
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.cer (raw, json)
Hash identifier: gPghtwdkBr+/KjAXk5IkkKTuv7ZB4qsGqAZG/TQuAR0=
Subject key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE952C92DCCC96220B1E98EADE636
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197532
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e9:52:c9:2d:cc:c9:62:20:b1:e9:8e:ad:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:ae:78:d4:eb:35:d2:97:d0:3f:59:64:0b:
fe:2d:d2:75:81:b4:62:f9:56:77:6f:c0:b2:9e:9e:
5d:0f:7e:60:ee:3c:bc:f2:52:dd:0f:75:57:50:27:
61:57:cf:57:f8:6d:27:49:0f:01:59:8a:c7:a4:71:
96:0f:af:a5:40:65:14:57:60:5e:12:e8:ac:ea:87:
65:bf:8e:86:3f:ff:78:5e:6d:d0:24:12:3c:f1:15:
d8:48:47:18:2c:11:be:3a:0f:ef:38:d4:b9:59:57:
21:64:de:b1:c6:19:c9:1f:35:ca:a8:18:d8:92:d1:
4a:13:de:aa:b3:c7:24:b4:a1:fc:ff:48:7e:ee:2a:
a4:9a:c2:28:26:b3:83:ef:6b:2b:0f:62:87:c9:ec:
32:db:71:39:32:8b:ed:25:8f:6e:e6:23:72:e4:2d:
c5:65:ad:64:34:61:8f:d8:29:de:f5:ba:3c:93:19:
1a:51:c3:07:25:35:b2:e6:2c:10:79:a0:77:4e:ed:
95:30:92:1e:f1:33:9b:ed:82:ee:e3:12:16:eb:cb:
8f:19:96:e7:e8:b9:25:29:34:28:e6:53:f5:5a:bc:
8b:3b:d3:a9:f1:50:57:c0:45:d6:e0:bb:8d:4c:53:
6f:e3:be:cf:3d:02:8f:44:ba:a9:69:22:2e:49:a4:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197532
Signature Algorithm: sha256WithRSAEncryption
a0:ee:3d:e5:16:09:a2:69:2e:61:e7:02:dc:be:4b:af:a4:b8:
05:d9:2f:38:02:df:ec:f3:02:11:c3:25:f9:aa:9a:6b:1d:08:
40:da:8e:d4:80:7b:ff:13:41:a6:b0:4d:c0:87:d7:50:b5:9d:
21:35:80:c2:00:ef:59:ab:14:c7:b5:3a:ab:f0:c0:ca:95:6c:
00:0f:83:dc:db:61:2f:92:53:99:e7:a9:d8:f6:9a:34:6a:d6:
10:d5:7d:e3:eb:c8:1e:23:f1:0b:70:d9:b5:b3:73:0f:bb:64:
d2:68:9e:80:8c:b4:88:0a:39:dd:c8:3e:9d:7d:f1:e5:15:20:
f1:19:a6:53:00:79:ce:89:ad:21:98:7f:fb:3a:90:38:e2:2a:
54:1d:5f:bd:a7:88:76:15:ad:1f:a2:ff:c0:39:97:f5:75:76:
8b:b2:e4:e9:f3:48:8c:4b:dc:31:de:76:a9:2d:9e:d5:81:ef:
54:07:d5:65:0e:f6:65:c3:46:c0:76:a8:39:c5:ee:1f:36:6c:
90:27:4a:a2:a0:9a:10:5d:5f:77:f7:09:97:f9:8e:9a:7c:21:
cc:11:a8:a8:f0:65:4c:98:23:94:6b:ec:93:36:0d:e1:10:ea:
2f:c9:9a:18:ae:5a:76:10:26:ca:68:2b:8b:df:0b:3f:8e:65:
d5:6a:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net