Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer
File: UOx05wUaRQngxSWDoJKY2umJ2MU.cer (raw, json)
Hash identifier: zZmVoOW5Vxa7f/vGWpu7gGG7bT6K1llFj+GKh5LL1sQ=
Subject key identifier: 50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E8F7ECC10C2619F99EA5DB134A5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43328
IP: 91.201.236.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e8:f7:ec:c1:0c:26:19:f9:9e:a5:db:13:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ec74e7051a4509e0c52583a09298dae989d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:10:ac:4e:89:26:62:82:d7:8a:bc:80:b3:
a1:02:06:d5:f7:d2:81:c4:69:07:7f:14:62:74:cb:
2f:d0:c0:55:cd:81:52:ba:e3:65:43:db:7b:35:a9:
b5:4e:08:64:1a:61:6d:ad:f7:3e:b8:a5:51:1b:63:
97:53:55:bd:c4:3e:bf:d6:06:c3:ac:ec:67:46:5b:
80:59:24:84:a7:25:ae:ce:68:24:17:92:d4:44:76:
3d:19:29:e2:b2:77:31:8c:1c:c9:37:9e:e4:cf:2f:
11:e3:e8:f5:48:6e:6b:32:1c:ca:a6:18:85:47:26:
a6:09:3e:82:b9:de:5a:64:b9:80:a8:e0:4a:3e:1f:
87:91:37:09:b5:d6:8d:58:49:cc:3a:a8:79:9a:fb:
21:4c:d1:e1:a0:d4:08:45:41:90:44:65:6d:4a:5d:
dd:0e:a4:d1:9e:55:27:93:8d:dd:e3:a1:a9:f8:dd:
29:19:d2:51:71:45:7f:54:9f:3c:11:0d:1f:98:a3:
61:2c:b4:b6:c4:0a:3c:ff:bb:13:c3:6e:d4:ac:34:
df:55:d6:11:20:f2:d9:0c:98:ae:2a:08:3a:13:4a:
af:e5:16:41:3e:e1:d2:3a:1e:39:0c:a6:e1:af:80:
24:b6:6f:31:61:93:96:9d:ef:39:17:b3:33:f5:80:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.236.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43328
Signature Algorithm: sha256WithRSAEncryption
76:28:46:8c:65:54:d6:ee:da:ae:1f:1f:ac:70:21:7a:c2:a9:
d1:08:63:d7:68:d5:26:85:1d:3e:4f:ab:6f:c8:de:21:72:47:
6d:76:b2:38:a6:40:73:aa:30:ef:57:83:23:53:0e:3d:ef:b5:
aa:33:b0:7a:a8:e7:0e:95:33:ab:d4:f4:f0:4d:d8:8d:a3:e3:
ee:9d:b4:ff:44:e4:02:7d:42:f2:e7:3d:41:e4:69:76:d0:6b:
80:be:79:40:d6:a2:69:a0:65:9e:9a:bf:a6:76:f2:fe:dc:94:
30:14:67:55:09:eb:20:e2:b8:d8:3a:88:37:1c:06:6c:81:62:
3e:25:63:b8:cd:93:8c:db:f1:a2:ae:68:29:40:39:9d:16:bd:
a6:83:3f:19:02:47:30:cd:3c:c4:46:43:63:86:53:bf:ef:c6:
db:48:30:24:8f:f3:3a:03:29:dc:00:c2:2e:e0:13:d3:3d:2f:
7c:00:76:fc:5b:25:1d:80:75:d9:f3:f2:a6:e9:93:fa:82:57:
a2:48:55:18:39:d4:5a:d7:c6:af:8e:66:92:fc:21:41:10:ee:
10:70:06:42:fe:78:e8:1e:47:5a:0a:ed:6e:6d:5b:1b:c9:40:
80:29:4b:8c:f3:73:f5:ea:7f:0c:01:0c:73:ae:11:f2:b1:88:
7b:4d:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:40 2025 by rpki-client on console.sobornost.net