Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.cer (raw, json)
Hash identifier: xZ2Z4WpHhZ6qLiriYHnLRzk6F/J/nVPpF4C9F0Gpw+k=
Subject key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C504399035C12CD168F6F4D771F8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42258
IP: 185.160.32.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:50:43:99:03:5c:12:cd:16:8f:6f:4d:77:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:a6:85:c2:bf:2c:04:db:74:19:b9:cb:89:
43:d0:46:8c:56:ae:07:65:e1:60:16:03:56:85:78:
01:fa:9e:a3:32:71:86:73:6a:6f:77:39:0c:19:e1:
00:ef:c6:88:a9:7b:3a:96:c4:f4:e8:75:71:39:9b:
18:ef:9b:bf:f0:dd:f8:dc:b9:e8:1d:c6:03:21:ef:
44:e2:0b:66:2a:2f:41:f2:a5:2a:56:29:16:b9:a4:
c8:c1:91:c1:88:cb:69:75:a0:7c:4b:c8:85:79:51:
a9:b5:d6:c3:f4:c1:ce:01:18:9f:a5:64:88:49:2a:
27:53:20:bb:f6:ed:9c:ec:31:23:c2:e6:f4:bb:4b:
ec:54:1f:fd:15:4e:e2:b2:c3:1c:d6:06:7c:ab:3c:
9b:c7:0f:6c:e8:8a:57:82:ba:af:26:62:ff:e7:11:
42:44:53:ba:de:33:62:ec:97:50:1a:92:04:5b:3e:
e0:bf:46:6c:d7:9d:f8:2e:50:80:69:bb:d4:ec:11:
ff:b9:d2:66:c3:7a:74:3f:9a:6b:87:53:1f:9b:b3:
be:ed:0a:61:21:7f:fb:44:b4:56:91:96:4e:b2:ac:
ce:4c:bc:3d:27:d2:9f:2d:69:a8:46:c9:3a:71:fb:
89:2f:82:90:0b:14:47:52:da:2b:e3:d4:d2:9f:3a:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.32.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42258
Signature Algorithm: sha256WithRSAEncryption
48:03:05:30:92:c9:3b:b4:76:70:54:ce:4a:8b:11:75:2e:0e:
26:fb:40:b3:1d:6b:e6:c5:bc:40:c1:a9:c3:80:56:34:a0:ed:
49:a0:41:fd:60:18:da:43:c8:da:38:36:30:db:1f:d0:ce:c4:
fc:ac:f6:31:ed:86:f6:14:f4:cc:ee:59:b7:82:be:4b:98:6c:
8b:ff:76:26:80:57:9f:30:7f:e9:2d:88:ea:eb:bb:65:dc:81:
e5:4a:78:e8:14:e9:40:0a:ce:53:33:c1:19:55:d4:69:11:99:
9d:8d:9e:2a:70:d1:a8:5f:fc:70:bd:d9:7b:60:30:6d:cd:99:
17:77:e4:3b:ee:c1:70:39:cc:aa:32:8c:02:68:fd:90:f4:70:
c2:63:c6:99:81:42:fd:01:b6:9e:34:9f:8f:48:34:3a:68:27:
09:fa:3a:71:ef:3d:03:76:8e:df:e6:10:b6:60:f2:56:88:bd:
f9:9f:bd:be:c4:7a:15:78:7a:2d:25:86:44:a1:a5:bf:51:47:
bf:27:c8:f2:98:66:65:52:34:13:8f:32:e9:d1:ae:7a:7b:91:
1b:bd:7c:6a:64:bb:33:80:7e:98:cd:68:6d:dd:ad:1e:8a:2f:
29:ed:d5:e0:21:fa:ab:27:8c:43:75:17:7b:a7:6e:72:2c:e3:
69:64:2b:aa
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjFBDmQNcEs0Wj29Ndx+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTE3MTBkOTVjODNiZTNlNzg2MGI5N2IxZDdiMzZlNDYwNzE3M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwumhcK/LATbdBm5y4lD0EaMVq4H
ZeFgFgNWhXgB+p6jMnGGc2pvdzkMGeEA78aIqXs6lsT06HVxOZsY75u/8N343Lno
HcYDIe9E4gtmKi9B8qUqVikWuaTIwZHBiMtpdaB8S8iFeVGptdbD9MHOARifpWSI
SSonUyC79u2c7DEjwub0u0vsVB/9FU7issMc1gZ8qzybxw9s6IpXgrqvJmL/5xFC
RFO63jNi7JdQGpIEWz7gv0Zs1534LlCAabvU7BH/udJmw3p0P5prh1Mfm7O+7Qph
IX/7RLRWkZZOsqzOTLw9J9KfLWmoRsk6cfuJL4KQCxRHUtor49TSnzpvSwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAEXENlcg74+eGC5ex17NuRgcXOiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzNkMDRk
ZS00NDdkLTRlMmItOTk3ZC0zYWQ0MDMyNTAzYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvM2QwNGRl
LTQ0N2QtNGUyYi05OTdkLTNhZDQwMzI1MDNjMC8xL0FSY1EyVnlEdmo1NFlMbDdI
WHMyNUdCeGM2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuaAgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwClEjANBgkqhkiG9w0BAQsFAAOCAQEASAMFMJLJO7R2cFTOSosRdS4OJvtAsx1r
5sW8QMGpw4BWNKDtSaBB/WAY2kPI2jg2MNsf0M7E/Kz2Me2G9hT0zO5Zt4K+S5hs
i/92JoBXnzB/6S2I6uu7ZdyB5Up46BTpQArOUzPBGVXUaRGZnY2eKnDRqF/8cL3Z
e2Awbc2ZF3fkO+7BcDnMqjKMAmj9kPRwwmPGmYFC/QG2njSfj0g0OmgnCfo6ce89
A3aO3+YQtmDyVoi9+Z+9vsR6FXh6LSWGRKGlv1FHvyfI8phmZVI0E48y6dGuenuR
G718amS7M4B+mM1obd2tHoovKe3V4CH6qyeMQ3UXe6ducizjaWQrqg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net