Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer (raw, json)
Hash identifier: vCoBNM+tbB7q/NkQUxE98bs4OZfyaHn+PYr3lI6MkAk=
Subject key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDBE3FE9D8EC7161DFB600C84E8023
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207589
IP: 89.40.210.0/24
IP: 91.205.43.0/24
IP: 185.109.254.0/24
IP: 2a06:c900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:be:3f:e9:d8:ec:71:61:df:b6:00:c8:4e:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:37:34:23:c9:88:5e:ac:87:36:c2:a2:46:
fe:d6:b3:13:29:ce:f9:7b:b2:56:82:7c:43:a6:a7:
e8:2e:7b:2f:ac:91:44:65:91:48:be:9d:83:d7:4f:
6e:a7:49:e0:1c:f7:6a:1f:3a:8d:d4:54:83:52:4d:
3a:12:cb:2d:a3:64:1b:ef:51:a0:03:9b:73:c9:bf:
73:3b:65:f3:28:d1:d3:ec:c7:7a:e5:da:b1:7a:43:
c1:70:7b:07:c7:80:11:09:c1:7b:d2:66:0c:b1:53:
32:ef:d4:01:28:30:e6:e9:81:92:83:cc:89:78:4a:
9a:1e:7d:30:d2:76:77:95:b7:e5:d5:57:45:02:c2:
06:76:03:98:86:99:df:75:1a:ea:f9:3d:34:72:0b:
17:59:35:80:5c:69:d0:ba:3e:cf:61:41:da:6f:97:
f0:ae:f6:b6:de:25:be:a7:c8:e3:15:40:2d:52:a7:
c5:8c:e9:4f:13:39:3f:75:f2:a5:81:48:f7:c5:ce:
3f:f7:8e:62:a1:39:6e:a2:3d:b7:52:a6:99:4a:4e:
f1:06:20:3b:00:67:48:c6:30:ac:9d:9f:34:c5:6e:
f4:0d:3d:9a:ca:bb:3a:1d:b4:37:90:8e:40:ee:73:
87:aa:dd:0b:1e:f7:85:d5:2b:2f:1c:2c:a4:86:e4:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.210.0/24
91.205.43.0/24
185.109.254.0/24
IPv6:
2a06:c900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207589
Signature Algorithm: sha256WithRSAEncryption
37:5c:b8:6e:cf:84:c2:3f:00:23:70:2f:59:a4:83:fd:7e:84:
b6:f1:d8:c0:98:16:43:ae:be:fa:3a:34:7c:06:8d:77:6c:1b:
61:b7:c5:b4:96:97:74:ba:5f:75:75:b9:4f:b7:6e:b6:33:20:
d4:6a:36:95:a5:b1:0f:1b:73:39:ab:e6:ae:7a:a5:c5:fa:c0:
a0:08:36:dc:9a:bc:82:35:96:f1:d0:03:4c:d9:48:90:0d:4b:
ce:c6:70:b4:f7:85:51:a3:6f:92:33:ab:dc:a6:85:24:2e:f7:
37:91:b4:62:44:45:38:6c:7e:71:53:99:f1:24:c2:be:ad:15:
63:77:56:5a:84:dd:8e:a7:c5:a5:65:f3:d3:0c:4c:15:36:a7:
ab:16:80:b7:dc:03:98:a6:7d:87:bd:02:1c:e4:24:36:ab:99:
d4:6e:d7:bb:ae:20:89:24:e4:85:80:55:b7:0c:2d:e5:8e:3b:
9a:62:f4:af:6f:20:92:2c:06:4a:db:72:82:57:b5:cf:70:92:
a5:c4:b7:64:03:ae:84:aa:8f:e7:44:54:8b:61:a1:28:1a:de:
16:e1:cd:ae:a6:db:10:10:2e:8e:74:e8:5b:fc:b4:b4:eb:38:
2e:cd:84:35:59:fd:4c:53:1c:1e:96:81:f0:42:d5:97:77:5d:
eb:b4:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:13 2025 by rpki-client on console.sobornost.net