Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer (raw, json)
Hash identifier: VBy/Q7rRzRDFKSDfsithPExxOfxHpFscMavJXxt2Sdk=
Subject key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747A5E5FCD0DBF91D744241925B7FDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42344
IP: 91.142.32.0/20
IP: 185.18.144.0/22
IP: 185.107.8.0/22
IP: 2a01:418::/32
IP: 2a06:3fc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a5:e5:fc:d0:db:f9:1d:74:42:41:92:5b:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:7e:23:41:46:a1:c1:b1:e5:d3:67:9d:fb:
58:95:e1:46:b3:2d:db:4f:72:72:aa:31:9b:e6:69:
19:1c:d9:05:06:74:51:e7:00:00:88:b7:fd:ca:67:
6d:82:be:cb:6a:15:d3:97:f6:80:62:f0:34:17:1e:
46:05:19:2a:fa:48:36:c9:22:c9:db:e9:48:ea:43:
f8:f5:95:ae:61:dd:61:b3:7a:e6:60:97:39:04:66:
f4:88:a1:6c:25:ac:8e:af:3a:c4:52:82:a2:2e:dc:
ea:6f:c0:81:96:ca:ed:d0:63:90:7b:5e:f9:58:ec:
85:04:b0:a8:a3:be:a7:49:f0:01:fd:cf:69:da:7e:
6b:bf:f5:15:57:13:00:8d:ab:46:a7:52:7b:d1:6b:
b7:58:f2:47:66:eb:4c:32:ae:d8:c2:0b:c3:e4:e9:
c4:71:95:49:fa:e1:35:b5:96:8a:19:14:01:24:27:
c7:1b:82:72:2f:a1:cf:c5:12:22:d7:cc:be:de:23:
2f:9f:37:b0:31:98:a0:de:ed:3a:61:f8:b6:f5:7a:
a7:79:05:5f:82:54:e2:40:f1:d4:4a:14:aa:79:10:
bc:7a:31:b7:af:b9:17:63:7d:03:00:3f:ed:d5:05:
f5:15:45:24:ac:cb:a0:61:68:4c:c2:f9:8d:74:5b:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.32.0/20
185.18.144.0/22
185.107.8.0/22
IPv6:
2a01:418::/32
2a06:3fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42344
Signature Algorithm: sha256WithRSAEncryption
39:be:ff:39:cb:88:6c:d6:c8:aa:b5:2c:d9:16:1b:04:e4:07:
52:1f:93:d2:39:04:8d:8f:5f:ce:53:67:4d:b8:38:62:74:71:
1f:58:96:8e:43:ec:0f:13:00:99:a5:fc:25:79:46:8b:0b:01:
0a:ac:79:af:3f:95:a4:dc:29:d0:be:13:ef:66:c3:10:8c:a1:
25:d5:fb:11:98:80:68:25:14:85:86:7a:db:80:06:63:11:79:
5d:a0:d4:d2:da:f6:bf:1d:e1:62:e0:de:73:33:4c:9a:64:f7:
f2:ef:f1:dd:29:74:64:f5:b1:ca:81:66:b4:52:50:ba:c2:a0:
1f:db:38:4e:21:17:f8:d7:83:ef:a3:1a:d6:e8:33:87:d1:30:
42:4e:28:d8:c0:44:99:02:92:ab:13:93:38:5a:86:9f:a2:07:
24:e7:e7:36:c9:08:48:6a:30:f5:da:73:c9:fc:01:36:a5:db:
c4:dc:c1:3b:b6:b0:87:7f:94:da:6a:70:3c:6a:4e:59:ac:14:
50:79:e1:e7:2b:6b:55:2b:2a:ad:18:27:db:69:a7:5a:5e:18:
bc:34:ac:21:a2:c7:84:27:b0:56:89:c9:1f:df:e7:eb:3b:a1:
01:9e:83:95:b6:c9:5f:7f:8e:c0:bf:0e:03:04:ef:c5:52:0f:
b5:52:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net