Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
File: QwPxM011rEMsDKp404mnDAnBLKY.cer (raw, json)
Hash identifier: ffDaX4OBIQsmA8Qrp3Gv7/cG69GdWE6Z/1WaBmuAWW4=
Subject key identifier: 43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195B852E977E7C2AE43893AA012C6B7A643
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Mar 2025 10:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21022
IP: 193.138.99.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:52:e9:77:e7:c2:ae:43:89:3a:a0:12:c6:b7:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 10:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4303f1334d75ac432c0caa78d389a70c09c12ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:fc:f9:76:40:77:37:c4:24:e9:75:c6:fb:
03:9d:92:46:b8:42:fb:37:7d:69:ad:43:19:86:07:
ec:4f:03:10:0c:87:51:2e:78:6f:b8:79:b7:7c:58:
54:6a:31:df:45:49:a8:0a:69:35:3b:79:e2:84:d2:
7e:ba:68:da:a2:0a:f7:5a:c0:88:c1:38:d0:97:42:
0f:f0:15:79:7e:ad:ff:da:29:1f:c3:77:a5:73:d8:
c3:19:09:2a:a2:49:e3:ac:43:29:c8:2c:9a:48:95:
d6:80:72:c0:6c:5d:f9:82:44:a7:a4:39:76:db:bc:
16:00:ff:46:1b:a8:1a:ed:50:ad:f0:bc:22:cf:3f:
65:b5:0c:0b:44:4d:02:64:d7:9d:41:b3:9d:81:a6:
d1:d8:7a:e8:73:d3:ee:68:5e:47:89:37:e1:f1:21:
93:f6:81:29:a9:34:2a:e8:6b:31:69:64:d0:15:c1:
a8:6c:25:be:03:32:48:fc:2f:a3:85:fe:14:28:bd:
3a:7d:d2:48:0a:65:34:95:86:a2:58:da:59:0a:b4:
cd:b3:f7:e3:ef:94:89:c9:24:d9:d0:9a:c6:8d:1c:
35:24:76:ab:87:bd:01:b4:d2:86:74:c6:50:2d:8e:
48:84:0b:f3:13:77:73:d5:67:ec:35:4b:9f:2a:64:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.99.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21022
Signature Algorithm: sha256WithRSAEncryption
6a:c1:5c:5e:85:12:f6:70:46:a6:51:71:94:c7:15:f4:41:93:
14:74:a2:78:46:35:66:5f:4c:62:9a:d5:b6:95:e8:2c:ab:4c:
96:3c:70:f2:ff:f3:eb:dd:31:40:32:8d:9b:96:5b:b9:ca:47:
a4:15:89:4e:f1:50:21:2c:ba:fe:21:a3:5b:b5:63:28:20:aa:
54:8a:29:e4:ef:55:3b:4d:90:7d:5b:a2:b3:df:45:2e:57:cd:
27:5f:4d:06:cb:bb:48:f4:c7:d6:93:6a:42:31:92:ad:29:ac:
a3:4e:53:17:63:bb:ed:28:8b:ba:15:50:f5:48:3a:3d:16:87:
b7:92:b1:f7:61:00:a1:0b:2f:6e:25:fa:81:01:3c:fb:a6:67:
6e:7b:cc:e3:40:a3:05:07:b5:3a:df:42:91:f1:0d:c7:6e:38:
5b:7c:00:0a:4b:c8:69:23:e2:63:85:0c:bf:aa:f5:64:4b:40:
81:e2:53:3a:3c:b5:fc:e3:06:ae:15:1a:5a:24:b8:9b:05:7a:
1b:1b:f5:b0:33:df:a0:1a:6a:a6:78:eb:c8:fe:a2:8d:69:a5:
f5:54:7c:08:3c:ea:ba:12:0b:5f:9a:04:98:26:9a:0c:d2:87:
a5:fb:11:5f:11:03:42:2f:03:76:07:ff:7e:84:b7:cd:6c:95:
14:ee:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net