Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer (raw, json)
Hash identifier: mEK1+4chJjE31hnrVSBrbbMkajWkPPZYPy2dE7pb15E=
Subject key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C222F929994B7C19CFFCCD5FD9F70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8711
AS: 25549
AS: 43550
IP: 46.229.64.0/20
IP: 80.69.176.0/20
IP: 82.117.64.0/19
IP: 91.192.172.0/22
IP: 91.201.72.0/22
IP: 93.91.160.0/20
IP: 95.170.128.0/19
IP: 95.181.128.0/22
IP: 109.202.0.0/19
IP: 178.57.192.0/20
IP: 185.18.124.0/22
IP: 185.37.164.0/22
IP: 195.49.168.0/22
IP: 195.60.244.0/22
IP: 212.17.0.0/19
IP: 217.29.80.0/20
IP: 2a00:1730::/32
IP: 2a00:f920::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:22:2f:92:99:94:b7:c1:9c:ff:cc:d5:fd:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:b1:e8:04:44:9f:56:23:2e:3d:e6:b6:f1:
0a:a9:e3:72:8e:3c:1d:11:c5:77:b4:24:66:7c:a5:
98:95:27:36:c5:93:07:02:57:14:2a:d1:d5:1a:0a:
29:63:1e:9c:0a:43:24:a2:1c:29:36:21:ae:c9:0b:
ce:21:12:c3:45:3c:db:10:5d:be:24:e9:bd:6c:9d:
ab:53:35:a2:39:30:c1:42:e9:8f:37:a8:ad:7a:8f:
c0:42:25:e6:9a:39:6b:66:64:b5:fa:4f:26:ec:95:
ed:31:64:a0:25:21:2f:e2:1b:31:77:7d:2d:bf:40:
1a:37:68:31:f9:a4:da:e2:a9:22:cd:92:d1:18:45:
bf:31:01:d2:49:81:e6:a5:87:68:6a:29:fd:91:3f:
8d:dc:aa:36:d1:ee:e0:62:f8:a1:3f:eb:51:7a:1b:
4f:09:41:4c:42:01:2b:1f:dc:7e:a7:84:c5:10:5b:
58:71:ac:88:96:6a:ba:5e:a6:67:dc:f2:ac:02:f9:
92:43:fa:22:06:95:f8:bf:45:4d:b8:df:36:a5:9a:
bb:19:ed:7d:cc:d6:32:21:20:85:bb:cf:bf:b2:a5:
d3:71:ed:12:ac:e4:96:d7:f2:12:d4:4a:54:58:19:
a4:d2:04:09:fc:5a:df:fa:6b:08:19:50:72:fc:39:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.64.0/20
80.69.176.0/20
82.117.64.0/19
91.192.172.0/22
91.201.72.0/22
93.91.160.0/20
95.170.128.0/19
95.181.128.0/22
109.202.0.0/19
178.57.192.0/20
185.18.124.0/22
185.37.164.0/22
195.49.168.0/22
195.60.244.0/22
212.17.0.0/19
217.29.80.0/20
IPv6:
2a00:1730::/32
2a00:f920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8711
25549
43550
Signature Algorithm: sha256WithRSAEncryption
80:cf:a4:8b:3a:ed:4b:3b:55:8c:12:3a:3e:40:c9:18:82:fe:
e6:ca:a8:4b:70:69:86:bf:48:0d:d8:b8:81:f9:b1:c9:43:4d:
fd:b6:b5:03:4c:a2:23:39:f6:54:6d:d9:e8:a3:17:0a:e1:24:
dc:4d:3a:df:4b:c0:06:d4:e3:6d:83:fc:05:44:e2:f5:6a:d5:
30:2f:a8:af:a6:09:ee:3c:3e:5e:bc:7e:83:52:25:41:9d:5d:
aa:d1:72:5a:7e:ec:cd:b2:d9:3a:a5:c2:15:1a:b0:8d:8f:08:
bc:53:a4:5e:89:64:98:40:88:7d:14:98:3f:24:da:61:72:f2:
3d:d8:83:34:79:98:fd:0d:8b:01:53:7f:73:bb:96:ef:a1:2b:
94:da:87:51:74:9c:a0:82:9d:c1:f6:c8:4d:ae:5f:5e:70:ea:
16:69:e8:8e:47:9d:79:aa:4b:3c:f5:78:17:e8:5c:1c:8d:5b:
82:a3:49:69:bd:5c:8f:b6:14:a9:b6:f7:c4:9f:32:45:53:90:
73:11:2e:99:20:d2:fa:67:cb:a8:3e:83:9a:63:a4:8f:d9:5d:
88:af:a2:d3:7a:e1:60:e7:a7:f1:1d:3a:81:05:c8:53:37:88:
af:df:c9:53:37:86:8d:9b:64:34:71:f1:01:70:d0:72:67:96:
31:3f:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:19 2025 by rpki-client on console.sobornost.net