Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer (raw, json)
Hash identifier: WinghR2b6vu/tNqlUpsmMRx4PJNDtBNsosiThDFVbeo=
Subject key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D74009E8EA23953540A563186FA80C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16184
IP: 193.109.124.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:40:09:e8:ea:23:95:35:40:a5:63:18:6f:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:43:19:b6:62:40:0c:fa:e7:ea:ed:c1:23:
1e:89:84:e7:93:5a:24:b3:c1:6c:b0:fc:43:a4:5d:
85:60:da:17:29:99:5f:a4:8b:4c:32:29:44:2b:a1:
d6:90:af:ba:a2:18:03:f4:a3:c2:46:42:e7:a5:91:
3c:e0:08:db:4c:a1:ef:36:4f:65:21:86:7d:7c:67:
64:d7:79:70:14:e0:f6:4c:5a:64:04:a8:50:42:52:
ae:7d:aa:fe:29:7e:cc:a6:42:9d:e3:70:08:5a:37:
5e:7f:f9:16:6b:f7:c2:9a:e9:9a:29:00:39:82:2a:
2e:ef:b1:c4:61:34:f1:a4:10:ba:6a:2a:1a:1c:3b:
d1:6a:e7:4e:2e:ca:6f:7a:6f:b5:56:34:a9:f5:46:
b6:38:08:cb:2a:b7:bb:e3:c9:54:76:54:d3:5c:a1:
18:fa:cf:05:63:63:25:7a:aa:a9:67:ac:91:a0:28:
bf:f0:5b:06:f7:06:0f:cc:20:82:a4:e3:fd:a2:fb:
85:a8:11:08:d5:18:a0:f4:1b:45:38:85:aa:b0:ea:
8f:12:8c:77:61:88:ac:21:08:36:84:af:ec:ed:1f:
6d:8f:9a:91:dd:f9:95:ad:f3:36:d1:a7:df:b9:a3:
1d:8d:87:c5:0f:9b:18:c9:6e:24:63:65:54:0c:ee:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.124.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16184
Signature Algorithm: sha256WithRSAEncryption
a6:24:53:42:44:d6:15:94:c5:e6:e8:5e:d0:34:31:94:67:fa:
77:8d:bf:1e:5b:bb:c1:e5:f5:dc:b0:a5:04:90:91:85:6d:65:
16:aa:e2:2c:41:de:7b:5b:69:85:ef:53:8b:fe:09:f8:42:7e:
63:3b:75:56:82:18:1e:d5:71:70:6f:a9:cb:ef:39:dd:ef:03:
45:3a:a7:ba:4f:8b:37:ae:50:49:8c:7b:b8:19:66:ee:50:ec:
8a:47:3d:de:2a:6e:cf:46:ce:99:c0:73:bd:6c:e9:cb:bb:e9:
10:e9:01:69:f3:38:46:52:05:ab:23:35:4f:3b:b7:de:ae:7a:
78:55:21:0b:01:cc:cc:6f:34:38:57:18:73:bc:5a:1c:be:c9:
87:34:79:fc:5f:9e:c7:49:f2:07:b2:ab:f6:8e:55:7d:3e:51:
a6:1e:47:b7:63:98:d9:25:b6:a8:61:28:bd:db:39:d7:e5:b8:
08:f7:d8:ce:03:34:eb:cb:ed:70:05:89:8f:db:55:c0:e1:b6:
50:e6:8a:f3:95:28:d5:76:fe:9a:f7:08:ef:12:2c:6f:9f:01:
3d:60:60:23:f2:7d:28:1a:04:6e:ec:6a:0a:bf:36:f9:a5:c8:
98:f7:70:11:70:6c:0c:4c:94:b9:57:0a:85:c5:0a:2a:b7:66:
f5:df:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:00 2025 by rpki-client on console.sobornost.net