Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer (raw, json)
Hash identifier: LyQTCLS2fJS0Ot7rrs1r/j9oXbHl5E1v6Mr6w51Ywzw=
Subject key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368E93EAFEE7CFC4A026D7661492A12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209620
IP: 193.58.88.0/22
IP: 194.55.240.0/22
IP: 2a0c:94c0::/29
IP: 2a0c:cbc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e9:3e:af:ee:7c:fc:4a:02:6d:76:61:49:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:ed:f3:ae:0c:e4:12:02:87:62:4e:ed:6e:
68:90:4c:0a:b8:17:11:3f:e0:a9:52:8f:5a:49:aa:
b8:4a:fb:85:49:c5:06:38:e7:29:22:0e:70:7a:41:
7e:58:54:7d:84:fc:ee:41:c8:40:79:20:fa:c8:d5:
8d:dd:7b:3d:82:a2:88:1a:89:ac:1e:4d:a8:f8:3e:
cf:f1:00:fa:61:65:3e:80:73:5a:4e:f5:0b:32:95:
8e:1b:df:97:ee:23:8b:3d:8d:67:ea:ca:23:1c:3f:
e8:b2:df:1d:8b:93:3a:e9:5a:59:01:31:41:11:27:
b0:b6:69:d6:58:6c:75:5f:13:1a:3b:84:b6:6a:b2:
ba:7d:b3:83:b2:7a:fa:8d:f0:21:58:db:4e:19:23:
ba:7b:bc:46:08:b6:c0:67:64:e1:73:94:b5:44:3c:
6c:b4:b6:b2:f4:eb:45:40:f1:39:5d:52:cc:26:cf:
b7:33:69:4f:68:9a:6e:e1:a1:9a:3f:61:d0:ef:46:
7d:b0:5e:1a:40:4b:64:88:83:3d:59:75:f2:07:f3:
47:99:ec:23:a8:bc:0e:42:e6:9a:48:42:6c:11:3a:
63:42:ad:4b:90:11:57:7c:73:64:74:b2:76:d2:0f:
07:77:da:41:53:24:d6:0c:8e:f9:36:c6:98:39:b6:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.88.0/22
194.55.240.0/22
IPv6:
2a0c:94c0::/29
2a0c:cbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209620
Signature Algorithm: sha256WithRSAEncryption
7f:1b:2a:85:4d:96:a2:32:9b:8f:03:3e:fd:7b:33:c6:95:53:
d3:f3:81:c9:99:3b:4e:aa:90:aa:bb:a6:6f:57:7f:fe:f6:7c:
bb:01:7e:b9:cb:48:02:f7:7b:ca:30:a0:5c:91:af:90:7f:2c:
0a:ca:6a:6c:31:13:02:df:0b:45:cd:6f:7b:62:6f:47:0c:55:
bb:b6:51:30:ab:2b:67:86:0f:db:a6:0b:d4:86:ce:a1:fd:17:
45:6c:5e:59:64:62:2d:45:f3:96:1b:ce:b8:94:01:b2:16:09:
c9:fc:39:0a:d6:3c:c0:b6:e2:38:86:2a:3a:ff:f2:b9:ef:e0:
5a:ae:9d:4a:0f:18:82:53:fc:b1:25:b8:7b:76:e0:eb:37:94:
14:5b:3d:e3:1e:07:e3:ec:71:31:d9:17:87:b3:e6:02:29:db:
92:03:63:c2:28:44:8e:49:e0:51:2e:9f:14:8b:7b:26:9c:03:
fa:a9:92:3d:8f:15:4f:81:c8:0e:ba:01:e4:a0:15:a4:95:a3:
08:0c:23:4d:ea:73:c7:f2:47:60:26:df:7a:ce:24:77:e7:6f:
22:62:52:f6:ca:02:fb:b1:85:b3:b3:7c:05:96:be:db:eb:c2:
6c:42:46:2f:d3:94:b4:a2:54:68:d0:b3:2f:b5:97:f8:79:f1:
fb:b5:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:56 2025 by rpki-client on console.sobornost.net