Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
File: a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer (raw, json)
Hash identifier: vbk8xV5ky3dnQFy0mfnaIdTnbbRtsRSDJv5smbmS4pk=
Subject key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282541F30CFE6962BAA5C763552FDA4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201453
AS: 204175
AS: 212988
AS: 213399
IP: 185.74.192.0/24
IP: 185.112.76.0 -- 185.112.78.255
IP: 185.163.166.0/23
IP: 185.178.80.0/22
IP: 185.183.16.0 -- 185.183.18.255
IP: 185.192.183.0/24
IP: 185.194.24.0/24
IP: 185.194.26.0/23
IP: 185.219.216.0/22
IP: 185.221.188.0/23
IP: 185.224.92.0/24
IP: 185.225.148.0/24
IP: 2a05:4ac0::/32
IP: 2a06:6380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:41:f3:0c:fe:69:62:ba:a5:c7:63:55:2f:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:8d:14:cb:b1:df:88:6b:26:28:53:7f:85:
3a:d3:9b:d1:14:aa:b4:01:0d:93:64:f9:3a:8d:5f:
2f:37:f1:06:16:53:17:2f:d9:e5:f6:06:44:1c:96:
30:dd:0d:97:a8:d6:ee:84:5d:67:2e:e5:13:6b:24:
27:f6:3e:e4:da:99:80:fb:32:c6:69:00:ae:07:4d:
4c:af:80:7f:4a:f3:f0:8f:23:1e:84:1a:c3:aa:57:
00:2a:65:12:1d:17:39:4a:24:05:3a:ac:cb:25:1f:
a6:f9:34:12:35:d1:2e:c7:e3:3b:5c:7f:a5:97:4a:
12:ce:fa:a7:ed:03:7f:3e:1c:19:0c:8e:e8:46:e2:
e7:80:62:1b:e4:63:d4:12:8f:0c:74:7c:86:f1:15:
54:d8:2c:b9:f1:d7:1a:8e:a2:f1:7f:2f:f4:0b:81:
f9:c1:22:51:42:5b:02:6b:51:9b:2f:a1:71:f5:4c:
da:83:52:91:c8:b7:e2:29:40:ce:72:c7:bd:64:83:
bd:7f:f9:5d:ab:a6:a4:90:c0:87:a1:2d:f6:71:c2:
9c:9d:13:5d:94:0e:4f:ce:e8:db:94:57:21:25:1c:
25:34:54:b5:f8:19:a5:11:cd:05:6f:d8:f8:e9:6b:
fc:e2:34:2c:c7:8f:86:27:a4:02:c8:e3:dd:02:f9:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/24
185.112.76.0-185.112.78.255
185.163.166.0/23
185.178.80.0/22
185.183.16.0-185.183.18.255
185.192.183.0/24
185.194.24.0/24
185.194.26.0/23
185.219.216.0/22
185.221.188.0/23
185.224.92.0/24
185.225.148.0/24
IPv6:
2a05:4ac0::/32
2a06:6380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201453
204175
212988
213399
Signature Algorithm: sha256WithRSAEncryption
08:cd:46:1b:07:b9:b7:8c:2f:8b:f9:7d:a5:6e:70:82:d0:16:
4e:1d:f8:8d:79:c7:0a:5a:6b:b0:07:23:cc:97:93:f7:39:72:
b4:2a:6c:fe:82:5d:d0:e8:dd:15:c7:88:a1:1f:9b:85:52:93:
bd:d8:66:5c:08:b2:44:58:16:6e:ac:56:21:91:9d:f0:da:71:
fb:c4:2e:da:f4:9b:f5:e7:37:4a:25:a8:7c:35:ff:76:1c:cb:
de:2d:a4:46:57:23:9b:a8:c1:8f:7b:84:77:71:90:d9:2e:96:
2b:3d:b9:bb:fd:86:ce:5e:32:10:e5:ff:47:64:88:35:e9:f2:
c9:91:53:a5:5d:de:48:e3:21:4e:3d:d3:18:a2:09:60:ca:ef:
f5:d5:16:5f:65:e0:ac:a8:e6:5d:cf:82:af:33:51:da:1e:56:
5e:29:85:8c:b2:a0:70:00:40:f2:8b:86:ba:6b:8c:12:ce:de:
27:7d:88:23:11:8c:9f:22:60:d3:15:93:f4:c7:f0:67:f0:8d:
22:34:60:72:e1:94:66:c2:1e:49:36:d4:8a:a9:1a:bb:ce:4a:
6e:82:c9:c0:a1:b3:cd:b8:88:31:32:fb:71:6b:cf:ff:b6:f0:
2d:28:86:dd:11:da:22:ee:41:49:8c:c7:73:ed:fe:ee:be:3d:
ed:6e:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net