Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer (raw, json)
Hash identifier: BoFbANUx22iEtnqj3FVhysSDHF/8CpCTk+PJ6lepOS0=
Subject key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B617D2B2758DD46FF7824390B021AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201764
AS: 214554
IP: 62.169.144.0/22
IP: 185.40.248.0/22
IP: 2a01:50a0::/31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:17:d2:b2:75:8d:d4:6f:f7:82:43:90:b0:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:7c:a6:af:89:94:8d:63:3b:55:e4:aa:07:
49:19:b8:4b:0b:c5:a6:35:83:61:24:80:8a:e1:9a:
01:7f:87:f4:b8:5b:aa:6e:57:a7:ac:c7:b5:dc:95:
c8:a6:17:ea:6c:42:49:1c:fb:fb:92:11:1b:1c:5d:
06:56:9a:1d:61:f8:d6:0d:29:27:21:12:8c:f8:31:
bf:36:15:79:f7:8f:fc:84:25:32:07:aa:c7:12:98:
df:fd:7f:8d:d3:15:37:71:02:83:26:8d:6a:c8:2e:
30:18:4b:87:df:37:e2:ab:18:67:1b:fd:5e:c0:ce:
3b:b6:3b:05:da:0f:2a:80:35:77:87:50:3f:86:b1:
b7:4f:1b:1f:16:d8:d5:eb:e5:c2:15:d0:a6:33:53:
b6:d3:ff:18:f1:14:09:60:ff:3a:c1:e6:40:9f:17:
7d:db:85:d1:93:32:e9:40:a5:f8:d4:52:31:9b:71:
69:38:7f:b4:21:c9:6f:e6:8c:ed:39:38:0e:00:0a:
c0:bc:31:09:d7:36:47:1e:6f:94:bc:ab:37:b2:8c:
b6:69:04:df:ab:90:1d:b9:34:10:e8:c2:cc:78:62:
ca:ad:96:f3:83:e1:fd:2b:39:22:d5:6d:a7:bc:cc:
49:6c:3b:26:42:c1:ff:3a:47:7d:79:93:35:55:45:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.144.0/22
185.40.248.0/22
IPv6:
2a01:50a0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201764
214554
Signature Algorithm: sha256WithRSAEncryption
6a:75:1c:86:59:96:c0:5c:42:54:9f:e2:34:96:38:2e:bf:cf:
f4:b6:f3:f9:e1:06:0a:27:e5:a8:1e:ce:09:82:4b:b9:00:dc:
db:19:07:cf:ba:47:0b:2d:80:b7:ae:cd:be:4b:c1:4c:8c:28:
ae:3e:47:2c:55:b6:da:b7:b4:80:6c:e2:dc:86:7e:db:93:46:
af:56:55:87:12:f7:82:0e:98:48:0e:6f:b1:eb:4e:24:67:32:
e8:97:07:7a:27:13:fd:19:b2:24:f7:a8:dc:9a:b3:f6:b7:3f:
a4:24:20:8a:11:d0:6c:73:f9:f9:bb:49:87:fd:42:21:82:91:
93:5a:85:0b:a8:7c:86:f0:77:d9:4e:fd:85:86:b2:8e:fd:d1:
84:ff:c4:47:b9:df:cb:79:8b:f7:53:1f:b9:cc:0a:92:7a:01:
3d:e6:39:d1:38:77:58:e5:aa:5c:e6:99:81:ff:f6:84:6d:f8:
1f:d7:c8:bc:6a:53:12:43:04:cc:c9:85:69:c6:99:43:43:9a:
40:5d:74:ba:ea:f1:61:ed:b1:da:3e:0b:be:e2:14:6a:65:96:
9c:39:76:f2:1b:74:04:1e:ae:ba:52:97:3b:b0:7e:47:38:d3:
f6:3c:5e:cf:ce:d4:f7:5c:81:62:c2:9d:19:a0:99:2a:23:2c:
90:a6:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:58 2025 by rpki-client on console.sobornost.net