Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer (raw, json)
Hash identifier: djA62urCZx1pBM8TFnnA292UFyYkF+ReO5uXR9bpVMs=
Subject key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C45B57DC7187A3EE42FB9572CF1C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42658
AS: 56550
AS: 211886
IP: 31.14.28.0/24
IP: 31.177.40.0/21
IP: 31.214.153.0/24
IP: 46.102.188.0/23
IP: 85.204.119.0/24
IP: 85.204.147.0/24
IP: 86.105.177.0/24
IP: 89.32.168.0/23
IP: 89.32.186.0/23
IP: 89.33.133.0/24
IP: 89.34.161.0/24
IP: 89.36.228.0/24
IP: 89.42.25.0/24
IP: 93.115.62.0/23
IP: 93.117.152.0/23
IP: 93.117.172.0/23
IP: 94.177.127.0/24
IP: 95.142.208.0/21
IP: 109.230.212.0/24
IP: 128.0.122.0 -- 128.0.127.255
IP: 185.8.24.0/22
IP: 185.157.52.0/22
IP: 185.163.172.0/22
IP: 185.196.48.0/22
IP: 185.207.184.0/22
IP: 185.208.24.0/22
IP: 188.241.154.0/24
IP: 2a03:1140::/32
IP: 2a0a:6640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:45:b5:7d:c7:18:7a:3e:e4:2f:b9:57:2c:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=292d120970515846360ea223e9a0e6a3c3896934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:66:84:32:b4:c9:86:0b:38:1a:5a:ea:2e:
7a:1f:f4:cd:21:75:14:61:26:60:53:33:81:c2:c9:
5d:be:11:b6:03:ca:d5:8a:de:86:f0:2b:22:7e:e1:
df:fd:72:8d:73:f6:15:f2:30:e1:9c:f3:d3:ae:c4:
f3:de:3a:58:97:25:eb:3a:4a:34:cb:4a:f0:67:bb:
19:2b:e1:f2:36:2f:10:8b:e0:b6:03:4c:5b:a2:9e:
5f:75:28:23:3e:f7:7f:0b:4e:b8:81:66:54:45:a0:
3a:b7:a1:aa:1c:1f:fa:9f:bb:40:25:16:98:9f:a6:
7a:a0:b4:14:2d:17:f1:ac:50:dc:20:5c:cc:e5:de:
cc:70:40:0b:1a:bf:88:45:22:26:d8:e2:da:5c:41:
63:b0:e1:46:99:0a:46:28:22:2a:e1:ae:10:a9:fd:
28:27:c8:7a:29:39:fa:73:0b:19:1b:a9:52:38:66:
60:3c:f4:18:10:7a:aa:1d:f8:26:24:81:d7:f4:62:
ef:70:9c:89:f7:61:9d:da:5d:3c:fa:76:f7:86:01:
e7:72:a2:c0:c5:22:bf:38:fc:92:9d:46:cc:57:ff:
23:8d:4d:d3:13:e6:a6:95:25:37:e9:18:53:67:ef:
2e:72:47:4a:47:07:5a:ac:80:40:d8:4d:58:07:28:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.28.0/24
31.177.40.0/21
31.214.153.0/24
46.102.188.0/23
85.204.119.0/24
85.204.147.0/24
86.105.177.0/24
89.32.168.0/23
89.32.186.0/23
89.33.133.0/24
89.34.161.0/24
89.36.228.0/24
89.42.25.0/24
93.115.62.0/23
93.117.152.0/23
93.117.172.0/23
94.177.127.0/24
95.142.208.0/21
109.230.212.0/24
128.0.122.0-128.0.127.255
185.8.24.0/22
185.157.52.0/22
185.163.172.0/22
185.196.48.0/22
185.207.184.0/22
185.208.24.0/22
188.241.154.0/24
IPv6:
2a03:1140::/32
2a0a:6640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42658
56550
211886
Signature Algorithm: sha256WithRSAEncryption
