Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.cer (raw, json)
Hash identifier: vz5XmIheUq7qR2PzmVkNRr3xareSYOXM1KB0pIwad7I=
Subject key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDADA3184F184A4BAFC1CAC50CCA1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43891
IP: 193.186.10.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ad:a3:18:4f:18:4a:4b:af:c1:ca:c5:0c:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:aa:e4:43:f7:4f:5f:b4:da:1e:12:92:a8:
c3:b1:a5:9b:6e:1f:9e:b1:36:0a:ae:f5:25:f3:d2:
e0:90:4b:28:fc:e7:d9:71:49:e5:10:6c:ef:84:4a:
b9:95:1c:2b:a1:4d:cf:50:5c:bf:3a:f5:24:22:1b:
d4:6d:ee:40:49:85:90:99:0a:4a:1e:32:77:fb:20:
08:bd:0f:bf:f4:05:13:51:62:dd:9a:be:4d:e5:07:
d5:63:82:f2:d3:14:0c:3d:2d:ce:cc:79:fb:2e:fa:
09:a7:41:00:14:34:42:d7:7f:95:43:66:c9:09:ec:
43:45:da:a4:33:67:b8:4d:be:cc:76:66:f0:d6:56:
91:53:d0:3b:2c:90:01:e7:c6:25:72:43:35:92:a9:
2d:8a:ba:08:f2:e6:34:3c:be:db:e7:8d:0f:95:b6:
47:45:c8:f1:97:62:3c:44:66:b7:f6:20:ae:18:25:
85:ed:d3:26:8a:1d:f1:61:02:ec:3c:6f:26:45:0a:
e0:5c:bd:3a:ad:d1:4b:3d:10:d9:ee:ae:f4:56:70:
cb:2f:ba:d5:d6:7a:ab:87:d6:d6:7e:18:c0:7b:47:
00:04:f4:6e:f7:72:70:0d:eb:66:96:5b:c4:a2:be:
96:a2:b2:a5:27:06:95:8b:4d:5c:cc:ab:9e:72:8b:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.10.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43891
Signature Algorithm: sha256WithRSAEncryption
ad:4a:1e:15:e7:a3:f0:80:ec:13:2f:40:b4:eb:87:29:bc:74:
75:c6:8b:d9:cf:06:d5:8f:91:25:b6:7f:de:46:04:6c:3c:fc:
1b:80:fd:0d:77:de:8f:86:ac:aa:1b:42:c4:fa:74:0a:ad:ff:
62:8a:f0:39:6c:de:d0:81:40:9a:bc:e1:d5:b9:25:e8:aa:0a:
2d:c4:a3:47:d0:d1:27:56:59:c6:80:94:77:17:ae:34:2a:6b:
32:5e:d7:1e:5a:5a:de:42:54:91:b8:c4:b0:86:e5:a9:d2:4e:
d0:71:0d:de:08:2f:00:e1:1e:1c:47:84:aa:9e:cc:fa:63:d6:
66:a8:e7:12:51:35:25:dd:01:ef:36:72:6d:ea:29:9b:e1:8c:
74:f4:90:28:1e:ee:ba:c0:4c:a2:51:37:16:c4:fc:df:8e:ba:
35:63:03:74:a6:5e:da:b0:fd:ef:aa:19:ed:21:6b:da:ef:bc:
50:cf:94:16:17:c3:36:9e:39:b1:62:7b:aa:07:0f:ca:4c:74:
c2:b7:d3:48:62:09:d3:31:5a:29:95:56:e1:08:72:04:df:ca:
30:fe:0e:20:a4:43:66:9b:9a:54:17:85:b6:0a:a2:39:7c:3a:
c8:6f:94:52:74:02:0b:6e:52:9e:ec:92:ac:2f:5f:8c:15:55:
e4:e4:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net