Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.cer (raw, json)
Hash identifier: pXV/QUIHaPfMvRada8IUdXSsvbP3XjQzskqiK7vSYFk=
Subject key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425212297233B08229AA35CBB89662057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50719
AS: 60587
IP: 5.206.200.0/21
IP: 45.82.168.0/22
IP: 46.151.200.0/21
IP: 91.222.92.0/22
IP: 91.227.230.0/23
IP: 91.227.236.0/22
IP: 180.149.40.0/22
IP: 185.29.88.0/22
IP: 193.105.214.0/24
IP: 195.191.252.0/23
IP: 2001:67c:17c::/48
IP: 2001:7f8:71::/48
IP: 2a00:a6a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:22:97:23:3b:08:22:9a:a3:5c:bb:89:66:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:88:5f:64:ef:c7:3d:92:02:75:cf:50:94:
13:7d:eb:05:16:54:5f:44:f9:bc:b3:9b:f1:78:4d:
33:38:cd:79:ac:3d:26:df:81:3c:f2:d4:c2:9a:65:
95:01:94:58:1a:ea:bb:09:23:fa:34:33:71:f8:3e:
ba:21:6c:f8:ad:9f:d6:24:fb:7f:54:9b:65:65:e5:
9c:b7:d7:90:fb:da:a1:43:3e:97:ac:72:9f:93:99:
2b:be:a3:63:8e:1f:5e:da:8c:0a:ab:d4:b0:c0:80:
aa:2a:5a:37:44:4d:bb:91:ca:1f:44:e6:2b:80:3a:
88:85:3d:35:12:8f:3a:68:1a:34:35:3c:30:ad:0e:
7a:67:f8:4c:d2:06:62:2b:d6:18:0b:b2:47:20:62:
09:10:aa:cb:c9:d6:90:7a:4f:7e:36:1f:e9:29:96:
6d:31:4d:9e:4f:f1:8c:af:9b:9a:df:93:9e:b5:e6:
76:97:00:62:ab:ad:b2:30:59:ea:dd:a5:10:6f:aa:
00:8e:d7:2d:6a:7e:f7:d5:d1:ac:98:e1:4f:b1:b9:
c9:23:28:f5:c2:48:53:26:cd:b5:1a:4c:82:6d:1f:
c3:4b:d6:39:be:f3:81:ae:dc:ae:2d:51:1d:42:16:
aa:c4:98:62:96:85:fa:9a:0f:90:d3:4a:29:b2:1c:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.200.0/21
45.82.168.0/22
46.151.200.0/21
91.222.92.0/22
91.227.230.0/23
91.227.236.0/22
180.149.40.0/22
185.29.88.0/22
193.105.214.0/24
195.191.252.0/23
IPv6:
2001:67c:17c::/48
2001:7f8:71::/48
2a00:a6a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50719
60587
Signature Algorithm: sha256WithRSAEncryption
56:50:bb:ef:42:0d:37:01:fa:44:24:a5:0e:a8:e4:7d:23:cc:
e2:1f:21:60:17:00:f4:54:c9:66:05:01:2a:60:1f:33:60:be:
05:39:40:c0:2e:a9:6b:f9:4b:8d:b4:09:9a:3b:e7:65:5c:48:
62:31:0c:0a:05:0a:f0:22:00:3e:ab:2d:62:68:63:a4:76:14:
9a:2d:41:06:5b:f0:f5:15:61:a3:21:cc:30:d6:b3:43:87:b7:
17:c7:e9:f4:95:fc:94:f3:b4:bf:f7:28:34:24:f9:36:57:6e:
82:e2:fc:1f:52:76:12:30:a1:b1:13:10:bd:bd:2a:7e:3f:b1:
2f:4d:22:56:05:25:bc:f0:a1:13:d9:9f:ed:e1:df:55:f1:a7:
b7:e2:30:50:dd:30:ce:24:15:ac:c2:c0:95:8b:82:fe:03:ac:
f8:3a:00:f8:f9:06:e8:5f:7a:91:d6:96:e0:6f:9d:cb:c5:49:
80:88:26:da:62:6c:1b:f4:a7:75:42:22:c8:88:49:fc:b6:cc:
85:a1:2f:cc:f2:a8:f2:04:9d:ce:c4:1a:c1:0b:ff:88:69:31:
c6:6d:f5:c7:af:da:3e:55:04:60:fd:18:67:72:ae:21:66:ab:
35:b2:58:4f:d7:4b:ff:2d:11:66:46:cb:b8:5f:2f:30:0a:3a:
35:34:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net