Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
File: srQdL319OFfgdfKk8vnT4ETy5TY.cer (raw, json)
Hash identifier: /RTkavEaMVGlWwEkH0tcOGud/TcnSFd+OhJKIc+mTlc=
Subject key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F8F4A8299B6319F03D6F5418E282C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34688
IP: 194.116.252.0/23
IP: 194.187.72.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8f:4a:82:99:b6:31:9f:03:d6:f5:41:8e:28:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:4e:71:9d:60:40:16:06:db:c9:3b:f7:63:
12:47:94:1c:99:c1:0b:b8:0d:3a:b8:cf:19:e4:c5:
63:b5:09:d3:65:c6:8f:9b:52:b7:c1:2b:03:2e:90:
f5:34:b6:a6:51:31:c1:e5:be:da:95:12:e6:67:d4:
e4:aa:73:6c:59:92:aa:85:a8:00:66:90:d0:5e:41:
0a:90:04:a9:e6:d9:d8:cf:bd:ef:84:da:48:3e:05:
0e:98:37:5b:da:8f:06:d9:a5:b9:3c:ea:ea:96:6c:
4b:e3:f4:90:e3:78:75:fb:02:62:78:3e:74:8c:75:
91:c0:ab:1f:77:da:43:6e:0e:91:f3:7e:3c:6a:9b:
8e:3c:20:d3:a6:e2:40:ba:43:cf:05:5c:5a:87:03:
d0:a3:13:03:83:6e:48:f7:1e:f9:dd:c6:ca:b1:56:
01:c3:e5:73:da:ed:fe:c4:bc:4f:e1:c5:a7:57:7a:
8d:61:88:1d:96:c5:f0:0d:ac:61:e0:4f:af:c9:0e:
02:54:97:dd:4d:26:25:fd:e0:35:39:7d:e5:f4:d7:
40:72:04:a8:9d:ac:ff:a0:71:7f:66:1c:b6:22:b7:
03:ff:c6:58:0f:f0:b0:97:19:23:35:37:c8:25:3d:
d3:30:bf:24:3f:f7:e8:da:35:d5:60:7a:41:cc:d9:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.252.0/23
194.187.72.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34688
Signature Algorithm: sha256WithRSAEncryption
40:84:31:ce:7f:f0:2e:5a:61:cc:d7:56:a5:c9:48:12:7b:a6:
29:fd:75:1e:59:a7:96:64:9e:03:a4:99:a3:63:4a:5a:cc:c5:
05:e3:95:a7:be:f9:c5:16:00:ff:b9:dc:24:b4:17:f4:3e:d1:
24:1e:68:b1:72:e0:51:12:52:d8:33:85:64:41:a9:d8:bd:7c:
27:36:78:5e:25:8c:17:46:9a:f7:43:eb:a7:07:ae:bd:56:17:
48:ca:d2:ad:64:fc:3e:e9:0b:d3:c4:5e:b3:6c:67:4f:09:89:
8f:b9:f7:d9:9b:66:d5:7d:e8:5a:f8:a0:da:a4:5b:e2:29:b8:
8c:28:8b:9a:5d:43:17:bb:4c:88:d6:8a:71:d6:9b:92:74:a5:
d0:28:43:4a:c8:64:f9:0f:f9:47:3a:77:64:07:24:fb:61:ee:
36:13:b9:36:a4:cb:5a:8a:44:9c:f5:87:40:a0:c7:d8:5a:79:
cb:00:a5:77:65:7d:5c:67:cc:83:15:85:91:b2:25:de:d8:bd:
fb:fc:24:89:62:82:c8:57:07:77:5a:4b:f9:45:34:9f:dc:4e:
2f:50:5e:d9:bc:74:be:fb:33:98:53:27:3b:4a:7a:4a:df:51:
df:ee:2a:b6:88:2b:bb:24:a9:48:cb:d2:5f:95:73:ac:eb:d0:
4d:bd:cd:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:03 2025 by rpki-client on console.sobornost.net