Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer (raw, json)
Hash identifier: WcCwnqfAy1CNHwENLG4huU+Jbg4M6Lpw+8jxsEz0iY4=
Subject key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3F527D8963688AA42DECF074F6C86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35260
AS: 203318
IP: 185.138.80.0/22
IP: 185.214.73.0/24
IP: 217.26.112.0/20
IP: 2a00:1ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f5:27:d8:96:36:88:aa:42:de:cf:07:4f:6c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=039b01353e51a3a87e835963bd8833ed81853d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:ed:12:f0:7f:c6:a7:22:82:3e:85:7c:98:
8f:9f:7d:3f:2b:85:4e:e7:50:5f:d7:db:32:20:dd:
2c:a3:03:c3:67:ba:b2:e5:e1:90:08:9d:1d:29:9a:
8b:ca:f0:94:b6:95:1f:ae:86:5c:04:fc:35:86:0e:
4a:28:b0:67:8e:5a:fa:65:e7:21:84:96:31:4c:cb:
aa:26:07:d5:aa:d6:87:78:3b:79:9e:a5:f8:bb:74:
d9:cc:1a:74:1c:7a:16:9a:74:7b:2d:ce:4f:a2:f5:
4c:2b:46:65:c0:3d:ee:3b:93:f6:88:56:04:bc:3e:
bd:30:25:0d:53:f4:c0:e0:7a:4b:7c:49:4d:a6:e1:
82:88:09:70:b3:72:b5:a2:b8:95:04:c7:99:9b:ba:
e2:e5:17:49:05:c5:a7:4d:24:01:38:95:a9:31:0a:
0d:1e:4b:04:ad:17:db:77:b5:77:7c:2d:40:6a:2c:
c1:fa:c9:04:18:93:29:c9:e9:bc:4b:36:7e:f9:88:
2d:23:74:0d:66:93:d0:86:6b:ea:c7:17:49:d6:6e:
7a:7e:6f:9f:74:29:1f:32:90:20:00:5f:33:b3:8c:
bd:b4:c3:70:6a:5d:b9:96:89:07:75:b8:38:ed:80:
2a:df:23:50:21:12:40:b3:df:28:b2:31:38:09:53:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
185.214.73.0/24
217.26.112.0/20
IPv6:
2a00:1ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35260
203318
Signature Algorithm: sha256WithRSAEncryption
8a:c8:3b:86:44:f5:da:e8:52:87:ea:54:1f:77:56:a2:eb:c9:
5d:aa:b9:b2:e4:0a:14:af:a2:12:c9:ca:48:cf:ea:cd:0b:a3:
0c:e6:41:ee:90:a4:5c:ce:28:17:48:c8:18:46:7d:a8:82:af:
a2:5e:9d:9a:18:fb:dc:de:af:ed:6f:9b:8f:72:aa:ac:5b:f9:
23:58:45:d0:b0:2d:d2:a4:87:13:be:22:29:57:0c:70:46:a9:
ea:f1:e3:33:23:4a:63:eb:ff:61:53:b5:f0:b0:d3:10:df:5a:
77:88:a0:ec:8a:6c:20:2a:12:d7:a0:1a:80:47:09:60:76:55:
56:2a:74:57:2f:a7:53:d5:cb:9d:b1:50:ec:73:c4:ef:4c:9b:
09:72:4b:99:a2:9c:d7:b9:9f:59:fe:69:9b:0f:44:38:1c:c3:
b6:4d:7b:24:e4:8b:cb:49:f2:c7:80:7a:82:e8:76:79:19:9b:
31:8f:ae:65:da:3f:af:12:6d:47:34:fb:15:1d:83:4b:b0:c3:
1f:cd:0b:d6:87:8c:ec:f7:52:1e:a5:ac:48:97:fa:3e:93:3f:
8c:fe:90:95:64:b4:c8:21:e7:4a:9f:d8:cb:19:6f:3b:8d:20:
18:b7:a5:a9:bc:2a:7b:4d:88:1b:25:8c:85:9d:9a:a5:06:d7:
04:0b:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:57 2025 by rpki-client on console.sobornost.net