Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.cer (raw, json)
Hash identifier: oR6GiduCxay0RwYDowLMldugstpOoa4IpQaBR7J8HlY=
Subject key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1E35E758BFEF55B831BDEFFFA190
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41970
IP: 194.60.74.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:35:e7:58:bf:ef:55:b8:31:bd:ef:ff:a1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:24:3e:16:63:c1:0a:fb:bb:67:49:07:d3:
76:92:fb:92:ce:fb:c1:0d:dc:36:71:54:48:93:f4:
9a:a5:45:b4:63:05:1f:a7:d2:df:1a:41:d8:56:8e:
18:b9:03:17:41:66:91:fa:3a:8d:55:49:40:61:13:
c9:08:a2:15:f0:a8:ea:08:47:67:5c:cc:46:11:88:
0c:84:db:19:0b:2f:2b:e5:33:97:e1:9a:8c:f5:4a:
2e:28:ab:23:5f:46:be:18:4d:a0:f9:ed:c8:ec:b4:
dd:ed:62:36:a6:6e:ca:ea:ca:fe:6f:08:be:b2:19:
97:cf:16:93:f7:69:50:3a:e6:db:4b:b2:e7:fa:d7:
4c:4e:47:61:7e:20:ac:ca:89:87:ed:27:77:a9:bf:
81:95:6f:5e:50:72:fb:3c:d0:13:ba:f3:e4:9d:79:
0a:41:90:5d:53:62:06:9f:fa:e0:d6:93:11:dc:d5:
77:d5:8b:97:89:02:52:cd:6a:3f:ba:93:52:f6:6b:
cb:22:2e:eb:8a:dc:93:78:09:fd:7c:e7:bb:fe:dd:
77:88:bf:07:8b:bb:0a:f3:46:5b:50:87:09:ce:4f:
1f:ee:97:b3:95:8e:07:a3:c6:11:0e:c8:b9:e9:7a:
c2:d8:49:77:62:66:21:1f:6a:ad:d6:51:cc:d3:7c:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.74.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41970
Signature Algorithm: sha256WithRSAEncryption
17:f0:c4:92:0e:77:57:42:ef:2f:21:ce:63:d0:77:52:4f:bf:
7e:a4:a9:93:ec:d8:4b:8c:91:74:80:00:30:eb:be:ec:4a:c3:
59:4e:86:a6:5a:86:1f:42:d9:63:a4:f3:9d:68:17:6f:d0:b6:
51:67:b1:1e:4d:cc:1f:b0:b6:fe:f4:dc:9d:12:65:f9:9b:90:
d4:97:7b:24:23:ba:e8:55:a1:ab:9c:45:00:86:00:d4:6d:2a:
51:a7:01:6f:d5:ba:df:f6:ce:05:51:25:9c:36:3c:0a:7a:7b:
c3:f8:c9:34:2a:ca:7e:cf:8f:bb:af:e3:8a:3f:f5:88:40:7b:
5b:5e:b8:1f:68:2e:cc:fd:bd:0e:cf:e5:1a:01:69:80:e6:19:
2d:dc:74:b3:2c:c0:0a:f5:07:a1:f0:36:d3:f4:19:2f:de:45:
e9:ae:d6:57:56:25:4b:2b:be:f9:1e:8b:59:ca:e1:29:05:9b:
e9:11:51:8c:12:a4:58:1c:fa:8c:6a:c9:c7:fb:5f:d9:ac:51:
cf:d5:bf:2c:9c:0e:2a:ac:a7:8f:0d:18:5c:7e:4e:77:51:4a:
d9:35:ac:07:73:3b:66:82:60:b3:71:78:5b:47:13:d1:b2:02:
92:3d:69:28:43:14:fd:e2:4c:2a:89:69:d3:69:12:56:6d:73:
43:d0:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:55 2025 by rpki-client on console.sobornost.net