Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer (raw, json)
Hash identifier: K0RV/S4ftwHmNCMoCdXeid5j+eLwUuCiQG50jyxyb2c=
Subject key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FBC5A22C5A278D913699BD5C81435
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60426
IP: 86.63.0.0/18
IP: 109.234.176.0/21
IP: 185.17.164.0/22
IP: 2a00:8b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bc:5a:22:c5:a2:78:d9:13:69:9b:d5:c8:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:d6:cf:28:a0:d0:a3:ab:2c:43:33:85:9d:
53:36:3c:04:b4:88:3a:d0:0d:fb:f8:52:7c:9a:46:
5e:fb:0c:a7:dd:d5:5e:d2:1d:6e:13:16:77:86:86:
7d:24:35:f9:39:61:e4:74:49:6e:bd:1c:57:61:94:
d6:b7:f4:4b:73:94:02:06:e9:68:c0:95:9f:a6:82:
50:27:9a:10:db:3c:4e:56:86:37:bd:27:94:53:c8:
e8:88:0e:0f:4a:87:29:fb:3c:a2:06:f3:57:5e:77:
a8:65:61:82:e8:ed:61:89:46:b0:eb:c4:aa:c6:16:
0f:68:39:b2:bf:56:84:34:f6:58:10:1a:6c:51:d5:
bc:26:42:46:12:d3:72:95:1a:d6:6f:d9:8f:6e:50:
ad:d5:73:7b:37:c2:12:dd:a6:7a:08:ef:1f:ee:de:
36:52:bd:79:e1:4e:8a:6a:8d:d9:0b:4c:db:7f:a4:
d1:0b:a8:d0:9b:42:b2:02:1c:b4:23:ad:6d:95:5c:
00:cf:10:23:fa:22:2b:26:f7:cb:ae:6d:14:17:f5:
4a:11:3f:eb:33:c8:21:df:17:1c:8c:a2:47:e0:bb:
30:4d:35:db:35:ae:72:6a:95:51:20:7b:30:8e:3c:
a6:22:86:0e:4a:03:f7:73:3f:8a:38:b8:a4:4f:ff:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.0.0/18
109.234.176.0/21
185.17.164.0/22
IPv6:
2a00:8b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60426
Signature Algorithm: sha256WithRSAEncryption
25:97:dc:b0:73:e5:11:63:f6:6c:18:da:50:dc:63:c5:96:3c:
06:c6:08:09:53:af:75:3e:b7:7d:aa:d6:fb:0f:7d:d2:c3:c6:
dc:d8:6f:ab:da:c0:72:78:b4:58:9d:25:8c:94:12:73:17:57:
80:9b:ef:c8:d5:b9:23:fe:7d:ef:e4:2e:be:3d:cb:1d:32:a6:
9d:86:5d:b1:48:fa:01:27:7b:a5:28:5e:6a:59:75:4f:c5:9f:
d6:f6:5e:09:24:5d:87:59:39:7e:e0:38:53:7e:eb:0c:ca:96:
fd:a5:33:1f:d2:3c:4d:d1:bb:91:0c:94:bc:3d:7d:5c:35:7a:
4d:4b:cf:d5:3c:ff:86:2e:3a:1d:37:cf:21:f5:fd:43:be:4d:
61:90:49:da:d0:dd:e7:4d:98:03:3f:20:1d:b6:42:af:79:3e:
e5:e9:49:b6:bc:ba:a6:a8:0f:c9:e3:f0:0d:80:29:ae:d7:9f:
0a:b9:97:33:50:1d:c2:96:a3:8c:4a:5b:4d:af:77:5e:eb:02:
7a:5d:3d:7f:e3:0c:86:41:e7:76:22:29:9d:8f:54:da:46:72:
a5:ce:b9:a5:01:8e:50:6c:a4:d6:c5:70:5b:8d:71:69:aa:37:
a6:21:69:a6:cf:51:55:e1:e1:f4:85:60:ee:1e:a9:d7:2c:03:
9d:01:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:08 2025 by rpki-client on console.sobornost.net