Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
File: kCmtIleaaAXB_4se5dc1KQwBNAs.cer (raw, json)
Hash identifier: iWv+dU2fjZZhD35EY1UllzabBfAMNqe/TPQMxnBjS9s=
Subject key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC6774ECE61081C0720A56FF5ED58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210145
IP: 193.168.58.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c6:77:4e:ce:61:08:1c:07:20:a5:6f:f5:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:3a:b6:9f:38:67:f4:4f:d0:35:33:70:30:
db:b0:94:60:39:70:0d:95:1b:60:e0:c5:6f:f8:0c:
2f:24:32:ee:7c:da:ad:97:f2:3f:c4:c0:a5:08:ba:
71:69:35:3d:f5:35:ae:9d:47:a4:89:68:e8:87:cb:
ec:88:33:c0:5c:4a:8d:ff:7f:77:97:48:39:cd:97:
c2:a7:ab:03:a0:72:2f:77:30:ae:c4:c3:33:c1:ea:
b7:64:cf:1f:6e:f8:27:1d:49:e1:b9:13:9c:b0:f6:
5d:f1:98:07:73:ec:8b:9d:7e:02:33:31:84:24:91:
73:f1:74:16:15:b1:ce:00:d3:01:c3:50:03:e7:0d:
44:cc:0e:fa:b1:2b:ea:28:5d:d8:45:66:4f:0b:76:
bb:6c:bb:37:b4:a8:9d:b6:11:d4:99:a9:f3:9c:b4:
f5:11:01:eb:be:14:b0:c0:c7:eb:20:30:9b:37:c5:
09:94:68:56:91:4a:ca:02:a3:94:c6:f7:d0:95:80:
e4:92:44:d3:db:67:1c:cb:91:6f:66:38:ff:70:2b:
a6:0b:ca:09:0d:d9:a9:a2:bf:c6:70:9c:66:eb:15:
28:72:b0:06:39:43:51:33:ce:7e:0e:8c:d7:1c:85:
6b:2e:bd:90:f3:71:6a:46:f1:b0:78:e6:6b:ee:01:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.58.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210145
Signature Algorithm: sha256WithRSAEncryption
3f:c1:8f:de:00:8c:59:f5:fc:3f:77:42:b6:9c:9b:ce:c7:a2:
fe:6c:81:6c:c6:f5:b9:28:ae:11:04:70:41:58:98:f1:0c:ca:
5c:f3:cf:60:90:94:53:c9:f7:d5:a9:e1:25:12:55:22:d7:9b:
36:ae:02:17:cc:99:cb:47:f4:5a:e1:3e:53:13:b4:6e:d8:57:
fa:93:b5:42:eb:e3:08:74:38:91:20:12:30:97:ce:d0:ac:c6:
a3:ec:f3:a4:41:60:71:71:31:7f:ad:b6:45:a6:f2:f3:c2:17:
b9:86:ff:97:bb:58:35:ad:02:ac:f2:6c:91:46:e9:fb:f2:07:
d2:ee:90:f7:bb:86:52:4a:90:53:4d:84:ea:e7:87:70:b9:b9:
e3:ba:9c:90:c0:f2:ad:1f:6a:fb:6b:a0:04:16:3a:da:5c:ed:
e9:c1:94:9e:e1:8e:18:56:d6:95:13:36:e1:79:5a:5c:36:d0:
8b:4c:3e:77:5f:bb:30:97:fb:4e:e0:d4:4e:36:66:8b:18:9e:
6f:eb:03:2d:c6:38:4c:a8:f2:3b:a0:80:7f:e7:59:cf:48:79:
bd:85:a0:e5:64:74:ea:5f:62:4d:70:b5:11:4b:3d:0f:12:46:
21:13:34:04:9a:25:27:64:01:5d:af:09:2c:73:d1:bc:0e:49:
d5:90:66:a5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQiH8Z3Ts5hCBwHIKVv9e1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDI5YWQyMjU3OWE2ODA1YzFmZjhiMWVlNWQ3MzUyOTBjMDEzNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgg6tp84Z/RP0DUzcDDbsJRgOXAN
lRtg4MVv+AwvJDLufNqtl/I/xMClCLpxaTU99TWunUekiWjoh8vsiDPAXEqN/393
l0g5zZfCp6sDoHIvdzCuxMMzweq3ZM8fbvgnHUnhuROcsPZd8ZgHc+yLnX4CMzGE
JJFz8XQWFbHOANMBw1AD5w1EzA76sSvqKF3YRWZPC3a7bLs3tKidthHUmanznLT1
EQHrvhSwwMfrIDCbN8UJlGhWkUrKAqOUxvfQlYDkkkTT22ccy5FvZjj/cCumC8oJ
Ddmpor/GcJxm6xUocrAGOUNRM85+DozXHIVrLr2Q83FqRvGweOZr7gHjxwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJAprSJXmmgFwf+LHuXXNSkMATQLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2VkYWVm
ZS1jODcwLTQxNDctOWUzYi1jNzk5ZDZkNjE0NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZWRhZWZl
LWM4NzAtNDE0Ny05ZTNiLWM3OTlkNmQ2MTQ0YS8xL2tDbXRJbGVhYUFYQl80c2U1
ZGMxS1F3Qk5Bcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwag6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM04TANBgkqhkiG9w0BAQsFAAOCAQEAP8GP3gCMWfX8P3dCtpybzsei/myBbMb1
uSiuEQRwQViY8QzKXPPPYJCUU8n31anhJRJVItebNq4CF8yZy0f0WuE+UxO0bthX
+pO1QuvjCHQ4kSASMJfO0KzGo+zzpEFgcXExf622Raby88IXuYb/l7tYNa0CrPJs
kUbp+/IH0u6Q97uGUkqQU02E6ueHcLm547qckMDyrR9q+2ugBBY62lzt6cGUnuGO
GFbWlRM24XlaXDbQi0w+d1+7MJf7TuDUTjZmixieb+sDLcY4TKjyO6CAf+dZz0h5
vYWg5WR06l9iTXC1EUs9DxJGIRM0BJolJ2QBXa8JLHPRvA5J1ZBmpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net