Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.cer (raw, json)
Hash identifier: YQ1iYP3bWNe+QM9IGeqaJ5t/Ev6OzhJl99iPAlYDPbc=
Subject key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195FAFD40CC9A9A364E5DF631CE9C2DB930
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Apr 2025 09:30:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43994
IP: 46.19.40.0/21
IP: 46.235.72.0/22
IP: 79.142.48.0/20
IP: 86.54.107.0/24
IP: 89.219.4.0 -- 89.219.19.255
IP: 109.163.192.0/21
IP: 151.236.192.0/21
IP: 185.18.252.0/22
IP: 185.249.172.0/22
IP: 2a01:4d40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:fd:40:cc:9a:9a:36:4e:5d:f6:31:ce:9c:2d:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 09:30:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5985bd41a59a2d451e6270835da14399ff62baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:eb:59:0e:7b:00:be:c3:b4:5b:76:8e:03:
9f:30:40:61:33:c9:f9:17:23:ef:2e:52:19:ae:e6:
ce:d4:6e:93:bd:46:81:ce:bb:c2:b5:c7:10:46:3c:
85:46:1d:10:55:aa:4d:37:04:07:ba:19:d0:81:64:
71:53:51:7a:f7:e9:10:28:9f:32:a1:10:62:49:a3:
9d:63:f6:93:99:74:a6:f8:8e:a1:eb:f8:16:5e:5b:
ac:67:1c:2b:bf:6f:f6:1f:42:6f:00:59:e4:8b:05:
cc:c4:5f:d7:55:e5:b1:84:37:bd:83:1f:83:35:ad:
09:67:23:64:2a:25:57:58:d1:10:13:fd:4b:2b:fd:
ec:e7:78:c2:16:cb:7a:84:bb:23:d9:ab:a7:2f:a8:
55:61:2e:56:dc:ba:b9:39:86:68:f2:bc:26:24:a7:
58:87:33:3e:08:de:39:58:6c:40:a5:d4:d4:ef:57:
52:61:20:84:a7:f6:fb:7e:6d:05:ee:d2:da:9a:95:
8b:fc:88:45:ff:08:24:bf:36:9d:4b:71:04:0f:56:
2a:e7:2e:13:50:9a:6c:eb:01:f2:75:f5:e7:62:f2:
e9:f3:8e:b4:41:91:84:9c:69:f6:17:0c:25:2d:61:
5e:8e:72:f5:78:ac:a9:8a:88:3e:69:49:90:cf:5e:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.40.0/21
46.235.72.0/22
79.142.48.0/20
86.54.107.0/24
89.219.4.0-89.219.19.255
109.163.192.0/21
151.236.192.0/21
185.18.252.0/22
185.249.172.0/22
IPv6:
2a01:4d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43994
Signature Algorithm: sha256WithRSAEncryption
7c:9a:1a:c8:4c:d7:82:c2:c4:92:d4:8b:74:e7:85:20:ad:46:
71:56:a6:e7:c4:83:97:d0:74:2b:34:c2:c2:e7:e9:6b:4a:a3:
7e:93:b7:97:f6:18:cc:f5:5b:db:62:b5:ba:2f:f0:5a:16:c0:
36:eb:ba:09:82:c4:ec:76:5c:e6:2e:2d:c6:3c:a5:47:5d:11:
0d:ce:69:61:d3:9c:aa:75:4d:5e:43:8c:0e:b4:20:c2:4f:32:
e0:aa:6c:0b:53:c0:eb:7d:74:6a:a1:6a:71:ec:bb:1a:0c:65:
ca:25:5d:0b:89:d0:f8:d3:1c:84:df:8c:24:e7:05:f8:d0:d8:
12:af:1b:bf:f2:a1:40:dd:28:c7:2e:11:98:56:f9:c3:8c:6a:
99:fa:d3:77:db:fd:99:e6:f9:03:7f:fa:6e:64:e1:81:00:e4:
23:0d:01:8c:d2:86:53:5f:66:1e:d4:d1:55:92:6c:db:77:b4:
b6:34:82:f9:60:b7:a9:34:b1:fd:5b:08:02:91:0d:4f:e8:d2:
29:2b:c5:32:b6:94:78:f7:b7:ff:d1:56:ef:eb:15:1c:2d:64:
6c:fc:ab:00:14:53:10:05:44:e4:cc:ae:1f:1d:d9:5e:9c:54:
d9:79:72:93:ed:91:d0:c7:fb:32:43:c0:e0:e5:64:72:57:34:
e6:f8:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:08 2025 by rpki-client on console.sobornost.net