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1a:2a:d5:53:cf:f7:fb:d5:88:4b:ef:8c:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:50:4e:1a:d8:09:23:7b:24:c3:2d:32:2f:
06:fe:dc:ed:fe:0e:e6:18:19:7e:d2:75:d1:f7:65:
f3:6c:05:6b:da:65:74:fa:74:61:8d:b3:da:20:05:
52:74:91:79:c6:f2:be:79:39:cf:d7:71:97:26:bf:
a2:a3:e0:9a:03:6b:39:d7:82:f6:cc:1a:ac:d4:6a:
ea:a4:ea:c9:f5:d7:a2:7b:e1:a0:70:b6:52:6d:27:
7c:60:96:18:d6:29:1c:86:78:65:39:ec:3b:d7:38:
9a:5f:7d:ce:0c:cc:af:0e:19:2d:c7:3e:41:98:c5:
3f:c7:b8:3e:7e:27:f6:de:54:16:85:4d:a7:c1:cf:
ff:4f:e7:22:03:7c:fc:e5:fd:ba:ec:f1:81:78:87:
74:ed:23:77:0e:29:39:c9:44:b7:36:29:29:26:52:
1b:8b:52:db:3b:ae:e7:32:6e:36:94:0c:c1:c7:cd:
03:07:c7:2d:55:ee:5c:8b:4e:2c:16:a1:a1:5b:11:
d2:b6:66:c4:0c:9f:24:cd:77:dd:31:31:8e:e3:e8:
d8:6f:77:ac:30:11:d9:23:49:91:7a:50:6d:47:be:
f8:08:db:4d:d5:39:dc:68:e5:38:56:5a:a8:96:6e:
81:c4:d5:64:3a:a5:8b:d8:6b:8b:c2:aa:b4:93:5c:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39422
Signature Algorithm: sha256WithRSAEncryption
a8:5a:8a:fa:fd:97:ef:49:99:e1:38:d7:1d:2b:42:18:69:08:
57:04:bc:84:61:65:99:5a:54:90:80:16:6f:b7:a4:11:82:7b:
61:26:45:e9:8a:a3:41:a1:cd:1d:7e:b0:cb:d7:17:cd:cc:d5:
cf:51:3e:da:8c:4b:5c:25:ef:e2:c5:8c:92:7c:c4:98:16:6f:
60:47:10:b4:ac:fd:fa:ff:8d:4a:b0:29:fd:e5:3e:38:da:08:
19:3b:76:a1:4b:a6:32:8a:23:d5:04:f6:58:cf:57:ec:7b:22:
ac:19:67:ed:6a:72:fc:8b:15:a3:e8:a7:1b:67:99:62:0e:19:
dc:a8:2b:84:52:b4:e4:0a:1a:fa:a9:b7:33:54:4d:18:6c:27:
27:c0:12:2f:98:d7:b5:00:12:40:13:16:07:34:b0:e1:29:ce:
83:a5:e8:e3:3c:f2:9b:c2:6e:38:70:d7:4b:27:2b:cc:c0:37:
65:51:98:17:4b:7e:e1:03:b6:c5:53:52:33:70:6a:55:34:46:
a7:49:85:be:c6:33:c6:41:62:e0:83:03:12:4a:b9:4f:63:dd:
ac:8e:ca:a9:64:6b:24:95:06:04:fe:5f:91:4c:e6:bf:dd:1b:
49:7c:3c:bd:64:e4:6b:f0:67:a7:3d:96:85:ac:49:b4:a4:23:
af:9b:4c:8e
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQoJhoq1VPP9/vViEvvjPANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MjUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzk2N2Q3NmMyZDQ2NzIwZDRjZmFjMDQ1OWZhM2MzZDIyMDA1MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MhQThrYCSN7JMMtMi8G/tzt/g7m
GBl+0nXR92XzbAVr2mV0+nRhjbPaIAVSdJF5xvK+eTnP13GXJr+io+CaA2s514L2
zBqs1GrqpOrJ9deie+GgcLZSbSd8YJYY1ikchnhlOew71ziaX33ODMyvDhktxz5B
mMU/x7g+fif23lQWhU2nwc//T+ciA3z85f267PGBeId07SN3Dik5yUS3NikpJlIb
i1LbO67nMm42lAzBx80DB8ctVe5ci04sFqGhWxHStmbEDJ8kzXfdMTGO4+jYb3es
MBHZI0mRelBtR774CNtN1TncaOU4Vlqolm6BxNVkOqWL2GuLwqq0k1zHNQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKeWfXbC1Gcg1M+sBFn6PD0iAFBEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzg3Yjc2
OC0xNTQ1LTQ5NGEtODRmOS0xY2Y1MGE1MzYwMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvODdiNzY4
LTE1NDUtNDk0YS04NGY5LTFjZjUwYTUzNjAyNi8xL3A1Wjlkc0xVWnlEVXo2d0VX
Zm84UFNJQVVFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDsGzoAwQBw7bKMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCZ/jANBgkqhkiG9w0BAQsFAAOCAQEAqFqK+v2X70mZ4TjXHStCGGkI
VwS8hGFlmVpUkIAWb7ekEYJ7YSZF6YqjQaHNHX6wy9cXzczVz1E+2oxLXCXv4sWM
knzEmBZvYEcQtKz9+v+NSrAp/eU+ONoIGTt2oUumMooj1QT2WM9X7HsirBln7Wpy
/IsVo+inG2eZYg4Z3KgrhFK05Aoa+qm3M1RNGGwnJ8ASL5jXtQASQBMWBzSw4SnO
g6Xo4zzym8JuOHDXSycrzMA3ZVGYF0t+4QO2xVNSM3BqVTRGp0mFvsYzxkFi4IMD
Ekq5T2PdrI7KqWRrJJUGBP5fkUzmv90bSXw8vWTka/Bnpz2WhaxJtKQjr5tMjg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:52 2025 by rpki-client on console.sobornost.net