Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer (raw, json)
Hash identifier: Nex9AtkDN92pwAvNBbHLHDyZimt2rkdaXI4xpHT2vmc=
Subject key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59E6A4A553BABE17D19DDC52B1E58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42894
IP: 131.237.0.0/16
IP: 144.43.0.0/16
IP: 145.12.0.0/16
IP: 145.31.0.0/16
IP: 145.45.0.0/16
IP: 145.50.0.0/16
IP: 145.69.0.0/16
IP: 194.104.116.0/22
IP: 2a13:e080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9e:6a:4a:55:3b:ab:e1:7d:19:dd:c5:2b:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:ff:9c:50:e0:92:7e:9c:79:e9:d0:29:bd:
a0:32:b0:01:1a:0e:38:7c:53:f1:74:ad:23:dd:9a:
9c:60:68:ba:bb:67:ca:2a:42:f5:89:1a:b5:f0:13:
ca:0d:2d:66:fb:72:4c:40:ac:fa:07:3d:2a:16:30:
04:a7:c5:01:d8:e6:10:1a:82:68:45:9e:62:f7:c5:
57:82:33:22:a6:8d:03:23:75:de:c9:6c:20:31:15:
6c:51:9c:b9:c6:d7:97:b3:c9:3c:99:a9:84:43:97:
8d:45:41:fa:7f:36:4a:2a:41:59:c9:7b:33:24:d4:
fe:6d:96:58:f5:f9:a6:e5:b3:1d:25:d7:84:16:6c:
9a:e7:ee:fa:0a:bf:e2:7c:6c:93:16:ff:0e:32:cf:
ed:31:ea:fb:07:fc:c2:f7:4f:ea:a2:78:1a:a8:12:
a9:1f:ff:e5:25:f9:28:84:99:65:1d:e4:7a:82:62:
16:3b:89:89:64:4b:72:0c:8e:49:dd:1f:b0:d4:82:
88:22:64:70:3e:20:45:df:46:f2:5e:f4:c1:6c:a0:
9d:9b:1a:c0:4e:b2:2c:fc:5a:09:0e:74:da:7e:88:
44:15:d3:1d:59:25:6f:f9:43:71:3b:40:b0:8c:ae:
0c:0e:cd:ee:22:88:f3:e9:5c:b0:e2:25:ac:00:04:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
144.43.0.0/16
145.12.0.0/16
145.31.0.0/16
145.45.0.0/16
145.50.0.0/16
145.69.0.0/16
194.104.116.0/22
IPv6:
2a13:e080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42894
Signature Algorithm: sha256WithRSAEncryption
71:a8:f5:00:76:b4:eb:7a:95:16:b2:cd:93:da:62:19:bb:d0:
66:ff:4d:95:c6:e9:6f:17:44:af:fa:fe:2e:26:17:cb:e9:95:
d8:9c:bb:9e:36:cd:a8:75:3b:42:ad:2a:bc:e5:1f:95:e5:fb:
0d:3d:1e:81:3b:10:52:2c:d8:47:bd:56:7d:47:d1:e4:85:b2:
0e:66:12:90:1d:b0:d2:63:87:24:f5:46:35:c9:1b:f1:af:68:
f1:9d:12:94:ca:de:09:17:37:4d:34:3d:32:85:36:c3:1c:42:
49:41:2b:1c:39:24:88:47:61:7d:fc:40:00:44:a0:54:48:36:
50:7c:80:9f:df:9f:fc:8d:d7:90:e6:45:ea:61:fd:af:01:af:
6f:b4:27:da:ff:5a:44:16:ca:89:58:32:8b:03:91:72:cb:e9:
3e:69:25:75:9e:f3:9b:d3:c7:8b:7a:b5:64:fa:ae:b7:87:72:
e7:80:6b:3d:04:7f:6d:5f:bb:89:4b:e8:49:98:76:e3:09:11:
c9:f1:db:df:22:34:67:1a:ff:97:a8:35:a8:88:ba:f9:af:0f:
a3:a7:20:8a:27:98:b1:95:70:37:25:35:73:a8:35:ca:63:9a:
41:2f:dc:0d:e3:1f:53:86:5d:b8:7f:75:11:76:73:97:bf:d4:
90:91:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net