Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
File: aRWYIN1xgAT7FchbJweWy06EpOo.cer (raw, json)
Hash identifier: KtxAWx/4k8V3tMJk2hEruyn++cRfv4BT+JA14eWFBW8=
Subject key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01960FD95D52325A6BDD091381E099011003
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Apr 2025 10:43:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49366
IP: 188.144.0.0/15
IP: 195.149.76.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:d9:5d:52:32:5a:6b:dd:09:13:81:e0:99:01:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 10:43:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:b6:6c:a3:ae:5b:1f:e6:2d:90:37:26:9c:
f1:fc:23:47:10:b8:be:15:e0:3d:12:7e:03:1a:8d:
b7:e4:03:c3:93:74:eb:dc:59:a2:ba:f8:f5:ed:12:
b1:ca:b5:fa:cc:3e:b2:e8:94:3a:99:3c:ba:8d:bc:
2c:15:83:e2:4a:f5:57:89:19:84:9f:18:55:55:ac:
58:79:bc:1c:bd:0b:2c:b3:a4:6f:69:cf:bc:0c:e8:
39:1e:6a:37:b4:69:32:1c:cd:83:d4:b2:11:d2:d5:
fc:72:a8:77:de:76:c4:55:56:97:c0:8d:81:81:6d:
7b:c8:67:0f:3c:fc:c0:9b:bd:9b:50:c1:88:56:f5:
d4:19:cc:ed:4c:24:90:9f:2a:56:85:c1:5a:58:69:
dd:f8:21:15:07:55:f8:db:48:22:ac:b4:d6:c1:3d:
4f:aa:5a:ba:df:65:d5:bb:58:0d:9f:5e:d3:ea:30:
d8:12:04:20:55:8e:ef:9d:63:8c:fa:f5:43:82:c4:
02:a4:9a:96:ce:6f:ea:62:ab:de:1e:74:51:c1:36:
31:0d:98:59:ab:72:90:a7:c5:07:0c:95:76:dd:83:
ba:f5:0a:c9:16:d2:0f:51:74:b8:63:69:71:1e:88:
c8:71:b6:c9:ef:ef:25:2c:2e:70:96:53:83:8a:0c:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.144.0.0/15
195.149.76.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49366
Signature Algorithm: sha256WithRSAEncryption
71:f8:e6:60:36:e4:e6:cf:a9:15:62:80:bc:2d:17:3e:c9:6e:
f2:96:62:6a:8b:be:d0:93:da:9b:65:92:57:24:e4:f7:2e:9f:
a6:48:24:e0:7c:58:85:db:83:4c:0a:5c:28:1c:bd:e7:5f:e4:
1d:eb:fd:86:be:a6:10:a6:90:4b:bd:f8:01:9e:60:e9:ab:99:
e0:9a:44:8e:fa:eb:2d:ad:43:73:f3:a9:5f:f7:43:ac:15:35:
f9:99:2e:3d:87:a8:de:c1:32:77:bc:d7:58:1a:6d:38:c5:9d:
7f:28:dd:d9:42:6f:29:03:c9:0e:af:74:28:dc:75:b1:3b:8d:
55:70:d8:3b:f7:78:7e:65:c3:8a:b9:66:99:75:2b:e9:33:8a:
95:aa:fc:56:76:bc:2e:8b:6d:42:8c:16:8e:a8:43:3e:f0:64:
b9:f0:65:06:2c:a0:21:4b:04:89:da:a6:06:a6:5a:12:30:05:
bb:61:2e:d1:96:40:74:d1:a2:c9:4b:5f:cd:72:ca:0b:e0:58:
16:ab:6e:fe:2a:04:3b:cd:60:19:ec:27:e0:88:e9:dc:35:da:
9a:5b:42:55:1b:ca:8d:ab:f3:12:5f:f6:75:35:ac:3d:ab:93:
b6:bc:13:39:96:91:0f:91:87:4b:75:ab:61:dc:28:2f:70:72:
e4:de:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:30 2025 by rpki-client on console.sobornost.net