Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.cer (raw, json)
Hash identifier: X8oGhMTaeyyTStAMXTKHomYEHBgvmIF3iYNxYzg5Je8=
Subject key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B18D15E3F67F263109D6B0BE8F288D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196890
IP: 5.149.192.0/21
IP: 193.19.124.0/23
IP: 193.25.222.0/24
IP: 194.28.104.0/22
IP: 2a00:d5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8d:15:e3:f6:7f:26:31:09:d6:b0:be:8f:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:3d:02:95:bf:85:1f:cf:a2:cb:57:65:76:
55:8f:94:43:02:01:21:45:c6:bf:6a:1b:98:6b:7c:
93:45:59:1f:42:df:eb:2e:18:93:b9:56:36:18:c3:
97:22:30:45:9b:98:81:94:a9:fc:ef:3d:84:93:2e:
0f:7d:b0:ba:d8:6a:47:2c:2d:d3:50:b4:99:29:ea:
6e:d2:35:d9:c5:d1:d2:35:6e:9f:66:22:6a:fb:61:
37:20:22:c7:42:d8:08:8e:93:57:32:9e:7a:13:68:
33:41:b4:4e:3a:8b:0d:7e:d2:9d:5c:03:2e:b9:2a:
98:23:bc:9e:0b:25:15:5b:e1:a9:26:93:a2:f7:69:
f6:be:e2:85:7a:ab:4f:f1:72:da:51:c5:a5:a4:99:
cf:6f:6d:dd:33:6d:e8:3c:11:26:70:cf:92:84:9c:
ff:94:e1:3b:53:74:5e:46:80:28:f1:e4:40:a6:ce:
5a:94:63:69:40:58:7c:db:c0:8a:fc:fa:5a:f0:5b:
f9:3f:95:db:72:38:8a:49:a5:05:0a:9c:94:57:ae:
80:31:d2:ec:43:69:a5:b2:05:a4:de:03:a4:3f:32:
ea:de:84:88:45:d9:4e:2e:75:b5:11:14:ef:0b:74:
b6:d7:7e:19:71:77:cb:e2:32:8b:0e:a7:4b:f0:24:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.192.0/21
193.19.124.0/23
193.25.222.0/24
194.28.104.0/22
IPv6:
2a00:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196890
Signature Algorithm: sha256WithRSAEncryption
20:da:44:7e:1b:95:43:99:5d:86:ae:70:2f:64:fd:e7:08:f5:
3a:de:c3:36:fe:9d:e5:fb:6a:9c:4d:77:ee:dd:6c:27:e9:b3:
0f:14:a4:7c:9e:fc:0c:ff:ad:8b:d0:07:e5:84:0b:38:51:2f:
96:81:dc:f6:71:7b:ef:7f:82:b5:d0:99:4e:96:c0:11:5a:c7:
4b:b6:0c:57:8b:5e:7f:5d:ce:ba:fa:9c:d7:e0:49:f6:d3:21:
89:78:7c:31:cb:dd:9f:fc:d6:27:84:bb:79:5e:74:29:18:9d:
8c:dc:6a:c7:72:84:c5:1b:8c:ee:b9:6c:6d:9b:e4:e4:3b:a2:
e8:9a:e8:9b:91:12:33:79:0b:3d:4a:b3:cf:71:eb:06:6d:a4:
b7:2e:32:5e:dc:f7:88:80:d9:3a:80:fa:46:0d:55:dc:c7:dc:
dd:17:c9:03:44:bc:2c:94:b9:cb:d2:c3:1a:1c:60:4f:5b:9e:
95:5c:70:52:c6:77:35:7c:aa:c9:80:a6:af:df:dd:cc:4d:fe:
7e:fe:21:0f:1f:d4:1e:88:3a:5f:ed:d7:9e:02:7d:d2:2d:17:
d6:fb:7e:0a:13:81:82:b9:b5:74:e3:4f:d5:77:86:95:00:54:
e0:52:d9:3c:9c:75:c0:fa:ab:26:88:bf:a8:f5:cf:bf:5d:85:
00:46:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:55 2025 by rpki-client on console.sobornost.net