Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer (raw, json)
Hash identifier: 1hb6nPFFV3zb6HlN10BXwic3pR2xtF1xgq0vkQ+JOiY=
Subject key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942669E0AEF491EEDB15D0013F2F17A707
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213869
IP: 5.149.240.0/21
IP: 185.130.193.0/24
IP: 2a0f:1680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e0:ae:f4:91:ee:db:15:d0:01:3f:2f:17:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:08:a1:76:d2:29:65:bd:40:c8:86:f6:52:
07:ac:2e:f3:07:09:6e:61:cc:03:21:16:f7:17:5b:
ff:ca:bb:db:7e:b6:98:54:df:f7:06:1e:80:8f:53:
7d:0c:a2:21:20:88:97:77:f0:38:be:83:53:06:3f:
23:ba:83:c1:4c:0a:b1:86:21:b3:a8:77:ed:3a:f4:
9d:23:e7:62:39:4c:24:74:48:79:04:9d:62:a5:3f:
f6:0b:12:f5:65:54:2a:5d:a0:93:61:28:a5:08:44:
b3:9c:fc:91:9e:b9:81:3d:7e:0c:58:4a:6b:bf:8e:
f6:2a:62:91:e6:d2:a1:4f:75:e3:05:e0:b4:4b:d6:
66:2e:14:d4:98:95:6c:08:72:0c:f6:62:d5:42:50:
8b:e8:40:e8:0d:43:7c:2b:9b:89:67:0f:d8:20:d5:
62:52:a1:21:c2:36:66:eb:dd:25:a3:a1:0f:b6:71:
56:0a:b4:0f:2d:a0:ed:c4:c9:23:b9:25:6a:2c:7f:
b8:c9:5f:44:e5:02:1d:a7:ce:6c:4d:7b:f5:fb:5c:
7b:2d:1f:40:8f:b2:ae:2d:f9:d6:1a:6f:66:3c:0f:
05:86:ae:0e:bc:77:c5:91:71:58:fd:4b:c1:4f:50:
3d:53:36:8b:a1:a3:1d:70:6c:32:e8:1e:0d:1b:b0:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.240.0/21
185.130.193.0/24
IPv6:
2a0f:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213869
Signature Algorithm: sha256WithRSAEncryption
73:72:ad:6c:25:e1:d2:ff:93:4f:09:6b:79:02:ea:b4:d1:2a:
00:1f:b9:3c:55:4e:35:7a:cf:2f:0d:40:77:ac:b5:72:5a:a5:
4c:c4:43:3b:63:0b:e0:2e:7f:d4:23:b3:2f:cb:d3:df:46:5a:
aa:53:b3:10:9b:ac:c4:10:cc:b3:f9:bd:2a:3e:ed:e8:87:3c:
29:89:d3:49:a9:c5:21:f9:92:6a:ab:17:f2:75:4b:dd:9f:96:
94:23:b2:87:b1:94:bd:44:57:ab:64:b5:fd:e3:f5:bb:84:90:
ed:3d:49:d7:d3:06:40:d8:37:87:1f:91:ac:ff:20:b4:f0:bf:
c2:e3:d2:61:3e:73:45:4a:7a:fa:ee:1b:46:50:d9:db:46:04:
c5:64:0b:1f:80:b2:f9:32:71:25:bb:47:50:84:c7:72:9f:75:
9f:28:d7:b1:a3:f1:69:d7:2d:d1:98:96:72:1f:8e:c4:31:a2:
a1:39:69:33:c4:a1:c0:b4:8f:2b:f3:38:3c:9d:d0:c5:0d:7f:
36:23:37:82:b0:8e:ad:0a:94:58:d9:1f:ae:05:2c:e5:61:0d:
92:96:54:07:1f:64:06:b1:3d:c2:1e:06:52:bb:98:e4:19:35:
3e:05:05:77:6a:8b:07:c6:a7:69:64:fa:59:76:a7:6e:ff:6a:
f3:ae:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:01 2025 by rpki-client on console.sobornost.net