Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
File: tATMDgOOsOaX7G565J0ChhRuDBo.cer (raw, json)
Hash identifier: YkK6UTNf12DWa9pob763eyEZJ/1wGviMTPVlpbQX37k=
Subject key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019624CA70F1F1536892E118BCC5F791A9EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Apr 2025 12:19:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58026
IP: 74.122.24.0/22
IP: 104.167.25.0 -- 104.167.27.255
IP: 104.207.32.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:ca:70:f1:f1:53:68:92:e1:18:bc:c5:f7:91:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 12:19:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:3e:99:09:8a:81:e7:e8:7e:14:21:ca:0c:
6b:9b:85:eb:7c:b0:f2:b6:e7:d8:7a:4a:12:1c:b2:
d6:38:a3:66:a2:20:0e:a2:f0:5c:dc:68:b4:56:35:
01:4d:8d:db:d0:64:2c:23:06:5e:d7:fe:72:45:a6:
ca:d9:1b:00:6e:03:cc:1f:1b:7d:c5:92:cb:3f:c8:
f1:5a:19:c5:5d:e9:86:48:01:f1:4c:1d:a4:16:6f:
bc:64:19:34:25:5f:ed:23:92:72:b5:79:7e:a2:16:
4f:4d:19:70:15:77:9b:84:a2:20:d5:f9:33:e0:63:
85:e6:33:47:86:d3:1d:e8:84:69:e0:a1:71:cd:9a:
3f:85:94:f7:56:c1:fb:6a:a5:12:cb:2a:f9:36:39:
31:3f:d8:7b:b6:bb:3c:2a:9a:b2:29:97:93:74:9c:
92:30:f0:65:5c:32:5a:b4:b9:f4:e1:3a:35:91:03:
d6:f8:05:d0:0e:dc:19:94:8d:04:69:c8:77:82:f6:
d7:dc:2b:b3:11:65:a8:e1:82:e8:42:ce:bb:01:3a:
93:57:3b:c6:67:ab:6a:a1:71:34:ce:a3:62:72:31:
60:ac:82:43:d6:fc:5d:57:44:d4:09:aa:af:3c:35:
d7:c2:75:f6:f0:b5:4d:ac:7e:3f:1b:7d:04:88:fb:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.122.24.0/22
104.167.25.0-104.167.27.255
104.207.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58026
Signature Algorithm: sha256WithRSAEncryption
af:32:a3:a2:25:4b:61:3f:d6:91:44:fe:fa:cd:a2:c0:ad:db:
0e:94:a5:9b:9b:63:74:49:ed:ba:1e:88:21:9e:f2:48:a7:35:
d9:d3:14:7c:0b:a4:80:70:36:9e:6b:0b:aa:5c:06:57:c3:81:
26:9c:ea:ef:0e:8a:68:26:79:00:ce:e7:46:f6:8a:6f:b5:c7:
af:f5:1f:c9:9e:04:52:0d:cf:76:ca:a6:1e:74:07:69:36:23:
05:bd:af:f4:82:94:c0:17:35:3c:42:41:19:3b:b6:3c:18:2b:
c9:c6:f7:d1:4d:1b:78:00:64:57:93:46:46:ee:45:0a:84:06:
7f:2f:47:a1:39:1d:0c:74:79:fc:83:d7:b3:44:57:d5:df:f9:
e2:55:c2:44:ab:b9:9f:60:09:8b:b2:e6:84:e2:ce:f0:64:32:
e4:dc:e9:bc:f9:db:1b:af:e3:f5:9d:d4:da:1a:ea:3f:3b:7c:
3a:de:2e:51:58:60:bc:85:62:96:87:d7:b0:ac:8b:5f:07:81:
6b:18:c1:a1:70:65:0a:24:9d:41:52:58:27:ca:c6:19:ad:cc:
15:e6:7d:4c:18:a5:8e:12:50:13:2a:c8:5e:e4:0c:9d:86:94:
89:13:fb:19:59:1a:21:ba:b1:a5:4e:ea:08:5e:8e:b0:3b:0d:
8d:94:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:04 2025 by rpki-client on console.sobornost.net