Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
File: BLw664svC0huXIwMec6djWixj5Y.cer (raw, json)
Hash identifier: dCO8R0q3W9J1/GNFArsmEssAgu5isgvT0P78mLyDw/Y=
Subject key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B19709ABF9F1425A865B869EB16839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.96.240.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:97:09:ab:f9:f1:42:5a:86:5b:86:9e:b1:68:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:9d:2a:01:73:15:b1:eb:a7:7e:38:a9:6a:
15:5d:a9:67:81:58:91:6a:a3:61:1b:6e:49:2c:ff:
a4:02:95:3c:7d:5c:92:27:2e:44:c3:b0:10:4b:d5:
9d:4b:38:73:65:8d:6b:13:b9:ff:83:8e:a7:db:ce:
97:36:72:d1:b8:54:27:0f:ab:50:53:5b:21:b9:53:
ea:7e:fe:8f:87:7f:23:57:30:0e:4d:f5:38:de:d5:
d8:33:70:86:58:8b:cf:3f:0d:43:f3:8a:5b:8a:0a:
4d:07:4f:3e:34:68:c1:75:60:33:96:8e:a1:a9:54:
cc:80:20:1d:15:b5:96:86:48:76:ca:1a:09:76:d4:
a0:6f:94:78:2e:e3:2e:09:bf:ae:d0:95:36:60:7a:
a0:75:e3:72:5e:a6:93:e9:5a:75:5c:d4:14:88:ad:
39:2b:aa:70:39:82:de:0a:2a:89:c3:26:01:48:06:
f6:fb:23:84:c8:c9:8c:b3:80:6b:d7:f5:9a:7e:ae:
aa:03:06:bc:2f:0c:76:db:77:e2:fd:3c:f6:f0:59:
c9:45:49:8a:36:bf:a6:d7:9d:d4:96:bb:d8:7f:4c:
b6:0c:55:4d:c0:73:c5:c1:1e:c6:3d:1e:44:cb:b4:
d1:b2:39:d1:a7:20:60:4a:c4:79:a8:93:b3:6f:38:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:18:c4:fe:87:b1:5d:b3:e8:b1:ff:47:5d:cd:53:8c:c1:f4:
55:4e:01:6e:fd:9f:f4:05:0d:f9:2a:4f:55:d0:e5:8c:91:99:
6d:bd:b9:e0:ba:2a:04:8b:e7:78:a5:d2:d3:56:a4:73:79:93:
7e:97:71:8b:90:0b:ea:d9:9a:1f:4e:cd:3c:a7:7e:09:74:23:
16:02:ce:4b:76:f8:39:60:5d:00:ba:70:12:01:4a:3d:3e:4c:
61:d9:d5:55:97:e4:9a:25:e2:4f:02:cc:4f:d5:57:5f:91:aa:
84:f4:08:b7:ca:68:6f:3a:64:01:52:be:82:23:6f:13:be:45:
8c:29:3b:5e:aa:4e:5b:c3:10:38:f8:00:bb:e5:f1:d9:2f:a7:
6b:f0:a0:b8:7b:ce:d9:94:be:79:ad:21:c0:e8:26:1a:3a:03:
57:35:a6:e5:35:77:7c:85:6f:cd:ae:fc:47:72:4c:75:5d:46:
e8:2a:53:ce:c3:37:0b:98:eb:2d:4d:83:56:84:dc:df:3e:72:
79:bc:16:ba:cb:52:ac:c8:3e:5a:7e:50:b7:e0:6d:76:2a:15:
5c:15:42:ed:89:f0:52:9d:ae:34:77:ec:b6:a8:23:f1:f7:a9:
ff:10:a4:f9:2a:54:5c:f6:7d:b8:c6:06:f4:e3:f7:47:af:4a:
59:05:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:01 2025 by rpki-client on console.sobornost.net