
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
File: W67rTDpphRQSVf1fauGIQGc0j0E.cer (raw, json)
Hash identifier: ekOEAgYy+xjZYynV00fEpbmop5DW87B1YkasXxrpdNU=
Subject key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195230A56CF118CC0348EE3C957433DBA9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Feb 2025 11:07:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43684
AS: 48160
AS: 57762
IP: 91.207.142.0/23
IP: 91.233.132.0/22
IP: 91.234.224.0/23
IP: 185.85.160.0/22
IP: 2a0b:1380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:0a:56:cf:11:8c:c0:34:8e:e3:c9:57:43:3d:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 11:07:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:8b:9c:84:01:80:84:2e:1c:6f:90:9d:c6:
bd:ae:1b:00:a6:43:a2:6f:ff:ce:14:31:7d:11:0b:
3f:7b:83:25:f5:cf:d2:7d:04:c5:0f:c6:06:91:50:
a1:c6:13:87:7c:7e:d4:b2:9c:71:5e:d4:9e:09:ee:
bf:0a:d9:e2:be:db:62:4d:bc:05:7b:ce:15:64:06:
61:31:2c:a7:8e:f2:4b:fc:e7:0a:7b:75:7c:a6:10:
a5:34:3a:90:39:38:bc:b8:c2:99:bd:a6:7c:8c:64:
b6:0b:59:dd:33:b4:ca:d9:20:0e:75:e5:dd:05:f2:
fd:68:1e:33:a8:b6:66:64:a4:c7:cd:05:f1:d4:3f:
73:e6:1e:58:cc:9f:87:a5:7e:ff:d8:2a:f1:45:25:
f7:4f:f6:6b:37:bc:ae:c6:90:dd:8f:13:7c:5d:24:
84:09:2b:d3:a4:11:db:72:bb:14:ff:94:6e:f0:3a:
6f:94:2c:8d:5d:f9:3e:ea:d5:a1:be:ab:cd:fe:1b:
ad:79:90:f6:08:28:6a:bd:47:1d:df:6f:a3:65:d5:
5c:77:54:7b:42:7e:98:9b:e4:85:37:cb:2c:97:cc:
07:03:75:6c:b1:ed:b8:15:c8:b3:b3:fd:f9:73:3a:
0d:98:95:b8:89:7e:65:60:4a:37:46:91:14:c1:50:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.142.0/23
91.233.132.0/22
91.234.224.0/23
185.85.160.0/22
IPv6:
2a0b:1380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43684
48160
57762
Signature Algorithm: sha256WithRSAEncryption
17:13:8b:f0:c6:38:83:73:12:58:34:92:f6:66:43:00:7c:2d:
6a:97:e4:09:87:d0:bc:d8:89:55:be:bf:4b:ea:cd:a7:c0:8e:
90:08:0d:69:80:0b:84:fb:95:b7:a6:c6:8b:fb:33:af:18:d7:
75:d1:51:35:49:22:b1:e2:34:b4:b6:18:ed:ce:98:53:06:8b:
84:91:a2:80:41:1b:81:32:ed:68:d2:db:c3:8d:b7:4d:57:d5:
58:f8:0a:97:f7:18:30:07:e7:9b:15:b7:d2:2f:d9:eb:c2:42:
1f:da:01:1b:4a:14:c6:bc:65:69:ac:69:6c:c8:39:a9:c2:4c:
cf:ab:05:05:d7:84:1f:24:e5:a1:bd:0e:39:52:bf:e8:b1:43:
a9:ab:3f:7e:ac:84:4d:ef:47:85:34:d2:09:b3:43:82:7e:ac:
24:9c:8a:8b:cf:3f:df:30:75:06:ab:a0:02:7f:6d:e9:21:92:
88:b7:f0:88:37:56:cc:a3:e1:1c:18:44:67:33:11:7c:ca:2a:
1e:45:fa:df:49:88:2b:94:21:dc:13:b9:3e:d0:3c:f3:33:ec:
67:cc:9e:6f:b9:7c:59:18:eb:49:f4:52:8c:12:89:d2:53:69:
29:b6:1f:e2:6a:c2:b4:8a:f4:3c:5e:8b:2b:9b:09:a2:77:96:
76:90:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:07 2025 by rpki-client on console.sobornost.net