Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
File: Kt1DinzjyzefKM-gUc9j1a2P48o.cer (raw, json)
Hash identifier: zGk+aEAm1wHNWhtJAkF9CnAvLRnuOefaNQignwivFIM=
Subject key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C2C43C96F19D1A29DBCAD7CA6B3B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42209
AS: 43309
AS: 44340
IP: 2.56.168.0/24
IP: 185.216.51.0/24
IP: 185.234.252.0/24
IP: 2a0f:ca00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:43:c9:6f:19:d1:a2:9d:bc:ad:7c:a6:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:e4:d9:dc:71:83:6c:c0:f5:c9:7a:a8:26:
a8:c4:b2:bc:e1:d3:70:4f:b9:b4:b3:4f:54:5f:8a:
d6:a2:a4:af:39:5d:b7:10:15:cd:f8:18:31:87:bc:
3e:50:6a:fc:11:5e:29:75:60:69:10:9a:10:f9:47:
47:aa:e8:06:78:41:7b:3f:c4:4f:35:72:9a:0c:6c:
90:33:d4:dc:fe:5d:37:b9:6f:b1:14:4b:88:a5:1c:
8f:a1:33:5b:b1:21:f0:3a:23:40:a6:58:b9:b2:9e:
10:f4:b0:8c:1d:69:93:4b:21:66:7c:22:81:77:d8:
60:f9:30:76:68:d5:69:08:93:cd:14:96:26:e9:ef:
00:d6:8b:24:07:3d:86:d4:f1:c3:fe:c2:d1:92:d2:
d2:9a:f5:5e:53:1c:8e:13:89:53:a2:1a:6b:3d:22:
cc:95:63:15:f7:6e:24:41:97:23:e7:b9:b3:31:5f:
05:e6:44:72:3f:bf:98:d3:04:df:71:3d:4e:1b:1d:
5c:e6:77:93:16:fa:82:a4:c1:7b:62:6b:f6:fc:e0:
78:db:ae:64:70:ea:07:03:ec:a3:38:56:4e:65:3c:
87:8e:1f:0d:4d:ff:30:2e:d8:3b:a5:66:f5:5a:6a:
ff:87:a3:e1:57:ab:fe:38:1d:05:0d:9e:85:e2:f6:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.168.0/24
185.216.51.0/24
185.234.252.0/24
IPv6:
2a0f:ca00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42209
43309
44340
Signature Algorithm: sha256WithRSAEncryption
33:73:dc:fd:4c:72:b4:fe:3e:b3:b7:51:39:a6:6c:a3:6b:34:
57:8e:9d:3c:1c:c4:93:b4:7f:8f:5c:26:cb:85:95:d9:d2:17:
bd:6a:25:b2:90:ba:f9:a2:9c:5a:cd:7d:f9:ff:dc:66:24:f2:
07:fc:49:2d:b6:f1:67:3c:13:a2:61:cf:79:a7:06:08:93:b1:
5c:90:25:68:a2:09:5d:f5:60:0a:91:50:43:82:6c:d3:8b:1f:
df:ed:7e:bc:fb:0e:c6:71:c0:75:8f:01:7b:71:8d:f7:a8:df:
ea:b7:6a:b9:ff:42:8f:2c:85:aa:62:e2:0d:95:e7:b6:26:3c:
62:22:09:b1:db:45:66:27:8a:a8:87:39:92:ea:c8:6b:1e:89:
b8:bb:2a:02:6e:a6:40:b5:96:dd:b1:aa:a2:6a:6b:08:60:c0:
72:43:bc:31:e3:de:de:12:29:8e:ac:07:a5:c1:87:39:e1:17:
ac:1f:cf:50:83:9f:a5:23:20:00:4f:97:97:52:ac:8d:2e:be:
d8:25:44:4f:c0:77:d4:88:52:bd:66:94:b3:47:53:62:99:4a:
09:78:5e:e9:66:7a:df:48:ac:29:76:85:a6:9d:22:69:a9:fe:
95:0e:fb:ba:eb:7f:87:5b:cf:08:68:9c:a9:30:c8:54:11:58:
27:ad:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:21 2025 by rpki-client on console.sobornost.net