Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
File: KtclXVpq-4XjdugbuaCew93dvNw.cer (raw, json)
Hash identifier: obmAC1Cs8CgdRrzHkbt9/e/q5dh2knTkXlRTMTiT65g=
Subject key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252216D517ECF658EA16AF0CDC374E29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59528
IP: 91.220.190.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:16:d5:17:ec:f6:58:ea:16:af:0c:dc:37:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:a7:7b:e5:c1:ee:73:d8:30:fb:64:c3:15:
8d:e5:16:be:da:42:ec:5d:a7:15:de:50:b7:69:e9:
e6:93:7a:3b:f0:8c:4e:68:e7:9d:e5:9b:50:80:74:
cb:1a:da:25:5c:bd:d6:b1:a2:90:e4:ec:b2:68:90:
db:51:5c:22:a9:d7:ba:c1:59:60:b1:7f:c9:97:40:
29:64:0a:fc:95:ec:25:6c:07:59:11:45:c1:f1:bc:
6e:fb:b4:97:1f:31:b2:1f:2a:bd:38:4e:ec:10:14:
43:b1:d1:66:6f:54:eb:29:ee:53:a2:d4:22:ec:48:
0e:fb:47:86:a5:fa:ed:69:31:2b:d1:dd:58:8d:df:
c0:e6:59:d3:a4:e9:a9:f3:0c:c8:44:88:45:f6:6a:
e9:03:9b:15:db:e2:12:ab:39:d9:bc:a3:47:e9:f0:
60:dc:8d:7b:cd:b8:5c:ca:01:1b:ec:cc:08:2b:cd:
89:fe:0a:06:61:8a:40:94:ec:0b:ed:10:12:e3:3d:
08:fc:7b:6d:d1:ef:8a:40:64:51:e1:fb:b8:76:24:
b2:27:34:89:67:b5:73:3f:7f:d8:0d:3f:9c:b9:a6:
74:cf:24:52:e0:a3:72:36:4a:6e:01:f0:fe:54:ec:
1d:24:d1:5f:ca:08:6b:b2:a3:61:43:56:f1:c7:dc:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.190.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59528
Signature Algorithm: sha256WithRSAEncryption
32:a3:9a:30:d6:38:cb:47:58:1e:cc:03:55:3c:02:3e:50:e5:
f5:7f:85:84:c4:c3:51:e2:72:2b:d3:fe:6c:d9:46:45:dc:bd:
16:a1:51:00:5b:6e:18:04:16:9e:16:f2:f1:f3:7b:8f:00:e9:
fc:d8:91:84:26:34:3c:4c:69:bf:46:3c:7d:cb:f9:c7:73:18:
b7:11:a5:9f:27:44:c0:b3:36:0d:bf:41:db:f6:7c:9f:15:c5:
42:75:4d:1b:4d:6c:11:07:cc:17:73:3f:a2:57:4f:df:71:28:
eb:d0:fe:c2:30:3e:b5:8f:4b:05:4c:34:78:b4:53:be:92:32:
6f:78:77:49:00:d4:65:58:83:11:61:49:46:60:c4:56:18:65:
61:54:dd:fc:5f:38:4e:37:d8:c3:54:3e:8f:3d:ec:3c:c5:b6:
f9:32:f2:42:49:0b:0a:5c:20:a2:8e:48:a8:8e:3b:67:d8:35:
0c:54:c2:2b:01:79:0a:87:8c:5f:43:55:4b:3c:72:60:c4:c8:
d5:96:0e:81:ae:b2:94:a7:dc:ba:db:ac:07:63:2f:33:f2:1b:
f6:4b:f5:15:1e:ac:40:be:b5:4b:2f:34:57:33:69:81:95:52:
ef:1f:c6:0e:e7:c7:a5:89:3d:b2:13:05:90:1a:e1:50:33:3d:
ed:08:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:21 2025 by rpki-client on console.sobornost.net