Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.cer (raw, json)
Hash identifier: ZYpGiVrsLX73UJpohWiaCxSnPo0AI4XqejPg0Pxj+x0=
Subject key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216CC1B192E6D02AE4C5E79A1039A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44302
IP: 92.61.112.0/20
IP: 217.27.208.0/20
IP: 2a0d:3980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6c:c1:b1:92:e6:d0:2a:e4:c5:e7:9a:10:39:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:19:8c:e7:75:5c:98:8b:17:11:09:e7:87:
65:97:7e:46:5a:e1:72:38:2c:4a:b6:0f:96:9e:db:
8f:5e:65:d5:ff:11:3d:77:b7:06:9d:71:aa:72:6f:
9d:13:d6:93:d9:d3:9c:7d:f0:d2:3c:0d:cc:67:cb:
b6:73:76:61:fe:8a:01:88:cd:0f:78:ee:17:aa:cb:
88:37:4e:87:bf:e9:4f:cf:a5:7a:b4:8a:18:b7:56:
3c:37:f7:3b:98:36:b9:af:c2:7e:f3:bd:90:e4:78:
94:cd:73:4e:95:8e:68:d0:d3:9f:a9:33:7c:69:33:
15:c9:9d:28:0e:19:97:da:df:d7:86:07:16:8c:31:
2d:71:aa:36:09:bb:70:81:20:83:ca:c7:30:fb:ab:
93:48:9f:a2:fb:fa:d2:de:af:47:74:dc:b9:0c:57:
4d:c1:c5:4f:9b:91:b4:e8:cc:fa:d9:57:5d:fb:d0:
14:86:a7:02:03:4f:7b:d5:48:02:d3:a1:5c:93:79:
3b:62:60:f9:2c:15:68:74:96:13:cf:f0:85:f3:aa:
f4:ed:40:ab:08:c8:ed:99:54:eb:17:5e:09:6a:c6:
06:f9:bd:16:f6:70:26:c9:f3:f2:b4:75:0f:66:73:
61:0e:13:2f:a0:a3:d9:31:75:64:4c:c5:b1:eb:cf:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.112.0/20
217.27.208.0/20
IPv6:
2a0d:3980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44302
Signature Algorithm: sha256WithRSAEncryption
44:9b:95:16:e3:70:0f:6d:7c:80:6f:33:d7:f1:2e:61:da:77:
2c:30:7e:c4:39:9e:ca:34:45:51:ce:4e:94:33:8f:52:55:70:
e0:12:32:94:ed:c4:e4:4f:cb:f4:a8:83:29:fa:7a:d4:e9:ea:
43:bc:d7:74:e9:a3:36:0c:9d:35:75:1d:f5:ec:1e:e8:1d:89:
13:11:06:7e:cf:62:2d:fa:e3:c4:30:a8:55:6a:53:26:13:6c:
d9:94:3b:7a:28:3d:0e:e0:f6:c1:5e:d5:f8:9a:24:6d:dc:d6:
eb:8f:50:2b:b7:e7:e2:64:34:7d:da:58:7f:7e:cf:e3:7b:91:
44:e5:b3:46:ee:de:ea:d8:b9:ed:01:bf:fe:f8:17:89:fa:77:
46:8b:8d:ea:64:59:ed:e0:e7:bb:0e:8f:22:37:3f:b4:f7:4a:
32:f3:f4:be:ab:82:f2:69:f9:26:65:93:05:59:72:a6:3f:e8:
f6:4b:56:61:b2:b6:07:8b:e9:7a:90:22:8c:59:8b:24:55:40:
c6:fa:34:1b:ac:d6:3d:cc:5e:84:85:3b:81:1c:9a:c9:7c:f0:
fd:e9:f4:5e:c1:16:71:ae:e8:24:08:83:a6:17:37:8d:20:a8:
92:ea:ef:f6:e9:2d:b9:d6:56:34:ec:f6:a7:6f:dc:93:d4:1f:
d4:5a:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:07 2025 by rpki-client on console.sobornost.net