Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
File: cQ7F-mjPme49u9GUnoIERQOh33I.cer (raw, json)
Hash identifier: tpuvhEWOuu9eA5jZ670QuJEgIFpowERy5entWI30WhE=
Subject key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2D1CB41AD366F66B22B65025FD6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.209.33.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2d:1c:b4:1a:d3:66:f6:6b:22:b6:50:25:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:14:51:5d:6c:25:51:5a:7e:e7:65:c8:78:
34:d6:d3:65:19:5c:a8:3e:26:e7:4e:75:e4:ba:d3:
83:f1:35:fb:5b:76:58:c5:02:89:6f:33:15:25:db:
0d:50:1f:d5:a6:ee:c3:3d:66:cc:89:db:f0:e1:17:
eb:19:f6:b6:60:56:e0:be:d4:24:e3:51:ea:a5:c5:
92:bd:cb:c9:3c:f6:57:ab:7c:c7:5d:22:58:5d:82:
5e:b0:21:9d:69:18:a5:0d:ab:9b:07:05:3a:7f:28:
c6:4f:1e:c7:ba:81:43:b6:d0:38:6d:bf:06:e0:d7:
18:a5:bb:b0:72:31:bb:3f:49:33:b2:e6:60:68:06:
85:fe:e5:0a:76:4a:b4:87:34:dd:7a:df:3b:79:b6:
69:13:97:88:ee:b8:76:9f:a7:a1:28:be:4c:2f:4b:
11:fc:bc:f3:80:34:16:8f:8f:3f:e6:b9:22:fd:8a:
99:31:8c:ef:bb:44:63:8d:f6:8d:57:44:a8:0a:8f:
bc:3a:ad:25:30:df:2f:0b:96:a6:4d:06:b9:24:53:
2d:d3:69:b4:d7:6d:b9:ae:e1:5d:a6:80:59:5d:b2:
d5:9f:dc:c2:06:30:61:77:79:a0:37:48:c3:1c:d5:
8e:a4:7f:14:d5:42:d4:6c:5d:a9:c4:33:b7:76:d1:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.33.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f6:04:40:b4:07:13:62:20:aa:ea:89:e7:56:3a:8f:6f:13:
c6:2c:ee:bc:2f:aa:e6:03:9d:ad:89:71:f5:3d:26:6a:a0:b4:
d3:36:9b:9e:c5:d9:c6:48:4b:f7:52:ab:10:8d:e3:52:b2:72:
dc:f0:81:d2:b2:00:f9:d0:a9:1d:b2:aa:33:9f:4e:e2:5d:88:
21:0c:60:24:7d:53:c6:d1:7e:60:4e:1c:ee:a2:17:0d:1f:8b:
70:d7:06:4f:1a:69:52:20:99:58:9e:58:ce:74:ed:01:29:bd:
52:f6:a8:70:ed:35:0f:7f:0f:80:77:fa:a4:b7:d5:ae:33:e9:
59:2e:77:db:62:cc:50:34:de:3b:ba:ff:d1:38:a8:f9:80:59:
f5:1c:8a:34:34:04:b6:e9:72:e4:24:db:70:1e:40:63:14:07:
92:31:b8:68:28:ef:d5:98:a4:61:c6:2e:d2:4c:60:a2:e8:83:
a9:a7:e0:39:a2:cf:01:81:4c:84:e8:e3:3d:48:82:09:64:6d:
b0:2f:03:79:92:6b:4b:09:94:2b:55:52:9c:20:99:9b:3e:9f:
9e:25:0c:0b:38:86:7c:bd:30:a1:00:87:1e:1c:cd:50:b6:8d:
11:3f:71:80:a3:b7:e4:37:46:85:88:fd:15:fa:b2:16:d1:7d:
dc:dd:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:03 2025 by rpki-client on console.sobornost.net