Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.cer (raw, json)
Hash identifier: vo2vPtuSIj33SxfvTRhxhZXuVp+Xlfoy33gLKfAhcO4=
Subject key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FD71C726BD241A708057C45C336AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.135.228.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d7:1c:72:6b:d2:41:a7:08:05:7c:45:c3:36:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:3e:b9:82:69:c9:d6:48:8c:65:09:31:73:
9d:91:62:f1:8c:d3:3d:c2:55:c8:d4:c7:96:0d:a2:
45:f5:f7:41:44:0c:aa:40:aa:73:fc:b5:a2:e7:f7:
2d:10:60:ca:3b:f7:96:b0:0d:17:53:a7:2c:73:41:
4d:d9:44:0a:e5:57:ee:91:49:d3:79:cc:ce:31:b1:
94:08:ab:c1:54:5d:29:c1:62:3f:8f:0e:64:7a:64:
8c:e9:df:e2:80:f4:9c:ed:b6:01:f2:a0:2a:20:cb:
c5:ee:8c:2f:94:d3:c8:65:a0:c0:71:f5:d3:e4:35:
46:af:d2:20:cf:d7:84:b2:73:1b:6c:90:12:c0:1d:
64:0c:d0:88:59:40:69:6b:86:34:9b:db:a6:2f:57:
c9:26:61:6c:c0:de:a9:dc:e1:91:d8:16:aa:2e:0a:
c9:e1:a2:05:d4:fb:16:08:0b:15:29:81:5b:ef:37:
fb:59:d9:df:8c:7b:7f:2d:0b:b8:3e:37:a4:0d:82:
26:60:7b:64:76:10:99:ef:18:b2:bf:b4:2d:5f:d6:
17:3e:bb:e6:e3:bf:79:47:28:20:fa:d0:42:d1:11:
9e:6a:c4:ce:7c:35:f5:98:7b:9a:b4:d5:0b:78:9e:
fb:fc:8e:0d:91:8d:c9:92:a0:63:9c:22:db:d1:ea:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.228.0/22
Signature Algorithm: sha256WithRSAEncryption
29:43:19:dc:96:38:d5:39:05:6d:a1:91:88:2d:0b:49:40:ad:
42:ae:59:51:e8:7f:30:39:01:6a:b8:9f:ab:30:61:91:04:85:
59:c3:ad:f1:35:26:78:77:b3:83:29:2f:15:50:99:7a:2f:21:
33:69:c5:be:f1:55:2a:3f:a3:1b:66:4f:30:96:82:0e:a2:68:
04:59:ae:4f:9a:17:32:32:cc:6a:12:bb:43:f3:00:7b:52:9d:
97:2f:61:d6:59:cf:68:93:d8:98:61:e4:52:ca:0e:b9:ed:77:
6a:20:40:f6:fd:3b:9b:fd:c9:f0:54:ed:ef:f6:d3:81:e3:b3:
a3:e9:d1:f4:9a:a5:e2:83:fa:77:80:ee:ae:dd:c6:c6:54:aa:
ca:70:8f:b7:a1:6b:c1:c2:ee:92:eb:6d:1c:ab:54:4a:fa:67:
4f:38:28:4f:ec:08:af:fe:83:c1:c3:71:4e:9b:f1:e7:53:6b:
83:76:e5:5b:e3:bf:b2:ca:82:25:bc:ad:1a:2c:a8:11:05:72:
b1:5e:b3:31:83:c9:57:16:ca:4a:9f:d8:82:9a:3f:41:d1:81:
95:56:82:fc:45:48:9d:4e:1c:7f:76:3b:f3:01:b7:02:0c:6b:
fe:88:5c:d4:e7:8a:e4:6a:a6:10:4a:31:28:45:d8:22:7c:30:
f1:a8:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:01 2025 by rpki-client on console.sobornost.net