Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.cer (raw, json)
Hash identifier: 32sP7Sjp7XpZMPj2JaFDQu9G6DoXrER8fPhhWAPGpto=
Subject key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3CEDF13AA884EB6B86094F28A677E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21305
AS: 51936
IP: 79.98.48.0/21
IP: 80.94.224.0/20
IP: 95.128.64.0/21
IP: 2a04:9b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:df:13:aa:88:4e:b6:b8:60:94:f2:8a:67:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:83:5a:af:80:b0:75:9b:8e:83:44:fd:64:
bf:4f:74:71:fb:92:01:f9:10:c9:b0:a2:2d:f3:66:
51:b3:14:fe:29:36:c7:06:f2:ba:16:0d:44:f5:69:
55:fc:bf:f3:6d:24:ef:4a:72:4a:d6:85:55:3f:8a:
36:5c:0e:43:aa:82:82:cd:bb:a4:de:69:49:ec:dd:
ca:1b:09:42:77:c2:9f:85:25:c3:5b:08:0c:4a:36:
9b:39:1c:8c:2e:08:f8:c4:41:ef:0a:c2:9d:18:cf:
8a:7d:b3:68:5b:97:ef:74:19:1d:79:67:aa:f4:f6:
d8:81:2f:cd:44:db:a5:87:0b:41:22:bb:13:85:33:
d2:4b:2c:04:e4:b9:3c:6e:e7:ee:28:a9:3c:16:46:
3c:ae:c8:df:03:10:03:cd:fc:c1:4f:89:50:81:34:
37:13:7c:30:65:4d:47:fd:3a:23:f3:e7:66:d0:6b:
67:2b:70:1a:b7:99:f6:64:bd:ca:f9:1c:b7:8d:08:
50:b7:16:8e:10:16:27:82:28:31:ec:80:84:42:e9:
2e:b9:79:ff:f3:7b:1b:4a:af:4f:1b:58:59:50:7f:
e5:0c:66:b5:ef:30:44:a2:66:43:d5:1d:1b:a3:f3:
9a:1c:66:14:26:2c:5c:c6:b5:35:b3:f6:d4:c3:63:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.48.0/21
80.94.224.0/20
95.128.64.0/21
IPv6:
2a04:9b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21305
51936
Signature Algorithm: sha256WithRSAEncryption
ac:ac:dc:47:53:f0:cb:17:3b:5a:fe:03:10:12:0d:a3:c6:7c:
df:03:5e:74:1f:17:6c:ba:99:2b:76:ee:dd:d8:17:47:38:b9:
67:95:77:53:20:61:5d:96:8c:04:23:15:17:51:f9:05:25:1c:
5e:30:cc:d0:17:68:2b:91:2c:de:cc:43:84:fb:32:1f:ec:17:
2c:c3:b7:ae:83:22:ed:2d:71:3c:f1:00:46:e2:ab:45:9b:59:
32:a6:0d:cd:bf:f2:a4:e7:f6:ac:8b:c8:e6:89:aa:e1:0b:b2:
1a:67:34:95:d1:d3:30:cf:1e:32:d0:74:41:5a:43:62:b7:e4:
a6:3d:4f:aa:24:e3:ff:54:20:52:f7:43:50:6a:7f:a1:9a:1e:
c5:7f:e7:72:79:cd:5e:27:7f:81:1c:dc:7b:a0:1f:9e:4e:50:
ce:12:04:fd:87:2a:eb:c6:24:c2:78:db:c5:4e:40:9d:7e:49:
28:f6:f0:11:c2:12:77:3c:b2:bf:46:c7:68:87:dd:aa:a5:2d:
a8:3c:a1:23:f8:dd:63:0b:95:4d:f2:cd:8a:c5:0c:a1:61:61:
d3:9a:c6:a0:08:ce:9f:62:47:4a:78:65:01:8c:ec:73:70:80:
78:b6:68:5b:e4:a1:74:e8:67:13:e4:55:5a:cb:b6:bf:4d:f5:
50:af:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net