Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.cer (raw, json)
Hash identifier: Tt3rAK89qZEc5GDHOd9ZDM5TXgQ7loBVqvCT4k4i5ps=
Subject key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC185E1F2E917B6C6C8C02034F73B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197082
IP: 91.217.225.0/24
IP: 185.75.216.0/22
IP: 2a05:4dc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:18:5e:1f:2e:91:7b:6c:6c:8c:02:03:4f:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:31:8e:11:4a:9d:5b:86:3d:a4:f5:6a:52:
68:9d:e1:62:01:fe:7a:e2:da:ed:71:e7:b5:10:e2:
c5:eb:60:3e:6e:69:3e:4a:71:fc:b0:42:5c:fd:2b:
8a:5a:ca:b4:dd:d3:62:49:56:e4:b9:67:ac:0a:06:
cd:7e:26:00:8d:a0:51:87:98:61:fd:10:0a:82:bf:
b0:55:06:f7:55:5c:30:d5:85:44:84:74:f7:9c:40:
88:88:10:13:4f:4f:92:d1:08:09:f3:9c:6b:65:b1:
e4:bf:30:c6:d9:1a:c0:1f:f0:a3:a8:e0:80:41:28:
ba:04:8e:de:84:45:1f:bf:1e:cd:91:32:a8:05:fe:
95:39:c9:d5:3c:42:39:2a:7e:96:a1:b5:ee:6d:04:
31:0f:a2:86:99:dc:0a:46:f1:db:d1:91:8e:43:ab:
98:6e:b9:10:f0:eb:d8:1f:dd:f7:f4:18:6e:37:c8:
ba:15:33:ff:05:78:d6:40:f4:a6:38:74:64:bb:90:
a5:d6:bf:f0:84:54:04:41:c6:f6:fa:17:07:e4:2e:
30:47:8a:89:02:c9:52:07:8b:e3:ac:4f:6d:5e:69:
74:e8:85:c3:65:6a:df:b9:c2:27:3d:94:aa:d2:14:
00:9f:8b:e2:57:0e:88:ce:90:2f:c1:b7:05:9b:1c:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.225.0/24
185.75.216.0/22
IPv6:
2a05:4dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197082
Signature Algorithm: sha256WithRSAEncryption
36:31:8b:30:df:b6:88:95:2e:a2:d2:8a:15:53:7c:df:16:ed:
14:ee:27:8a:23:f8:1f:83:56:29:c6:b3:23:99:57:ca:a6:c0:
4e:7a:52:de:74:0f:de:95:f4:71:a6:75:f2:70:08:49:ad:8c:
7c:62:2d:db:47:26:ea:10:a4:4e:eb:9e:2f:32:52:60:6d:ad:
b3:e9:68:32:6b:f0:34:06:e0:56:b8:50:e8:d3:f4:e0:44:1a:
94:cb:87:41:57:09:b8:e6:c7:09:dc:fe:58:5e:8d:e5:3c:55:
5e:60:da:04:36:b3:59:e7:2d:84:e8:8f:a5:7e:b4:71:69:f3:
d2:28:ac:f0:a9:6f:b5:1d:2a:83:07:89:cf:d3:ee:0c:05:0b:
1f:5e:1d:2f:19:5e:08:14:6d:e8:7d:e7:18:fd:74:16:3f:e8:
b4:5b:76:e1:32:de:ee:0f:c9:2f:c9:e8:cd:d3:25:43:af:56:
07:09:2d:67:99:2c:21:13:96:30:f1:27:f0:59:07:e1:df:18:
ab:ec:eb:45:74:55:05:77:23:0f:cc:a7:80:46:3a:35:35:64:
ff:1d:54:49:e7:21:76:81:08:5b:eb:86:92:88:bb:f2:3e:33:
d4:e3:4d:62:8f:06:68:76:c7:6c:db:fe:25:27:10:73:c1:8d:
dd:75:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:20 2025 by rpki-client on console.sobornost.net