Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
File: zJgWyv_6ViY90NdIGclNVALxu20.cer (raw, json)
Hash identifier: j3mNdwOv73EmP58Z7xIXF9Q2X/neKHcoPjo6THlkxFQ=
Subject key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019500C56F060A69EE4D3586E7C425ACD37D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Feb 2025 19:24:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202137
IP: 91.208.243.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:c5:6f:06:0a:69:ee:4d:35:86:e7:c4:25:ac:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 19:24:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:c9:aa:a9:2b:bf:8b:d1:07:16:31:b0:a3:
b6:70:d6:cb:45:66:5a:79:00:7d:b3:1e:d8:aa:d5:
26:ee:d8:b2:bf:2d:c7:dd:93:21:17:df:0f:bf:32:
49:6d:78:a4:64:fd:03:69:7c:58:ca:ec:23:89:82:
05:52:08:27:9e:12:c6:05:ca:25:6c:45:c1:ed:a1:
30:ce:98:04:e8:59:56:2e:27:c7:e5:73:e7:e1:04:
f5:fe:5e:11:d6:dd:9a:32:11:59:f6:fd:6d:16:1d:
8d:b9:e2:7b:dc:c7:d3:63:10:e1:0c:27:46:73:7d:
5f:fc:ee:9c:04:de:e8:5b:0c:6d:43:ae:0c:f8:10:
5f:be:41:2b:44:2f:ab:a4:1e:19:9f:49:5f:b5:87:
67:6c:58:fe:22:02:cf:2f:05:51:78:b0:94:e4:ad:
f6:5d:04:ac:38:36:d8:b6:89:80:7f:b7:98:d1:00:
fb:38:62:63:4f:60:14:19:af:0e:08:59:6c:1c:6b:
12:66:71:2c:e5:6b:ef:ac:f6:d2:17:43:65:91:32:
b5:95:7c:54:a0:5b:7a:4b:00:f2:5d:8d:4f:3b:fe:
1d:2b:fe:b3:a3:f8:0e:42:c3:bf:89:c2:8d:0b:9f:
eb:06:b7:52:18:ef:72:15:5e:aa:cd:01:e6:f9:86:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.243.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202137
Signature Algorithm: sha256WithRSAEncryption
07:4f:c0:c1:e7:3a:b6:96:b6:72:c7:6c:3f:46:ba:b9:f1:f5:
13:c2:c0:8a:88:53:a5:b7:55:a8:ba:9a:96:21:49:fd:88:2f:
84:ba:f7:dc:a4:22:72:de:a4:8f:64:d2:e1:d0:04:3a:8a:c9:
3f:43:da:5e:2b:97:59:91:97:cc:93:0e:ac:15:f9:be:a3:30:
eb:09:42:ee:f0:6b:98:e7:5a:be:0b:1a:7f:2c:80:0c:e7:ca:
9d:4f:16:2d:19:2b:9c:b4:44:73:fc:20:95:26:18:7b:4c:ce:
57:d4:87:f7:65:26:81:ca:68:c6:96:ef:c7:fd:e2:c9:b7:f8:
ed:37:89:45:a2:3f:3d:f7:95:89:6a:8e:34:c7:39:ea:0c:6a:
05:79:12:b6:19:41:62:46:7b:69:de:0f:a5:a6:6e:57:4e:f4:
aa:74:22:91:7d:62:38:84:9d:f4:76:5b:22:56:65:ff:10:a1:
72:07:5d:3e:85:73:6f:6a:7d:5f:ea:d7:7f:82:40:60:21:6e:
d0:d8:21:94:03:70:a9:7d:ed:37:1c:e4:0a:27:b7:27:d8:ba:
7a:10:49:16:71:2c:81:32:a3:08:d7:ba:61:ce:8b:6c:47:4b:
8f:35:d6:05:66:8a:53:0a:28:18:dd:1a:9c:42:17:70:66:9b:
ba:de:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:21 2025 by rpki-client on console.sobornost.net