Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.cer (raw, json)
Hash identifier: a6phDPHIT8Wt35jvtgE6WXpJyiUdeupe0CHfYAgEEBE=
Subject key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B54DCF836982839E13AD88B9FD58A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24994
IP: 89.31.72.0/21
IP: 185.5.208.0/22
IP: 194.242.61.0/24
IP: 212.54.224.0/21
IP: 2a03:2700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:54:dc:f8:36:98:28:39:e1:3a:d8:8b:9f:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:b0:7a:ad:c0:76:01:99:f2:ff:42:66:a2:
f3:8a:1f:e1:03:91:c1:48:f5:4d:54:02:81:62:69:
7c:34:17:42:65:81:d9:94:16:63:06:2e:8a:82:55:
3d:9f:df:a0:66:59:c2:33:62:c1:c7:0b:84:0d:3e:
4b:ab:68:d2:92:66:28:52:cc:7d:1b:86:c4:e2:a4:
86:09:8b:83:a2:1d:43:5d:d1:2a:95:db:ce:59:ec:
1e:4c:a7:88:cf:ed:0c:4e:d2:15:7a:b2:af:81:81:
39:d1:fc:a0:26:44:33:29:1c:e0:01:fe:be:ad:d7:
85:ec:8f:0d:11:4a:82:46:36:a5:28:3f:29:12:b1:
8d:bc:d7:fe:4e:73:04:2c:65:2f:f4:5f:f5:3d:d3:
2b:84:13:95:0a:7e:72:e7:1e:d7:f1:38:e4:09:c8:
5d:37:70:70:84:6c:39:2f:71:f2:58:19:4c:c1:37:
6d:ab:89:75:3b:ac:ba:55:41:a0:eb:69:8a:c8:b0:
50:bf:1d:ae:7d:77:a3:af:e3:06:9f:55:86:ef:4c:
97:82:e0:06:3d:c6:4c:aa:9f:16:73:61:72:1a:ff:
30:f0:17:ca:e5:3c:30:6e:e7:c2:9e:32:e7:f8:62:
0c:81:c9:da:4f:94:f2:8b:91:3c:84:25:e7:13:9a:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.72.0/21
185.5.208.0/22
194.242.61.0/24
212.54.224.0/21
IPv6:
2a03:2700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24994
Signature Algorithm: sha256WithRSAEncryption
03:12:a2:8f:41:8d:af:e0:72:15:3d:21:89:af:58:78:50:71:
96:4c:aa:fa:ad:74:d4:32:5c:5f:16:ed:d8:b9:3b:93:a9:dc:
45:e3:3d:3f:b6:8b:61:3e:3d:e8:64:1b:b5:b5:99:cb:0a:75:
c1:d6:fa:a4:20:af:a2:d6:f1:b5:b2:7c:16:5a:a6:e5:d7:14:
1d:dc:c0:20:00:b8:25:fb:55:a2:e7:24:3a:ff:09:a8:15:f5:
34:11:25:eb:f2:91:8d:72:65:92:27:3b:2a:60:b7:31:a1:25:
0c:39:72:9c:8b:f9:1b:b9:8c:75:24:40:a9:6a:a0:26:3e:22:
a5:b0:e3:b6:e2:d1:5e:bd:97:98:e1:8b:65:c7:bf:8c:12:14:
16:94:59:bd:3f:4c:76:b5:19:6c:39:c9:9b:65:bb:cc:44:0e:
75:6a:9b:5d:37:dd:4b:41:e1:12:d7:96:88:cb:5f:f2:8a:b2:
7d:12:22:9a:4f:e0:54:08:d6:58:a7:19:35:a0:b7:22:f1:12:
54:1b:19:67:a6:82:d4:53:9c:95:8c:90:72:2f:ec:fd:32:51:
52:b5:c6:73:6f:5c:5a:3f:56:64:71:06:60:9b:e2:ba:72:30:
dc:63:d3:6a:93:29:19:21:6c:ea:81:63:bf:ea:0d:e2:41:a4:
83:4e:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net