Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer (raw, json)
Hash identifier: oWS300NXPvjNoQnl2ZEx5xrQkAGQ2jWSwp3sQja1lGQ=
Subject key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD2A3CBF485C1F7C338183E9FB818
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50401
IP: 91.222.112.0/22
IP: 91.242.192.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:a3:cb:f4:85:c1:f7:c3:38:18:3e:9f:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:df:38:56:52:f5:43:16:56:d9:15:f5:24:
6e:07:4a:9a:4a:b5:89:ef:17:dd:38:3d:80:06:3f:
41:82:e6:8d:7f:ac:60:91:3c:ba:91:e0:56:23:d7:
80:e9:4a:1c:97:b7:5d:31:d4:a4:b1:b1:00:14:be:
b4:40:19:cd:09:3b:5a:5d:47:bd:7a:bf:df:ef:bb:
a0:3c:1d:5f:c8:bf:43:6a:eb:10:96:2b:6d:7b:d3:
ae:4d:ce:ec:0d:d2:d8:27:a9:b2:c7:0c:32:f1:60:
65:82:69:6a:79:17:a2:53:c2:41:b6:e2:2d:c9:ff:
8f:91:6f:36:2a:8d:43:8d:49:72:3c:d5:15:b0:29:
2e:09:21:49:f0:8f:f0:57:c1:f7:bd:ca:7a:90:63:
b7:62:be:25:06:30:86:f2:18:16:5f:fb:07:ab:4c:
a3:cb:7c:ff:36:30:39:fc:22:30:95:38:04:6b:ef:
a1:8c:7f:89:38:d2:49:f8:b4:d3:3e:30:44:d7:19:
6c:28:46:10:3f:bc:81:89:06:2d:4a:e4:9d:27:e4:
2b:43:95:f1:12:46:ef:9b:1b:11:71:92:0f:b6:20:
2b:82:a8:81:7d:86:fb:6d:b2:19:f1:cf:67:b9:a6:
5f:30:2b:d8:25:c3:42:b0:d1:8c:5f:dd:05:ab:a0:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.112.0/22
91.242.192.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50401
Signature Algorithm: sha256WithRSAEncryption
18:04:7f:ca:e1:d3:5a:e8:5a:ff:6d:4c:73:5a:09:9b:e9:2f:
95:44:a5:d6:82:43:5e:05:cf:7a:13:1f:9e:48:03:be:c0:c8:
0e:99:ca:5c:52:48:4e:46:e4:b1:40:fa:9b:62:7c:8c:80:d2:
c4:b5:db:eb:52:00:1c:60:06:9f:f3:8a:d6:92:12:d2:e9:0d:
1b:cd:84:42:d5:38:94:ed:a1:0c:21:0e:8c:f1:b9:a0:38:f8:
a2:59:e5:0e:b6:58:b4:ee:f3:56:67:cb:09:1e:48:55:a5:97:
f3:71:63:15:53:fb:9f:a3:5a:ee:bc:5a:7a:eb:64:1f:2f:df:
0d:44:7f:26:18:c8:65:2f:2a:1c:d4:90:58:59:17:58:60:e0:
cd:f3:c8:35:5e:37:bc:88:81:0b:d1:50:fb:d0:6c:67:8b:df:
bb:f3:79:66:01:37:1d:42:76:c6:21:cd:90:db:04:2b:3a:05:
b0:a5:e6:50:a0:69:4b:f8:dd:71:b6:e5:72:37:ae:c4:0a:d8:
e0:ef:72:cf:80:23:ed:0b:8f:7a:1f:8a:65:fb:42:a8:a5:9e:
3b:44:f6:aa:a6:da:b5:c4:14:d5:ad:17:d7:23:72:02:82:11:
11:5f:c8:16:11:37:3b:0d:3e:7b:51:26:1e:a7:6a:de:5e:3e:
63:5a:71:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net