Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.cer (raw, json)
Hash identifier: t04IEysbGshwEN5RmIIPArg5/ZvkALW+I2Nqng5VI3o=
Subject key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195EB7C6B82AFA5A1EDD5E8C02BDFED233E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Mar 2025 09:15:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42318
IP: 2.57.244.0/22
IP: 83.223.0.0/19
IP: 2a05:5580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:7c:6b:82:af:a5:a1:ed:d5:e8:c0:2b:df:ed:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 09:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:a2:a3:85:e0:89:0d:f3:52:4c:e8:5e:1f:
2d:30:51:50:c6:eb:65:1e:35:27:32:5d:01:74:b4:
2d:c3:4d:01:bc:f8:07:5d:1e:56:1c:b8:c2:97:3b:
48:85:5c:32:1d:c0:cd:45:9a:52:0a:c5:8c:e2:55:
b8:47:54:1b:86:39:fd:ac:7b:08:b4:bf:52:61:24:
aa:2a:bc:1e:84:08:5c:d3:a6:c5:7c:7b:47:85:02:
3a:36:36:91:b4:1b:f3:73:f8:5e:1d:ce:cf:25:3b:
53:0e:ca:d9:f4:16:69:eb:97:ae:f5:0f:97:05:2a:
3a:92:96:e1:38:f2:e9:7a:4e:39:38:62:9c:ea:85:
5c:ad:8a:5f:45:56:06:20:16:d9:1f:78:f9:43:c8:
82:b2:8a:28:4a:e3:d6:d0:da:19:ec:25:16:11:cc:
1f:a9:b3:8e:bf:ac:41:eb:61:4d:09:5b:89:8b:fb:
c4:cc:25:ec:01:3d:a9:be:e7:29:94:b1:f1:c2:13:
64:03:0f:39:53:c7:a4:c4:c1:06:24:75:7a:6b:c1:
2d:14:ce:90:8f:74:70:b4:63:55:b3:b3:1d:0d:db:
05:60:a0:ff:7b:1b:ce:97:10:28:f9:0a:75:61:90:
f7:fa:a7:7d:4b:60:7c:36:3e:db:a8:e8:9b:7b:f3:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.244.0/22
83.223.0.0/19
IPv6:
2a05:5580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42318
Signature Algorithm: sha256WithRSAEncryption
33:da:ed:09:d7:3a:e1:2e:fd:e3:d9:74:46:2a:8f:0c:af:d9:
4d:0b:8e:94:fa:70:6d:84:4e:69:8d:5e:4c:1c:17:3a:86:8f:
77:96:c4:9e:f0:57:8f:28:e5:a4:36:e4:e0:1f:fb:f1:27:b4:
51:e6:d4:56:52:5c:19:e6:09:c6:73:7a:3e:4e:fb:57:e5:e9:
ba:f0:9f:f9:b5:37:b1:60:17:04:81:8a:eb:37:5c:c6:69:a7:
ab:33:af:ca:a0:4f:30:c1:ad:a9:c3:78:6a:3c:c7:29:b0:b2:
79:a1:87:6c:c7:a2:24:53:11:3c:66:a6:d3:35:b5:ca:5c:9b:
7c:f3:6f:0b:f5:ce:02:8c:b9:60:88:cd:cd:53:9d:dc:30:9d:
82:51:48:82:7c:e9:dc:8b:cb:57:58:17:e4:1b:86:7d:2e:25:
ec:62:9d:36:3e:8b:9d:ec:12:8b:93:eb:b6:5c:cd:09:35:e4:
07:66:07:ac:05:bb:19:c1:10:8e:eb:02:f9:aa:23:72:b7:9f:
c4:37:36:34:26:3c:39:32:b7:87:c9:d4:5c:a8:93:3c:67:82:
95:57:c5:40:51:a4:62:ae:b3:4a:c6:fd:a7:23:c6:ea:35:90:
5e:3e:40:b1:bf:30:4a:b7:72:6b:84:78:f2:d6:57:01:3d:b3:
74:c8:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net