Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
File: XWU9B97R6Nf08uoEvTaELFsS8V4.cer (raw, json)
Hash identifier: 29/jT47k73g4M7DdfMft1jTS9BMtlYojYtDP+Y/HREE=
Subject key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5BD6B621F909F46ADA37386DC541F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50507
IP: 193.106.180.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bd:6b:62:1f:90:9f:46:ad:a3:73:86:dc:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:fe:eb:01:dd:8c:7f:b3:6c:1a:a5:e6:84:
a4:b2:fa:f6:fd:4d:02:34:4e:7c:d6:0a:e2:05:ca:
dc:af:7b:6a:7c:68:ab:4b:31:cf:55:d8:aa:0e:93:
16:e1:71:b5:57:3d:ee:a0:5e:e5:5b:ac:88:fd:d9:
f0:4c:3c:15:90:60:0d:f8:2a:27:cd:57:8d:37:b2:
b2:4d:7c:15:4b:88:a6:65:7c:17:40:19:53:e3:04:
24:5e:11:0e:6b:66:f0:6d:9b:3e:e4:6b:7c:d3:df:
b3:cd:27:1c:bf:c2:ee:e7:23:d1:ff:a5:cc:57:3a:
d2:bb:74:64:c9:b5:84:38:d8:e6:9f:d1:4f:21:81:
25:37:6d:2e:82:e1:74:ed:ba:4b:02:d7:56:b1:d1:
21:ab:f2:68:10:11:3c:79:21:6d:92:33:bb:40:9e:
98:ae:c4:d9:56:da:92:f1:68:52:fe:65:c4:ab:8c:
48:2b:96:43:44:6d:09:8c:5e:66:e6:fe:a1:5b:35:
38:2c:74:6b:4b:05:05:0a:c8:7d:9c:23:57:d5:79:
26:cb:dd:4a:1c:4f:62:37:9b:4e:6f:3a:5b:69:ae:
73:3d:08:8e:de:79:70:97:47:23:ef:51:98:43:e1:
15:0f:a0:ae:6e:6c:7f:39:be:e2:db:f5:6a:8f:f1:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.180.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50507
Signature Algorithm: sha256WithRSAEncryption
71:10:74:ab:45:3e:5a:2e:4c:f7:a4:70:10:d3:35:ec:99:31:
50:f4:b3:53:da:d6:76:29:e6:68:59:cd:58:80:6c:cb:4d:f4:
cc:97:5f:cd:00:43:5e:d0:b4:2e:50:41:03:13:00:20:0d:44:
dd:3b:0f:b4:a4:58:6b:d1:b3:3e:5f:d9:df:a4:9c:35:1b:5a:
e2:9f:99:67:76:0f:f3:94:fa:55:c7:a7:a5:b7:a2:dc:d9:92:
25:1d:8d:60:2b:5b:21:aa:04:9b:59:ac:72:e7:c9:00:53:46:
0b:1c:eb:a2:97:1c:24:a1:c2:fc:3f:eb:7b:11:9d:8e:c7:31:
6e:42:5c:da:04:c2:31:43:b6:62:a9:b1:86:44:af:e4:5f:2b:
01:8c:c5:e4:95:a4:26:e3:8b:ac:bd:f6:f4:de:bf:6a:56:73:
97:8f:56:59:71:79:51:90:33:30:22:10:2b:ad:3c:07:71:ca:
27:ef:44:77:d1:b6:e8:03:d7:48:93:97:78:31:1a:b6:64:3a:
6b:33:a2:a1:cd:40:e7:b4:c8:bb:87:3f:e5:ac:13:e8:20:c7:
6d:6a:ad:2a:55:1f:4c:1e:3e:5d:15:1c:4d:e8:33:4c:40:69:
c5:11:58:69:29:21:e6:5f:4b:9a:b1:b3:7b:9a:19:75:90:ae:
75:44:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:11 2025 by rpki-client on console.sobornost.net