Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
File: t7wa3782Jkj8Y1wzMvODvLwB53Q.cer (raw, json)
Hash identifier: Ikz6noigMQ2o86+IQfW7080xWL14tl3GGsEGZh5+ezY=
Subject key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2B97E47F989189BFA9A569D376195
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50572
IP: 37.49.240.0/20
IP: 91.211.168.0/22
IP: 109.205.216.0/21
IP: 185.5.20.0/22
IP: 2a02:1380::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b9:7e:47:f9:89:18:9b:fa:9a:56:9d:37:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:5a:1b:85:2d:19:3a:9c:18:c1:ae:ba:c7:
b1:0d:9a:e9:cb:b7:e4:5b:fd:89:00:91:14:ac:a0:
17:ae:d3:22:d4:25:21:d5:60:45:73:e2:74:81:6b:
c4:27:e2:bd:1e:0f:45:0d:5b:41:07:d5:ca:02:5e:
6f:bc:76:56:59:7e:f0:6e:06:a5:95:0f:25:37:1d:
f8:6a:bf:5b:a4:b8:10:38:31:68:b9:b8:65:f6:b7:
48:2a:af:14:26:2d:86:67:53:48:41:90:a8:cd:53:
8a:c8:a9:3c:b2:9f:88:81:e6:fd:ea:30:98:88:e1:
59:b0:87:63:92:7a:44:b9:98:a7:12:d3:ab:f5:b9:
0f:90:08:0a:4c:31:69:0d:c0:94:02:16:ba:a9:09:
68:25:44:b5:e1:3b:f4:39:2f:1d:c0:7f:0c:71:ab:
53:41:6d:e1:4b:42:1a:77:5b:8e:02:fd:0c:2d:6e:
0d:9c:8f:db:60:4f:2d:5d:36:9e:d1:a6:b0:4d:02:
2a:5e:2a:a3:d1:94:86:19:fb:c3:4a:cc:29:28:4c:
43:9d:a0:33:3c:eb:0f:b6:50:60:92:05:4e:2c:6b:
d2:93:3e:44:7e:b0:58:21:7c:b8:f7:d3:b1:8f:81:
f6:44:3a:25:ab:45:20:33:49:79:a3:bd:97:75:96:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.240.0/20
91.211.168.0/22
109.205.216.0/21
185.5.20.0/22
IPv6:
2a02:1380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50572
Signature Algorithm: sha256WithRSAEncryption
9a:e3:ec:db:64:47:ee:5f:09:44:43:25:54:d6:87:2d:a0:ad:
1a:5d:73:46:c0:e7:1a:b9:75:ca:97:37:81:78:1f:fa:af:ec:
7a:11:a8:bc:38:e9:36:44:53:ca:d1:f9:29:a6:df:86:f6:01:
2a:f9:df:16:a8:09:90:85:38:56:d2:5d:77:6c:4e:38:44:8b:
29:79:e8:8c:1f:b8:1b:e4:a5:3f:40:fa:a8:4f:d8:b0:a7:f8:
27:0b:74:56:e0:ac:33:d3:f2:64:86:be:92:20:27:1b:8d:ae:
4f:f2:21:9c:be:dd:11:18:0d:d4:39:e9:54:88:72:0f:3b:d9:
0a:a6:71:f5:1d:80:4e:d6:50:03:7c:c1:b3:69:f1:3e:6c:56:
87:bb:cc:a8:77:0b:70:2e:8c:d9:1f:b5:52:79:08:3c:a7:88:
9c:0a:27:24:8b:03:2a:ee:fc:a7:da:8e:54:c0:98:2f:31:41:
41:49:bd:ec:17:f8:5f:df:85:bb:5d:02:7a:67:55:1f:83:56:
8e:e3:64:c1:95:f7:59:8a:5b:9d:b4:bb:88:9e:ff:8a:f3:77:
bc:a0:b8:24:25:a2:05:76:4c:f9:06:a7:0b:60:26:a2:11:9a:
e8:a5:2b:15:d8:2b:01:e4:78:f1:1d:a4:67:45:76:b7:10:47:
9b:52:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:04 2025 by rpki-client on console.sobornost.net