Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer (raw, json)
Hash identifier: G9WMdHSQs+gQONHG2zy+hf5AUX4fpf0xdV1fjpcP7Cg=
Subject key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521443004B88FE8A8EEB27BB8E69FB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198421
IP: 91.234.132.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:44:30:04:b8:8f:e8:a8:ee:b2:7b:b8:e6:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:47:ac:15:13:94:d6:2b:e6:d9:de:c4:8c:
d2:59:77:8c:f9:60:c7:ef:8a:7b:23:de:6a:a9:e0:
cc:bb:23:2a:eb:71:1d:a7:4c:ae:72:9e:5f:37:51:
17:b1:49:70:10:69:64:99:d9:54:4c:dd:4f:42:43:
62:8c:a3:aa:b0:01:c2:63:d0:05:43:67:3d:ab:cf:
03:17:1b:80:5f:22:a2:31:db:86:45:7b:b3:06:01:
09:6f:dc:8c:9e:a5:b6:7f:44:54:99:75:e4:cd:2a:
01:06:cc:9b:e0:72:fa:1b:55:5e:6e:fd:59:51:d6:
a9:68:44:06:83:d7:9e:39:26:6b:83:e0:71:0c:10:
5e:06:f7:30:a6:cc:eb:51:c7:a2:ba:46:8b:5f:63:
c2:68:1d:bc:df:15:32:9f:4a:67:51:29:77:df:a5:
be:e3:25:38:ea:bd:fe:4c:4b:6a:0a:eb:6e:ea:ac:
04:18:08:76:86:1f:ca:d2:d1:4c:a2:d2:f7:c8:3f:
1a:cf:12:6f:0f:58:c4:5e:0c:c0:32:62:6f:34:ae:
d5:a7:c0:34:d9:33:e9:f1:06:3f:29:c0:f8:40:d3:
0c:e2:10:36:8a:ea:7f:05:0e:b8:d5:49:9a:fe:31:
58:66:95:80:b7:d5:a4:8f:90:e6:35:d6:d0:4e:8c:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198421
Signature Algorithm: sha256WithRSAEncryption
73:79:cf:a1:87:23:20:24:e3:86:f1:e2:d5:9b:56:29:b6:7e:
07:df:71:f6:e4:38:17:a4:ea:a6:61:fb:05:3f:d2:d5:b8:00:
b8:9b:94:6f:18:3e:19:4d:a0:c3:64:b5:87:f3:06:d2:cc:e0:
61:57:da:46:b0:45:e2:d2:c1:1b:2f:bc:1b:bf:dd:14:eb:03:
fa:9a:11:c7:1d:d8:94:1c:0d:cb:54:05:5c:a5:8c:a9:87:e4:
bf:dd:ea:64:6b:4a:de:68:f0:cb:fa:01:ba:03:7d:44:66:cc:
e2:57:0e:24:f5:2d:48:72:25:bd:c8:f1:e6:9a:f3:3d:1c:73:
6c:50:0a:e8:65:b9:e5:87:49:ee:05:48:f1:cc:77:ae:04:52:
1b:b2:c4:32:eb:90:85:34:f4:bf:d1:93:4d:bd:6d:c4:4d:05:
06:15:39:87:92:6e:56:26:01:9b:ae:88:a7:62:47:08:2d:71:
89:9d:a7:62:6c:fe:12:d6:ca:32:91:a8:9b:ee:e9:bb:07:2f:
01:0a:82:37:a6:56:b7:dd:df:2c:b5:ee:0c:3b:0f:53:65:55:
62:8f:c6:26:c8:79:5e:fd:cd:08:18:c3:3c:e5:c1:23:47:96:
67:76:54:21:3b:70:76:8c:54:ed:1f:19:03:bb:49:01:44:ab:
08:aa:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:05 2025 by rpki-client on console.sobornost.net