Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
File: rGzIYDNT1zLkscy6fqygts7kxM8.cer (raw, json)
Hash identifier: T79vq255Aw5F0jkS1247E6eGWaWzQMl1cm8CPiVXH8U=
Subject key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F870E7D556A695D5A770FE4D7F4F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.223.144.0/22
IP: 2a0c:400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:87:0e:7d:55:6a:69:5d:5a:77:0f:e4:d7:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:42:97:41:05:c9:aa:50:a1:89:e8:27:0f:
69:45:bd:48:27:5e:71:d9:f6:c6:a0:f1:55:14:57:
42:ec:17:61:7e:fa:1c:e9:89:25:9d:5a:51:92:e6:
d8:4d:61:9c:db:2b:80:6b:38:5a:d7:0a:99:c9:86:
e6:d0:d8:84:8d:1f:8b:52:e9:b8:7c:23:70:b5:b9:
7c:d6:99:4f:dc:bf:eb:99:95:e0:34:b1:3a:5e:d8:
e9:fa:ef:68:be:9b:35:38:aa:3f:02:51:69:76:db:
5f:02:de:5b:88:58:e9:78:ff:5b:2f:c9:2b:93:92:
5e:7e:8b:06:51:57:66:23:72:1a:e7:eb:42:92:45:
0c:0f:16:eb:68:d8:a1:d2:65:0f:b4:13:54:d2:8b:
b6:21:e1:d0:c3:b5:ef:72:be:bb:84:cf:fb:63:02:
12:ec:c4:02:15:b5:a5:49:a1:16:80:f5:67:8c:ac:
13:7a:35:66:82:75:46:f9:6f:55:e9:51:51:78:80:
2f:d5:da:da:49:3d:d4:20:6a:78:db:c8:0c:2b:b8:
3c:2a:be:d2:d5:72:9e:23:29:df:06:c5:8b:bb:2a:
e1:6d:1e:aa:a1:1a:e7:3a:b2:7c:54:d6:9e:46:ff:
b6:92:d9:85:5b:b4:3f:6d:e9:47:42:bc:fe:27:4a:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.144.0/22
IPv6:
2a0c:400::/29
Signature Algorithm: sha256WithRSAEncryption
98:18:a7:ca:5d:ed:19:41:d8:49:e3:38:57:ea:65:95:5c:ee:
b0:e5:e7:34:b7:9e:9f:9c:dc:30:3c:f9:d4:e0:aa:e6:61:bc:
ce:b7:0e:01:ac:83:19:78:ff:d2:82:aa:fd:ec:23:d4:dd:d9:
89:c6:5a:cf:e5:cf:6c:32:35:69:04:33:50:57:d7:de:b0:44:
95:41:a2:bd:b0:a1:e5:91:c2:41:5f:ca:2e:72:be:03:4a:10:
7e:3a:4d:46:10:b4:55:b9:2e:7e:a7:0d:2c:1f:aa:fc:8b:07:
ce:35:cc:ed:9d:e8:d9:3f:fb:44:99:ad:95:7c:c9:16:a9:8e:
7f:ff:ae:16:82:05:36:da:49:22:ec:07:fc:d2:5a:f8:ab:fc:
73:35:5c:45:8c:d1:ed:02:86:6a:4b:8e:df:40:69:ac:09:f0:
9e:6f:2b:36:5d:07:ff:49:65:3d:02:a3:51:9e:c3:68:82:8e:
24:8d:7d:58:55:83:b9:c0:ad:e1:4a:cc:6c:62:8a:4d:db:db:
51:01:3e:ba:da:d1:be:e7:50:ad:b3:6b:4d:79:46:12:db:7f:
da:95:ae:d6:1e:c8:54:3e:45:f5:bb:44:41:88:7a:71:f7:24:
f0:f4:2d:1a:4b:51:bf:e5:3f:18:e8:b3:db:65:72:9f:83:c1:
88:7a:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:58 2025 by rpki-client on console.sobornost.net