
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
File: uNr6fqVTF4Ez5-hP7risOp28-co.cer (raw, json)
Hash identifier: PGuHaZqe3p3E2oq1MeQLg7s3QyTsRxUQuoUs7YMMoGQ=
Subject key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195B823A8D1E1917750D46A8DDA3EA44831
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Mar 2025 09:58:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208124
AS: 211627
AS: 212679
IP: 91.209.161.0/24
IP: 185.160.205.0/24
IP: 2a10:b240::/29
IP: 2a10:c4c0::/29
IP: 2a12:8840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:23:a8:d1:e1:91:77:50:d4:6a:8d:da:3e:a4:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 09:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:57:21:39:29:87:49:1c:bf:c8:41:ed:e9:
41:e1:59:56:f2:4f:e5:d3:e2:80:ec:d5:87:d4:e5:
f8:94:54:1c:26:5e:dd:f2:a0:16:61:9d:fc:53:86:
36:f4:4a:24:77:0c:0d:94:45:07:be:de:bb:fd:60:
ba:ad:18:86:63:63:e5:f4:ac:b6:53:42:91:7e:17:
a6:a9:91:30:d1:2e:f0:ee:02:15:7c:99:f4:e9:98:
94:11:28:65:82:1c:e7:01:5c:10:ad:ba:47:0b:55:
8d:81:74:da:6a:3c:57:ce:82:fd:54:4e:b6:37:63:
34:23:c8:68:46:11:9a:30:af:30:11:d0:96:a8:7f:
f6:ec:6c:04:94:ff:6b:e4:63:7a:90:1e:56:aa:bf:
21:da:87:e6:30:42:05:ef:3a:7a:17:4b:3e:04:aa:
46:9a:f1:83:07:b4:22:46:62:21:42:4b:fa:34:6b:
63:20:b3:4d:c7:0c:66:19:00:21:92:bc:12:ce:6a:
a0:96:75:3d:41:15:6b:e5:30:8d:14:91:c8:9b:9f:
a6:d7:b5:e3:08:ba:ff:9d:48:91:70:bd:ac:22:45:
e4:7a:d4:26:49:0f:4d:b4:e8:11:f7:cb:fd:8d:39:
e6:96:21:04:0f:3c:de:82:14:1e:a4:b9:78:78:8c:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
185.160.205.0/24
IPv6:
2a10:b240::/29
2a10:c4c0::/29
2a12:8840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208124
211627
212679
Signature Algorithm: sha256WithRSAEncryption
4d:f4:33:74:aa:d5:c3:12:2e:a8:c5:bc:22:fb:1f:a9:86:01:
e1:4b:a4:29:d5:cb:06:ae:1c:4e:b8:21:c1:59:be:80:54:b1:
67:ce:c5:10:44:45:bb:db:a3:01:68:db:d9:14:0a:ea:06:1e:
6b:67:e3:03:d1:be:17:eb:2c:40:1e:6d:57:b0:c4:49:dd:31:
aa:96:bd:2c:12:74:b1:57:36:89:e2:8e:53:f5:62:4b:a9:9e:
bb:9c:32:b0:46:40:89:68:20:3e:c1:c4:f6:a4:4d:57:fb:cc:
e8:99:be:b4:6c:da:9a:b0:d9:f7:ad:de:55:d5:77:d9:07:67:
aa:9e:c4:4c:31:47:30:27:61:67:7c:ce:2c:bb:d1:5c:82:73:
0c:be:a1:5a:26:1a:0a:f4:10:cb:a4:df:3d:f3:70:e1:d8:6c:
54:6a:87:94:24:11:49:89:25:28:e2:50:0f:1c:11:c2:5e:46:
8a:da:ee:23:43:d0:be:48:40:ed:ee:ad:25:b3:25:66:8c:c6:
99:32:06:12:0a:1a:12:17:b6:58:d0:0b:53:a8:29:4e:42:7b:
3c:aa:63:eb:b9:0e:f4:3f:9a:75:5f:68:71:6d:cd:ef:3f:6a:
76:a5:ef:27:e8:34:b6:01:3f:15:ea:8d:da:b1:23:e4:e4:53:
e7:f3:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:07 2025 by rpki-client on console.sobornost.net