Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
File: XX9jQBQHwcx5excDToE9IlT5dz4.cer (raw, json)
Hash identifier: T5EauThgm7MlL0f06Wc5rkCwCLISt/iCk+S+Ss2Y9cs=
Subject key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B22B696387DCF867851FB8205220D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59895
AS: 60897
IP: 185.65.204.0/22
IP: 194.26.222.0/24
IP: 2a05:300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:69:63:87:dc:f8:67:85:1f:b8:20:52:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:e0:39:0e:82:b2:8f:34:6a:f5:0f:ed:00:
3a:32:70:a0:99:2b:c8:0a:0f:02:a2:ec:4a:60:33:
4b:11:be:14:fc:1e:7f:b6:ef:e6:a6:8d:a6:13:77:
3d:f2:47:08:27:11:ca:f0:d8:0a:bd:10:b7:1b:aa:
23:e2:96:41:6b:42:28:4b:10:a6:da:d4:f3:bf:90:
4b:69:74:af:86:cf:e6:d8:90:b6:26:ac:f6:30:a5:
3b:41:2e:fd:7e:80:08:98:37:43:f6:ae:b0:55:06:
f6:61:c4:2a:d1:86:c5:8e:a0:c7:9b:2c:b5:22:48:
23:ad:8c:49:c6:2b:49:cd:55:c0:70:49:01:77:2c:
0e:ea:03:a4:6c:70:eb:db:09:6d:02:28:8d:69:56:
b8:9f:b2:80:bc:78:80:61:4b:2d:9d:1a:f0:6f:da:
f9:b1:0c:8a:dc:76:34:df:e4:4e:d7:d2:56:67:eb:
b8:c7:57:a4:74:08:17:dc:ec:b1:47:6d:04:01:11:
b6:6d:7d:f0:a4:3a:a1:6a:74:7e:b3:16:be:f1:69:
92:b4:2f:5c:0a:82:95:bd:1a:36:c1:d9:ef:d3:3e:
a3:7f:3e:3d:46:42:be:85:9b:1d:8a:d2:fb:d4:b6:
9b:ed:fd:76:7a:49:0c:f3:4a:96:9b:65:85:63:6a:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.204.0/22
194.26.222.0/24
IPv6:
2a05:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59895
60897
Signature Algorithm: sha256WithRSAEncryption
7d:53:c5:3c:dc:37:ed:2a:ad:92:b3:0d:ec:3a:6c:21:f5:97:
a3:ab:2c:1a:13:a4:88:a1:71:72:a4:82:7c:20:87:b1:b4:08:
11:92:32:1b:d3:bd:a7:4c:9f:c5:48:9d:27:8f:b4:03:1b:93:
e7:47:af:2f:97:a7:65:df:0b:44:4e:a1:2b:63:a1:5d:35:92:
76:ff:7f:9a:a6:31:e1:0d:6b:5c:00:77:53:02:7a:d1:c3:4b:
6a:cf:18:25:e4:87:6b:06:a9:6a:f7:c7:ab:73:e3:44:0a:15:
ab:12:f7:18:8c:af:ca:cd:cd:88:af:04:e5:bc:f3:9b:62:e0:
67:87:e8:7f:b6:89:71:9a:17:03:23:ca:ee:8e:06:83:d8:19:
58:74:ad:ca:17:36:99:92:0e:7c:e3:49:f9:de:2f:48:e7:20:
4b:43:60:ab:e1:39:f8:c5:04:d3:2d:16:42:95:bd:da:8e:55:
21:85:f6:03:f6:e1:4e:16:df:ba:81:2b:48:ae:a6:f1:03:4a:
2d:59:3d:85:d2:4e:fd:8d:df:3b:87:e8:c7:0a:8b:d9:20:47:
d0:15:b3:e5:49:23:33:96:69:f8:be:a1:f3:89:b7:8b:ae:b4:
f3:23:74:1f:de:2b:c8:f6:58:1a:0e:66:b1:a0:14:72:c7:4a:
cb:3c:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:11 2025 by rpki-client on console.sobornost.net