Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
File: q-CopGLQ3h9NMBLD455c2mA-j5E.cer (raw, json)
Hash identifier: SGm1Zd9+FyhXg/SMSj39MLYyg/XeF91MBO8w4PLKBzo=
Subject key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369F5CF64059825C16980870B3A0C8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58125
IP: 91.239.14.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f5:cf:64:05:98:25:c1:69:80:87:0b:3a:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:8e:46:8d:37:42:d4:32:a1:a6:a2:68:0f:
57:c6:63:03:48:67:e2:8c:0a:f8:ff:6e:a6:3e:22:
5a:5e:7f:c9:32:a5:95:f8:09:58:44:f0:8b:ea:a8:
65:0d:db:d5:f2:01:ea:27:3d:62:80:f7:26:8e:d8:
a3:0b:f8:eb:10:17:a6:55:d1:78:17:17:05:9f:1c:
47:46:4f:92:3a:80:86:ad:31:cd:f7:2e:fb:fe:b1:
1e:37:b1:82:da:93:cb:fb:33:f4:2a:23:a4:c1:b0:
1b:77:a6:9a:e0:9b:be:60:79:7a:1f:b8:6a:f9:e7:
d7:c9:02:29:e5:f1:22:b7:2f:f4:2f:b6:3e:85:a6:
af:73:97:4e:2b:a4:40:96:6e:1c:ec:b6:5f:d2:eb:
df:98:b7:c2:88:2e:e2:b2:d5:c1:e9:51:06:fd:ae:
cd:05:c6:c2:d1:89:fa:80:5c:f8:1d:71:a4:f7:cd:
f4:d9:03:b3:09:f4:44:e8:99:14:2c:2f:dc:b5:df:
54:27:93:8a:e9:e0:b3:80:fa:1e:31:47:c3:00:b4:
62:df:10:a6:38:ed:ed:40:62:dd:d4:81:89:82:c1:
3f:10:58:cb:f8:15:e1:ba:1b:ab:0c:60:c9:ef:bd:
30:b5:e1:b3:7c:f1:22:64:db:70:2d:88:e4:8c:dc:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.14.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58125
Signature Algorithm: sha256WithRSAEncryption
14:62:1a:c2:2d:38:65:95:7f:d6:e5:b6:51:8b:e6:67:ee:92:
39:32:b6:bd:a6:c9:b1:d0:cc:f5:46:05:8f:d7:34:be:7a:4d:
27:21:06:3a:b5:6e:c7:a8:e5:f3:07:3a:09:e2:81:de:aa:93:
b3:52:a1:aa:3c:fd:20:99:29:5f:fd:28:45:5a:d9:7c:16:df:
41:7b:d5:6e:a4:4b:39:84:9d:86:7c:fa:c0:07:2b:88:a5:af:
83:04:e2:fc:41:2f:a6:c9:57:44:cc:ff:43:b3:1d:6b:cd:16:
46:c0:e9:c1:20:6d:31:3b:d7:aa:3d:df:05:80:96:2b:82:11:
46:65:b9:ec:f7:84:86:d7:20:e6:05:1a:58:39:48:af:92:51:
c6:72:3f:6d:47:ae:bb:29:51:26:1b:1d:3c:72:92:9a:87:9d:
f1:60:ed:ea:75:69:a4:6d:17:02:de:ec:91:a0:41:f5:b0:43:
fa:29:4d:32:b5:94:8a:38:6a:ca:ea:9a:91:fe:ed:99:af:06:
8f:69:49:fe:65:a1:9d:db:f2:e1:d2:93:d6:af:e4:48:d1:f2:
dc:c6:5f:09:96:22:80:79:ba:f6:64:62:c6:b1:dc:c5:ff:2a:
12:83:2e:ff:3c:29:47:1d:e8:78:ae:8d:8a:c5:41:c4:10:91:
4b:37:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:55 2025 by rpki-client on console.sobornost.net