Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.cer (raw, json)
Hash identifier: seH0orSMfDdikpTwa83vzate2TOn69q4v/09XtGGbug=
Subject key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195FFA3F49C4247C4799896AEDE46FAFAE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Apr 2025 07:11:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48983
IP: 193.169.2.0/23
IP: 195.66.85.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:a3:f4:9c:42:47:c4:79:98:96:ae:de:46:fa:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 07:11:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:4d:05:04:20:2d:04:7f:a1:78:80:aa:4f:
eb:ef:15:52:b4:b9:8e:33:a8:ca:34:f3:f4:8c:1e:
8e:27:b7:e7:1b:21:73:88:79:5f:8b:4a:d5:bc:6c:
1e:49:b8:8e:b4:ae:1a:0e:75:96:3c:7a:bb:05:41:
0e:1c:73:3a:65:ff:b7:42:d4:78:c1:7c:ef:a7:a7:
a3:0b:9e:b1:a4:e3:c1:8d:ab:a1:f1:79:54:2c:fc:
09:99:c4:1c:85:fd:51:a0:f6:6d:31:0e:5f:64:c2:
d0:28:b3:93:f7:67:6c:de:ac:f4:2d:df:2b:ec:77:
1b:76:89:e8:ca:07:22:c1:e2:e9:b4:7b:0a:d6:52:
97:69:6b:db:e6:16:07:40:4c:e4:68:c4:79:75:a1:
d5:67:4e:c3:9d:5b:ac:e1:f4:2b:12:e3:61:8b:7e:
29:86:04:ef:74:b4:c7:7a:76:a9:10:19:75:e0:ed:
a1:20:5f:03:b7:be:15:62:9c:0f:6f:e8:e0:36:a5:
40:99:4b:33:7b:07:c1:2c:b3:bf:7e:71:4a:6d:aa:
ee:d4:f2:17:42:54:83:23:d5:06:39:62:fc:ec:68:
6c:b9:fd:c4:b0:4d:22:80:04:48:c8:68:66:53:7e:
d0:aa:b7:d2:b8:48:41:1e:fa:85:0c:68:67:a1:04:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.2.0/23
195.66.85.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48983
Signature Algorithm: sha256WithRSAEncryption
70:26:9d:1b:73:6b:4b:85:75:b2:42:df:b6:be:50:b1:95:1b:
28:4d:af:b4:01:41:e9:2b:23:d6:7a:a0:cb:63:97:4e:1d:eb:
78:bd:b3:c9:65:7e:c3:4c:76:f7:3d:13:9f:e9:33:fb:4f:36:
4f:5a:01:ff:0f:d6:6f:ae:1f:70:27:68:2d:ba:1e:72:fc:6f:
00:d7:f4:e2:26:5a:d5:e2:89:52:87:cb:69:ae:e5:5f:dc:0f:
bd:07:80:ae:07:c1:ff:0d:71:19:c8:fb:ce:a0:97:d1:28:55:
47:53:01:31:bd:3e:4c:bd:49:76:15:a0:4a:6c:e1:f0:99:30:
6a:09:b2:de:6a:ea:14:e4:1d:94:0b:a1:31:2a:be:85:dc:17:
d1:ff:4d:0e:1a:8e:f1:3c:75:45:6f:47:4a:38:61:b8:94:13:
30:f5:8d:25:a4:90:20:37:52:bb:a6:f2:83:8d:93:77:3b:77:
41:26:65:74:e5:c8:e4:9d:39:26:4b:2b:a3:a1:6f:37:ae:34:
e4:c5:c7:c1:3f:af:cc:9f:4a:f9:fc:ba:f1:bf:19:18:9e:8b:
0f:86:c8:67:5b:29:db:e0:c9:dd:d3:e8:54:21:1e:82:32:4c:
12:70:bf:f6:45:4a:7a:3e:83:18:34:a5:20:ef:27:dd:64:dd:
f6:ed:6c:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:13 2025 by rpki-client on console.sobornost.net