Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.cer (raw, json)
Hash identifier: RQaaYO92wBBJmLuUazWchSWvq/Yf9LOgfEmxWkkxXpc=
Subject key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521613D037E92929E823B99F2135F34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197738
IP: 109.197.166.0/23
IP: 176.97.56.0/21
IP: 192.162.208.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:61:3d:03:7e:92:92:9e:82:3b:99:f2:13:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:9e:6d:6a:f4:74:c0:e0:42:48:a2:cb:13:
a7:74:e6:53:7a:ee:71:bc:96:ec:f5:98:1e:af:bc:
1b:95:bf:ac:ee:80:f2:e6:9b:ab:81:01:27:b1:1e:
3b:33:f8:3e:b7:b2:f8:18:1c:b5:07:8f:7d:be:5e:
df:a5:f1:ee:c3:85:8b:7d:d8:57:d3:62:01:33:ad:
2f:8f:0b:92:36:eb:b6:47:a7:d6:22:f3:c1:a2:c6:
66:d6:7d:5f:14:62:17:c9:95:e1:ae:66:11:f7:fa:
9b:4d:a5:88:c3:b3:ab:b0:71:b8:8c:85:85:b0:5a:
70:43:48:7d:de:ee:0d:26:50:17:d8:73:e3:0d:44:
06:7e:ab:0a:49:2a:fe:c4:df:d5:c3:5d:b6:18:e8:
e6:2c:e3:18:43:b0:fe:f0:08:c3:64:d6:d1:c0:8c:
8d:b2:e8:6a:cc:76:96:e8:b2:bf:b2:9c:41:7a:4c:
11:92:77:cf:99:fe:19:d4:07:c3:7f:60:2c:57:26:
3b:b6:85:d2:55:ee:03:1c:58:33:92:b1:4c:0c:c1:
88:96:83:87:76:e2:85:7c:a2:04:88:76:14:e0:eb:
db:8f:82:0b:08:4e:27:86:66:60:45:9e:88:94:27:
7b:19:ee:df:fe:44:3e:e5:32:e1:4f:4d:2b:b6:d5:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.166.0/23
176.97.56.0/21
192.162.208.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197738
Signature Algorithm: sha256WithRSAEncryption
0f:27:94:d9:69:04:3e:4a:7e:4b:f8:15:ca:35:84:22:d9:59:
9e:71:d8:dc:27:7a:f0:30:f8:49:e5:48:81:00:20:6b:6d:0a:
e2:6a:90:69:fc:2a:a6:93:fb:e4:94:0d:12:32:76:33:c0:64:
ee:1c:59:e4:e6:22:40:7f:97:7c:5f:c3:d5:b9:0e:10:75:fc:
d5:6f:ac:75:38:d9:44:9d:7f:dd:d4:97:d0:fe:7b:5f:88:d6:
c6:fb:64:75:14:86:b0:2d:4e:75:d7:e2:7e:22:f4:7f:a8:40:
df:cb:7d:07:9d:51:34:42:7b:95:1b:19:45:8f:91:55:8d:72:
3a:98:fb:1d:ba:89:d6:30:83:b4:b8:7a:53:0f:fd:ec:01:18:
1a:0e:d8:a6:59:28:e6:e7:02:f1:d6:f0:94:d5:be:e3:1d:a0:
2d:70:24:35:fc:f0:91:08:d9:34:12:ab:2c:f0:20:00:15:49:
61:0a:56:06:1d:57:be:0a:1b:41:91:f0:a3:2a:6c:d3:a6:65:
eb:3b:e7:4b:0d:25:c8:9e:54:72:90:39:9d:39:71:40:39:ea:
0e:57:a2:24:fc:d9:3e:64:c2:72:0a:02:78:da:12:f7:c6:4b:
cd:74:fa:49:4b:b3:78:c9:48:b2:99:e1:1e:bf:c9:5e:31:f0:
94:a0:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net