Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
File: QET6VEALxs_DDLgxGoGdW9pCGnI.cer (raw, json)
Hash identifier: lkhOLBZDNupEc7Ut68FuL0UVap7spEG3sQo4zEwc5M4=
Subject key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B390329A3CE1CFB7F5F56379111566
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60627
IP: 185.113.56.0/22
IP: 185.124.112.0/22
IP: 185.140.56.0/22
IP: 185.143.204.0/22
IP: 185.145.8.0/22
IP: 2a0e:ea00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:90:32:9a:3c:e1:cf:b7:f5:f5:63:79:11:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:e0:9a:03:37:23:70:bb:3a:c8:16:a7:9a:
ea:e9:df:53:82:29:55:9a:05:26:58:d6:3a:a3:ed:
11:78:ed:85:95:b3:ca:3a:cb:4c:f3:50:45:ee:c4:
4a:02:16:15:1d:e5:43:6a:84:38:3e:be:01:3e:c1:
46:bf:4b:8d:c0:e4:16:34:86:96:0e:53:a4:c8:d8:
19:3a:b0:a9:b9:01:18:19:4f:94:de:cf:57:e9:fb:
25:89:c5:b8:7e:0c:5a:ea:f3:0d:80:ce:fe:d0:85:
f1:5c:89:95:8b:19:bd:05:bf:77:b0:6b:43:40:54:
81:d0:0f:ea:90:da:71:d0:27:e0:86:39:e0:4d:3b:
95:65:58:1b:72:cf:cb:70:29:3f:4e:17:2b:31:f5:
65:6a:50:de:d6:47:1a:36:3e:f8:8f:c3:fd:a2:2d:
30:3f:69:f9:96:ba:05:ca:ff:9d:36:41:bc:95:5f:
8e:4e:6e:6c:8e:b0:7c:49:21:ac:c4:6b:12:49:68:
6a:fb:42:ac:16:9d:06:90:9f:fe:18:c5:9c:3c:c4:
78:9e:56:24:86:07:a5:6c:4e:d7:20:4b:39:db:ff:
9e:ff:a0:ca:b8:89:de:a8:c5:10:8a:ce:f0:7a:b6:
bc:87:c6:25:aa:c5:2a:5e:e0:f4:18:32:f5:1f:b4:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.56.0/22
185.124.112.0/22
185.140.56.0/22
185.143.204.0/22
185.145.8.0/22
IPv6:
2a0e:ea00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60627
Signature Algorithm: sha256WithRSAEncryption
01:e3:20:16:c9:6b:de:57:61:6f:ad:0d:39:0d:27:e7:9d:09:
3a:d3:f6:bb:e9:8f:3c:02:fe:f6:e4:ba:55:5e:96:15:5a:cf:
26:ff:41:c0:77:81:96:7d:bd:0f:15:0e:34:5e:5b:5d:46:34:
4b:e0:b9:b0:3c:de:89:54:bf:30:37:93:90:5a:c9:92:91:cb:
d5:ec:95:99:62:b3:3d:73:47:36:ee:bb:35:94:01:3e:13:2e:
59:9b:84:d5:c8:14:b9:79:fb:29:55:d5:fe:f2:13:bd:0c:88:
24:36:da:e1:88:d0:73:17:a4:02:de:fb:b7:fb:68:dc:db:19:
9b:8c:90:63:79:d8:e0:c4:76:d9:84:b1:ab:8f:c8:a9:55:a9:
ae:bb:dd:87:6f:ad:7c:b8:a2:17:41:d4:b4:b5:bc:39:f3:a8:
46:26:a1:e7:c4:eb:6a:f7:a6:0a:99:83:e2:c4:01:53:a3:ce:
ed:92:3b:49:61:b0:f9:4d:95:58:63:be:79:72:b3:64:95:36:
c3:3d:dd:11:4d:26:85:fb:4e:5b:c6:db:e9:6a:42:94:e0:51:
b2:b2:e5:97:5c:f5:72:71:d1:7f:81:1f:09:de:b7:a1:90:03:
b4:0c:68:3d:30:da:62:27:71:63:83:53:1a:18:27:22:bd:81:
b8:96:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:54 2025 by rpki-client on console.sobornost.net