Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.cer (raw, json)
Hash identifier: 4y5nppKBspptKINqDMPhN/UOw7NCUbkStX5TlnK78Z4=
Subject key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F26917B6E2CF560F66F231CA5C69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203466
IP: 188.208.196.0/23
IP: 188.214.194.0/24
IP: 213.134.13.0/24
IP: 2a06:f940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f2:69:17:b6:e2:cf:56:0f:66:f2:31:ca:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:61:5b:eb:80:46:86:bb:7b:06:90:1d:5e:
86:74:e2:4b:83:a0:07:ee:7a:2f:e3:8d:e9:b2:b2:
12:99:a6:68:bb:ed:22:c2:11:e2:49:33:97:1c:be:
c0:70:f9:e1:31:76:0b:4a:2e:81:2a:86:a5:6a:4f:
1f:26:45:f3:6f:a5:5e:bc:ff:4a:3c:f8:c1:56:7a:
9b:42:b0:59:a1:b2:ac:6a:83:da:71:8a:b4:f9:3c:
5b:62:af:f4:77:9e:ff:30:c7:05:8a:3c:58:17:36:
65:40:4f:c7:b5:25:14:05:20:bb:34:0c:15:c3:cc:
4d:9b:1a:b5:d7:19:b6:f4:97:66:b4:dd:d5:a4:ce:
99:a1:41:b7:18:c1:98:59:41:5e:dc:65:cc:0b:92:
ce:36:e2:51:a0:fa:f4:3a:83:40:a2:d1:90:0e:7b:
13:b8:62:c0:3d:f6:03:85:70:d5:52:3f:b3:74:09:
0d:e4:47:fd:5d:54:bd:fa:37:db:83:88:2b:b2:cb:
0f:5c:f2:21:b6:84:08:ef:e9:a6:86:7f:ec:d4:1b:
53:ef:1b:8d:7e:f5:22:9c:d7:eb:de:c8:af:ef:a2:
15:51:71:13:fe:b9:21:48:ca:3b:58:9f:28:10:4c:
38:b2:38:25:a6:1e:46:f6:8a:d3:21:c6:53:d7:22:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203466
Signature Algorithm: sha256WithRSAEncryption
02:53:1b:5c:c7:22:c0:45:6d:6a:8a:43:af:d6:5b:20:92:67:
18:06:35:9a:72:94:37:59:0a:75:85:73:59:73:db:b8:6d:ea:
7b:87:dc:ff:af:f5:50:e3:f8:8d:bf:1b:85:9b:0c:10:3e:a3:
db:11:51:ec:8f:29:f5:66:a3:12:02:c6:53:7b:77:a0:1a:74:
44:8a:ac:fc:15:ab:b7:c5:e2:23:85:93:69:79:cd:e0:e1:77:
86:3b:b1:a7:fa:91:39:ab:62:3e:32:d1:e6:e3:eb:e3:f8:58:
7a:bc:17:81:68:9c:46:8d:b2:31:9d:96:db:e3:47:ed:ad:c7:
3e:97:86:5f:4e:4a:03:65:f0:13:11:2b:a9:77:ff:96:ce:a1:
1a:86:82:5d:76:ec:d9:df:d9:e6:30:32:8b:b8:1c:f3:e9:af:
a4:2b:c4:45:dd:71:c6:eb:a2:cf:92:8b:f8:ed:d7:c0:13:a8:
fb:01:a5:08:8d:c9:27:09:69:d2:fd:c0:36:67:d2:8c:6d:b5:
0a:be:6b:87:98:e5:ef:4b:e4:47:15:13:9c:4f:0e:07:7b:79:
88:8f:e9:2d:9a:61:b4:06:11:c9:cf:7d:02:28:07:f1:c4:03:
b5:92:53:a6:94:cf:8e:2f:2f:89:2d:a1:26:95:b8:36:24:ce:
37:f0:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net