Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer (raw, json)
Hash identifier: i7nswimdE2/wicLSnMPNeoEG82HqavAB5D31LX1uIv0=
Subject key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068730C7FC9FF80E8873CC117A4A5C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44462
IP: 81.21.112.0/20
IP: 185.178.0.0/22
IP: 2a0a:4d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:0c:7f:c9:ff:80:e8:87:3c:c1:17:a4:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:eb:3d:79:67:c5:b7:2a:41:22:3a:d4:05:
70:02:60:b1:ff:3a:7e:4d:03:62:9f:11:e4:f8:61:
96:cf:a2:b7:86:5f:e8:35:93:d8:ef:12:43:a0:44:
3b:01:cc:54:13:5a:c6:98:76:5f:79:73:bf:b8:0a:
98:a5:9b:50:ef:4a:d6:05:f4:4e:84:5b:65:90:ca:
d5:5e:20:e9:cb:c4:1b:74:b3:dc:6c:88:58:c8:a0:
d2:34:5d:c8:3f:41:88:7d:a5:fc:aa:9b:3d:f0:18:
3f:45:ad:42:6c:2b:c5:73:38:c1:f8:c2:f0:38:f1:
ab:b5:45:e7:75:fe:50:3a:8c:f7:90:65:41:98:f1:
45:2c:7e:36:32:26:95:5d:65:88:b2:35:ae:72:74:
cf:88:40:2a:10:8e:c3:59:2a:9a:61:45:56:0f:0e:
01:86:84:fa:c6:d6:9b:5c:54:ba:a7:fb:9e:45:43:
58:ad:2d:e8:c4:67:8f:4f:39:0e:ff:03:7a:23:4b:
21:7e:22:a1:d5:35:da:cc:2f:98:6d:74:7e:e7:ae:
9a:b9:36:d1:1e:49:17:56:14:24:1d:e6:ae:cd:6b:
c6:95:b7:d7:24:5d:db:57:2a:d6:75:c3:71:41:cb:
73:14:29:93:12:5e:f7:9f:a9:be:1f:15:3c:f4:8b:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.112.0/20
185.178.0.0/22
IPv6:
2a0a:4d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44462
Signature Algorithm: sha256WithRSAEncryption
9c:f9:a2:29:ae:dd:01:c6:b7:0f:78:96:0f:54:ce:30:47:60:
c0:dc:1c:b3:a3:5c:22:d4:3e:9e:96:1a:50:3f:bb:e9:bf:9b:
17:67:2a:b9:f0:cc:90:55:93:cb:5d:7a:9f:98:01:cd:5d:a0:
2e:bb:48:94:65:ab:9b:25:95:e7:58:46:4d:61:8c:ab:f2:88:
ce:49:a6:2d:8d:46:79:49:d5:cf:bd:39:0c:72:01:25:e6:b4:
aa:49:97:15:bb:f9:7e:39:b1:89:50:58:69:86:95:d2:79:53:
30:31:dc:a5:29:e9:e3:90:88:17:93:00:8f:a8:71:9e:2a:08:
72:be:62:ad:90:26:f4:d7:3c:78:62:e3:6d:f0:14:04:7f:54:
e4:1e:5a:db:23:ca:ff:2c:80:fa:6c:51:ca:b6:21:97:54:7e:
3c:30:24:60:06:51:7e:1a:c0:57:ed:d1:25:cb:9e:5e:8f:24:
21:b9:cc:87:77:e7:d2:26:df:b7:f8:e9:ae:7f:b9:23:19:0e:
43:e6:4b:c3:c4:41:4e:f6:d4:88:e7:b1:4c:ca:b7:78:c1:f5:
d9:5b:0e:2c:ac:70:8f:29:03:d4:23:e4:b0:3a:9b:40:ee:c0:
9a:cd:84:11:bb:ec:86:13:f1:2d:ef:53:a4:10:c3:09:e5:47:
bc:98:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:49 2025 by rpki-client on console.sobornost.net