Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
File: lJQumzXZGQbREkXXO9WM3Y7KSdE.cer (raw, json)
Hash identifier: mAgqRaQjd1D9yi5Y286GBUkE1kWZ8vOP0Q841C1euWY=
Subject key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369BAEF7898B04D739FC6191E7178AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47469
IP: 194.50.45.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ba:ef:78:98:b0:4d:73:9f:c6:19:1e:71:78:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:c3:0b:24:88:d2:bd:01:0b:e0:81:4b:21:
07:ec:5c:07:be:76:5b:5b:7a:5f:6e:35:90:d0:3a:
65:09:40:17:5a:0c:1c:d9:72:a3:99:a0:f6:74:f4:
60:e5:f7:d3:f5:6d:21:3e:ba:ab:51:17:73:e4:ec:
6c:d9:78:59:9f:b2:79:fd:83:76:a8:74:8f:2c:a4:
d8:7d:cc:b4:aa:2f:57:5d:92:52:04:b0:0b:c1:be:
5f:29:01:2c:f3:7f:8f:8a:7a:e2:19:b5:3d:89:f5:
f1:72:00:5d:19:26:9e:34:a8:7d:f9:98:76:a6:a8:
75:79:15:38:7d:59:7c:b4:88:48:28:e5:e7:2d:ba:
a9:80:82:71:db:88:33:54:52:f3:3c:b4:00:12:3f:
d3:6f:65:d6:1d:ff:bf:85:8b:ce:9c:b1:35:a4:9a:
b9:1a:34:6f:cf:fd:2b:ce:49:03:8a:aa:78:af:e5:
97:24:f3:90:b3:43:8a:06:2e:1e:71:06:06:ab:1b:
7f:8a:f3:42:63:8a:da:77:62:b6:6c:9f:c2:24:f3:
c2:16:11:51:92:5e:b9:46:de:0a:5d:49:61:6c:e4:
fc:d7:29:0d:6c:47:a5:fd:32:39:e6:0d:58:99:f1:
b0:77:2d:ae:82:f5:4c:02:65:b3:b5:17:b6:d6:c7:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.45.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47469
Signature Algorithm: sha256WithRSAEncryption
8c:ea:94:f8:a5:32:9d:81:79:e6:0c:bb:0b:e2:a4:0d:1c:72:
8f:4c:76:93:ce:e1:10:7f:04:0d:3f:88:90:e8:0d:16:37:fb:
1c:6b:7f:5e:78:94:98:09:5a:6a:ad:97:95:52:64:b9:9a:c0:
ef:c6:86:3d:38:0f:4c:54:2d:a1:91:c1:8a:0f:2d:f7:53:47:
8e:10:7c:4d:d6:f8:f7:87:0d:98:7a:ac:19:56:fc:5a:c2:ab:
45:69:2c:86:80:e0:ac:ae:08:3d:7f:88:4e:96:69:a3:40:51:
6b:87:f2:58:c8:c0:ea:b7:c6:fb:84:42:d8:70:4d:3a:1b:39:
2e:76:4c:7d:81:4e:87:6c:b0:cf:19:11:25:e0:9c:8c:e9:24:
3d:6d:47:26:48:8e:72:ae:88:b2:98:15:57:36:3c:bb:ec:01:
c6:9f:ee:b6:d3:ae:62:ab:c1:1d:82:81:7c:ed:17:d8:a0:49:
f0:39:e2:c7:5a:a9:0a:37:95:4e:54:39:fc:27:d3:6e:28:1e:
8d:9a:ba:38:8c:c2:1a:78:d4:1c:e0:9d:65:4b:0e:db:42:75:
85:dd:30:44:17:b9:a0:d9:82:aa:c4:a4:cc:5f:d0:c4:fb:27:
71:f5:9f:29:aa:40:38:67:ba:95:d3:5d:28:0b:68:17:a7:c9:
6c:30:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:24 2025 by rpki-client on console.sobornost.net