Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.cer (raw, json)
Hash identifier: AJETEEDlQvnstXqDIPJaryIxL9Ugt2PK8VCNN0MwCeg=
Subject key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195EBBEB76DB5F2CA8042D30D2102EB2F40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Mar 2025 10:28:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21266
IP: 80.90.64.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:be:b7:6d:b5:f2:ca:80:42:d3:0d:21:02:eb:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 10:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:6c:77:ad:65:20:79:2f:51:35:ab:ab:93:
30:c4:ea:69:43:44:55:dc:b9:d7:f6:49:09:77:b4:
cd:5a:df:1f:69:e0:f6:f6:03:2f:cd:9e:f2:df:ec:
c2:f0:3c:4f:64:25:02:5a:72:0a:e4:15:bb:d3:69:
a3:cb:46:bf:f5:ee:e6:f6:56:84:3d:cc:cb:94:a5:
ec:ce:da:c1:10:0b:b3:03:0c:f4:5c:e1:84:72:ce:
8f:1b:06:ec:4a:a3:16:89:b4:dd:55:b6:a9:f4:6f:
f6:f4:ab:8c:ed:0a:d2:cb:90:52:92:03:09:34:ce:
13:2a:3c:38:11:d2:38:46:9c:70:dd:36:02:61:62:
cb:ae:d1:2b:3a:8a:12:a2:8d:f0:68:9e:7b:31:ea:
6d:11:0f:6c:2a:2b:39:64:1d:9e:87:6e:94:64:0f:
87:80:87:8d:2b:4d:bd:88:79:c9:da:65:47:f8:83:
21:28:a0:fe:b1:21:3b:e4:35:0c:04:65:a4:ba:eb:
a2:a3:8b:a2:af:28:f5:de:e1:02:20:61:84:c2:05:
5b:1f:cd:b8:52:30:9a:b4:cd:08:8c:17:00:d9:35:
33:10:00:7e:d1:cc:e4:95:ca:67:f3:38:f1:5f:0e:
d5:08:c2:8c:88:fe:bc:04:0d:0b:71:c9:f4:57:b7:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.64.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21266
Signature Algorithm: sha256WithRSAEncryption
33:e2:b1:6f:8c:c8:88:eb:ed:c7:2c:0b:52:ab:0d:85:bc:79:
16:2d:a6:fb:d4:0f:9b:55:94:68:c3:56:ad:50:93:39:cd:06:
15:48:10:ff:26:27:70:d2:93:78:9c:69:eb:3f:03:b3:a7:52:
d3:e7:dd:c6:d8:01:3f:d1:9e:d5:4a:23:05:3b:f7:8b:bc:30:
36:55:56:81:9d:17:08:7f:41:92:26:01:03:a7:a2:d4:ce:d8:
35:b9:75:c2:23:37:be:02:6d:52:e8:9c:d2:e4:be:7a:74:ed:
d9:18:5b:0d:f1:37:2d:0c:ed:aa:49:c7:e4:04:cb:66:3c:24:
0a:e4:b1:91:b5:d0:b9:c9:5a:4f:07:14:ec:dd:b2:01:f1:eb:
3a:12:e8:af:be:cd:72:14:94:7d:e6:60:78:63:73:16:b9:31:
3b:30:a5:ce:84:5b:b2:75:ef:59:3c:c4:19:3c:ee:f6:e1:5e:
ba:77:07:17:9c:a4:71:97:bb:35:59:16:9c:01:4b:72:ad:a4:
c6:25:04:ba:74:38:b0:bb:28:36:3a:22:7b:b4:bb:c9:b2:18:
6d:04:da:0d:84:38:54:5e:9a:9e:ac:a0:51:f6:dd:46:aa:f2:
c5:04:79:81:4e:f7:bd:93:0d:67:8f:1e:d4:f1:53:87:1e:56:
97:72:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:52 2025 by rpki-client on console.sobornost.net