Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
File: sUJ73NR8eEMfZioIWJAFrLULk0E.cer (raw, json)
Hash identifier: atxUhZ59o1z1/KYR/TcJYHUlUsmgzGwk0CJOnTyadwc=
Subject key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D0906674BCF72D02CBB2111C2DB6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.54.0/24
IP: 91.235.148.0/24
IP: 91.235.241.0/24
IP: 91.236.12.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:09:06:67:4b:cf:72:d0:2c:bb:21:11:c2:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1427bdcd47c78431f662a08589005acb50b9341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:86:52:76:f9:ce:2d:4c:ef:f1:f6:99:db:
4e:81:75:32:8b:2c:63:ae:1b:97:49:a4:f5:3f:ae:
62:11:f4:b9:df:80:17:cf:89:ba:d8:91:8c:fd:fb:
67:33:0b:f7:30:7c:8d:97:d5:54:43:13:e5:9f:32:
c8:08:7a:50:c3:41:b2:9f:26:f7:13:41:4d:54:4c:
20:79:c6:60:7c:3d:92:08:d6:0d:01:8a:54:f2:21:
d7:18:80:cf:77:3e:4a:5f:d5:0f:ee:27:e7:a0:7a:
d5:6a:66:56:5f:53:fb:c0:f0:dc:4e:a5:e3:cb:87:
87:4b:85:6f:67:73:ac:90:c6:c8:92:47:84:1a:cc:
90:45:91:51:ce:ea:b5:30:1f:a5:2d:43:70:22:56:
ee:e6:c6:5b:45:3a:60:b4:26:fe:58:8c:41:76:89:
0e:5a:b8:b8:e7:d5:a2:35:3a:61:2d:a1:b5:a4:78:
4c:5e:6f:0d:2e:a1:d0:46:d1:b3:33:bb:b9:a7:96:
04:3a:52:53:42:91:c1:2e:ef:83:0c:62:c4:26:e4:
34:dc:f7:fe:65:66:a3:e9:db:20:5c:bb:17:78:c1:
20:23:3e:72:fe:2f:a4:ac:9a:7b:08:34:22:da:6e:
10:b6:6b:4c:b1:7c:0b:36:3b:d1:3f:4c:e2:36:5f:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.54.0/24
91.235.148.0/24
91.235.241.0/24
91.236.12.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1b:3e:49:e2:4b:02:78:f1:c3:28:7e:6c:55:46:40:e1:28:
41:58:fe:7d:bb:55:e4:0c:c3:f8:3a:f9:ab:bb:60:e5:76:6e:
1a:a2:88:c7:a9:10:ed:fb:f5:29:11:a1:32:94:e9:5c:e6:82:
50:d3:58:dd:03:91:dd:35:9b:c3:65:6b:5d:5c:da:d6:ba:58:
c6:bb:81:87:4c:56:96:3b:b0:45:e7:83:5e:c0:37:41:87:29:
d2:5e:db:97:2e:d4:fa:98:1b:e2:a0:19:c1:43:92:34:0f:fb:
fb:11:1e:d8:c3:55:8f:89:f0:cc:c0:88:ee:b3:b8:c8:cc:aa:
b8:1a:68:9d:81:80:40:e0:af:b5:f5:3f:b4:f3:42:5f:d6:c7:
4e:72:d4:0a:79:ff:72:f5:3f:ef:fc:36:f1:78:b8:0e:9e:07:
d6:62:77:2e:8e:fe:1b:75:44:a6:e4:08:26:d1:70:5a:cb:f7:
a5:2d:d4:c8:bb:70:3b:9f:d5:ab:b4:fc:49:00:b6:d6:eb:f7:
69:a9:ad:0d:70:72:c0:eb:e5:20:7c:66:d3:47:13:6b:73:93:
ee:c9:99:dc:98:5b:ba:d9:27:19:66:35:f7:2f:c4:0a:67:64:
51:88:a0:b8:25:78:03:80:2e:3a:7d:fc:c9:80:cf:d7:fe:73:
1e:c8:9d:58
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZQijQkGZ0vPctAsuyERwttuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQyN2JkY2Q0N2M3ODQzMWY2NjJhMDg1ODkwMDVhY2I1MGI5MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21OGUnb5zi1M7/H2mdtOgXUyiyxj
rhuXSaT1P65iEfS534AXz4m62JGM/ftnMwv3MHyNl9VUQxPlnzLICHpQw0Gynyb3
E0FNVEwgecZgfD2SCNYNAYpU8iHXGIDPdz5KX9UP7ifnoHrVamZWX1P7wPDcTqXj
y4eHS4VvZ3OskMbIkkeEGsyQRZFRzuq1MB+lLUNwIlbu5sZbRTpgtCb+WIxBdokO
Wri459WiNTphLaG1pHhMXm8NLqHQRtGzM7u5p5YEOlJTQpHBLu+DDGLEJuQ03Pf+
ZWaj6dsgXLsXeMEgIz5y/i+krJp7CDQi2m4QtmtMsXwLNjvRP0ziNl+JUQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFLFCe9zUfHhDH2YqCFiQBay1C5NBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIwYTc2
Ny03YjQxLTQ2M2ItYTZjOS01ZmM4ZTYzMjc4ODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjBhNzY3
LTdiNDEtNDYzYi1hNmM5LTVmYzhlNjMyNzg4OS8xL3NVSjczTlI4ZUVNZlppb0lX
SkFGckxVTGswRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQAW+o2AwQAW+uUAwQAW+vxAwQAW+wMMA0GCSqG
SIb3DQEBCwUAA4IBAQAYGz5J4ksCePHDKH5sVUZA4ShBWP59u1XkDMP4Ovmru2Dl
dm4aoojHqRDt+/UpEaEylOlc5oJQ01jdA5HdNZvDZWtdXNrWuljGu4GHTFaWO7BF
54NewDdBhynSXtuXLtT6mBvioBnBQ5I0D/v7ER7Yw1WPifDMwIjus7jIzKq4Gmid
gYBA4K+19T+080Jf1sdOctQKef9y9T/v/DbxeLgOngfWYncujv4bdUSm5Agm0XBa
y/elLdTIu3A7n9WrtPxJALbW6/dpqa0NcHLA6+UgfGbTRxNrc5PuyZncmFu62ScZ
ZjX3L8QKZ2RRiKC4JXgDgC46ffzJgM/X/nMeyJ1Y
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:18 2025 by rpki-client on console.sobornost.net