Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
File: bZ_0pTo9sPQyggzXN9VD-Gepctg.cer (raw, json)
Hash identifier: o7lbznybq6mTuWF44Ys5Hune1PvBUCcFpHEj6sYUSTg=
Subject key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D914F585333D79A6F1271EF9E1ED4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41902
IP: 46.17.128.0/21
IP: 194.36.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:91:4f:58:53:33:d7:9a:6f:12:71:ef:9e:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:37:4a:24:62:62:32:d4:f3:38:28:43:dd:
f8:c4:ba:ac:3f:5b:2d:81:33:e8:f3:a1:e4:34:99:
68:90:93:2f:1c:8f:6a:c4:c9:2e:16:7e:02:51:d1:
80:36:c6:0d:2e:31:5f:4c:44:63:9d:f6:4a:09:24:
4d:75:89:81:7f:cc:e2:7d:9e:19:66:49:9e:7e:6b:
fb:9f:38:79:cf:c3:d6:bd:69:09:ca:02:2c:a9:4d:
e1:32:62:a7:cf:d6:1b:70:bb:2c:3b:d6:78:ba:48:
e9:76:79:66:6f:11:60:ca:70:93:e5:1e:87:b2:32:
77:77:67:88:60:34:c5:00:d3:8a:c0:2c:8b:db:01:
c4:70:e2:c8:51:43:d8:b3:eb:06:04:68:7e:1e:06:
d7:59:aa:62:eb:dd:a5:a3:2a:eb:6e:6f:a2:ae:24:
14:48:d2:7b:8d:24:17:17:de:04:11:76:04:75:00:
40:e2:e5:94:95:65:f7:88:a6:b4:ce:9d:88:a5:43:
d8:fb:81:94:9d:e2:0f:66:1f:16:7e:a6:e5:2b:f7:
8c:e2:84:68:da:4b:3a:a6:5e:91:4f:81:c4:9c:90:
12:a7:c2:7c:dc:05:f0:b8:dc:ab:62:7e:80:6a:73:
70:07:e4:57:31:39:92:43:5d:7e:2a:c7:17:e2:48:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.128.0/21
194.36.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41902
Signature Algorithm: sha256WithRSAEncryption
35:d1:7b:ce:09:38:ea:3d:c7:12:97:91:7d:b0:eb:3a:1c:2e:
af:68:a3:d3:d1:d2:78:a0:c8:fc:3f:3b:89:c7:2a:19:44:a2:
8a:00:12:76:1f:03:1a:da:44:81:24:75:62:2a:a4:28:90:58:
54:06:72:a2:0a:a5:bd:e2:92:e0:31:23:fa:aa:ee:cf:ba:4d:
a1:68:c7:c7:49:4b:a3:02:23:13:41:05:96:07:34:bb:dc:2a:
f4:6d:05:13:4c:42:55:77:ee:a4:f2:44:59:e9:c1:99:dc:32:
85:ae:b1:ea:01:ee:bb:fc:1c:f8:2d:66:97:c5:8e:e2:e5:e9:
8b:ef:68:80:63:48:3a:2d:29:b7:22:bf:4c:3a:46:bf:b5:63:
f3:9f:48:77:9f:86:18:3a:4f:bd:30:b5:c3:f0:a5:b3:f3:1d:
dd:1e:52:33:6c:ae:ca:e4:0e:a3:6a:96:8e:9f:f1:ec:e1:55:
5b:9b:86:24:17:86:41:4f:87:c8:c3:2e:81:c2:2c:c1:96:88:
7c:fc:1a:3f:61:ad:56:72:c9:d6:a9:ce:3c:7f:63:68:58:74:
eb:cc:83:d3:c4:ba:66:7a:fe:c4:9e:5d:49:81:12:9e:cc:85:
62:b3:15:9a:65:ac:05:29:96:b8:56:f8:55:56:0b:a3:07:a7:
43:5b:1e:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net