a3:d6:ea:8a:14:11:1f:01:f3:b3:9b:e7:a8:cf:32:28:1e:d5:
67:fa:88:3f:49:5c:af:4c:41:66:be:67:cd:a0:f4:11:6e:40:
7d:24:64:73:db:1b:f4:dc:3c:8e:49:69:38:37:c2:e0:e2:c2:
2c:36:74:ce:ea:c6:96:1c:af:e7:34:39:33:33:cf:bb:33:96:
a3:9d:97:8f:6b:fb:3c:fc:63:b7:b5:2e:a9:5b:a3:ff:80:da:
06:5a:d9:77:6a:7a:1a:1c:52:16:4f:a3:85:76:7f:31:de:16:
9a:ff:79:4e:62:20:4c:f2:6e:7a:3c:ba:fa:34:42:5b:ff:44:
0b:1a:9b:f3:ad:c9:90:1a:c8:62:e3:ca:05:6c:c3:3d:30:bb:
45:cc:02:64:d9:5a:f6:99:44:df:f5:23:9d:de:fa:80:6c:e5:
c5:bc:7d:9a:c2:20:85:dc:a9:d8:22:d7:c6:f3:94:8b:c3:7b:
0c:38:0d:e7:5d:36:f8:a8:4e:f0:c9:9d:98:d1:78:dc:44:1b:
6d:c5:34:77:49:3e:79:2f:99:ff:56:16:5e:f5:62:17:73:0f:
58:62:1d:c4:e7:5b:c2:5b:73:58:db:80:c6:ea:2c:75:5f:e5:
b1:bb:68:c5:d1:a1:ce:be:ee:b5:82:bd:2b:51:be:7f:56:a7:
74:fb:ae:ce
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAZQmbEW1fccYej7kL7lXLPHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTJkMTIwOTcwNTE1ODQ2MzYwZWEyMjNlOWEwZTZhM2MzODk2OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzZmhDK0yYYLOBpa6i56H/TNIXUU
YSZgUzOBwsldvhG2A8rVit6G8CsifuHf/XKNc/YV8jDhnPPTrsTz3jpYlyXrOko0
y0rwZ7sZK+HyNi8Qi+C2A0xbop5fdSgjPvd/C064gWZURaA6t6GqHB/6n7tAJRaY
n6Z6oLQULRfxrFDcIFzM5d7McEALGr+IRSIm2OLaXEFjsOFGmQpGKCIq4a4Qqf0o
J8h6KTn6cwsZG6lSOGZgPPQYEHqqHfgmJIHX9GLvcJyJ92Gd2l08+nb3hgHncqLA
xSK/OPySnUbMV/8jjU3TE+amlSU36RhTZ+8uckdKRwdarIBA2E1YByj93wIDAQAB
o4IDaTCCA2UwHQYDVR0OBBYEFCktEglwUVhGNg6iI+mg5qPDiWk0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2RlOTEz
OS1hOWQwLTQ5M2EtOTI2MC1lZDBmMjU2YTVmZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvZGU5MTM5
LWE5ZDAtNDkzYS05MjYwLWVkMGYyNTZhNWZlMy8xL0tTMFNDWEJSV0VZMkRxSWo2
YURtbzhPSmFUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHdBggrBgEF
BQcBBwEB/wSBzTCByjCBsQQCAAEwgaoDBAAfDhwDBAMfsSgDBAAf1pkDBAEuZrwD
BABVzHcDBABVzJMDBABWabEDBAFZIKgDBAFZILoDBABZIYUDBABZIqEDBABZJOQD
BABZKhkDBAFdcz4DBAFddZgDBAFddawDBABesX8DBANfjtADBABt5tQwDAMEAYAA
egMEB4AAAAMEArkIGAMEArmdNAMEArmjrAMEArnEMAMEArnPuAMEArnQGAMEALzx
mjAUBAIAAjAOAwUAKgMRQAMFAyoKZkAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID
AKaiAgMA3OYCAwM7rjANBgkqhkiG9w0BAQsFAAOCAQEAo9bqihQRHwHzs5vnqM8y
KB7VZ/qIP0lcr0xBZr5nzaD0EW5AfSRkc9sb9Nw8jklpODfC4OLCLDZ0zurGlhyv
5zQ5MzPPuzOWo52Xj2v7PPxjt7UuqVuj/4DaBlrZd2p6GhxSFk+jhXZ/Md4Wmv95
TmIgTPJuejy6+jRCW/9ECxqb863JkBrIYuPKBWzDPTC7RcwCZNla9plE3/Ujnd76
gGzlxbx9msIghdyp2CLXxvOUi8N7DDgN5102+KhO8MmdmNF43EQbbcU0d0k+eS+Z
/1YWXvViF3MPWGIdxOdbwltzWNuAxuosdV/lsbtoxdGhzr7utYK9K1G+f1andPuu
zg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:19 2025 by rpki-client on console.sobornost.net