Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer (raw, json)
Hash identifier: 9J2T4+hc+MLEtF/4tEL9Seyo7FP4U9ZEZen1AKctKZU=
Subject key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3E484B3116FD2B61403F6AC488C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15595
AS: 44078
IP: 46.37.192.0/19
IP: 79.135.192.0/19
IP: 81.25.224.0/20
IP: 185.191.80.0/22
IP: 185.191.112.0/22
IP: 2a02:d300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:48:4b:31:16:fd:2b:61:40:3f:6a:c4:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:85:c1:1e:5b:5a:44:a8:7e:ed:c1:4e:52:
84:22:a8:cf:e0:e2:73:b8:51:6e:34:f0:b4:0a:92:
a9:1d:0a:b9:51:a3:b0:80:7d:f9:e9:38:00:03:de:
fa:d1:1a:4c:61:b4:44:de:49:4f:54:f6:be:3f:7a:
07:dd:6e:fd:79:22:7c:6c:4e:31:17:29:fb:fe:43:
12:00:44:9b:8f:d3:1e:0a:59:98:c2:53:df:45:6e:
f7:04:25:95:2c:4c:ee:e9:dc:90:89:4a:b3:b1:de:
99:ee:10:c0:c8:4b:4f:95:06:89:68:79:62:09:7c:
81:41:15:bc:95:02:e0:5c:78:c9:f4:60:a7:d8:ca:
b7:cf:d9:75:69:41:f6:02:6f:61:00:90:90:fd:d1:
8b:f9:da:5b:8d:72:67:d4:b5:ad:65:bc:0d:00:d3:
ff:76:f6:72:93:18:ad:e5:99:79:e3:d9:cf:34:ce:
32:37:f3:64:07:be:17:b5:d8:58:21:20:93:d4:a5:
bd:b0:23:2c:91:56:cd:ee:24:a1:45:4f:28:ab:41:
0f:79:20:74:d6:dd:50:21:f4:48:61:b4:97:3c:98:
11:f4:0d:6c:8f:c2:70:90:d9:78:b9:24:52:05:2f:
5d:cb:67:f9:fb:d6:1a:32:fd:67:f8:46:d8:ab:af:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
81.25.224.0/20
185.191.80.0/22
185.191.112.0/22
IPv6:
2a02:d300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15595
44078
Signature Algorithm: sha256WithRSAEncryption
aa:fe:ad:f9:ad:87:fb:c7:7b:d1:aa:32:69:a7:7f:17:84:24:
1a:b4:f3:a0:8c:f8:92:e4:cc:91:a7:6b:6b:98:71:43:c4:50:
7f:3e:91:9e:da:96:c4:6e:c2:4c:ca:f7:ff:83:17:77:3d:be:
e8:5b:b7:ae:08:dc:b4:66:9c:7e:c6:59:4f:3e:3d:6b:01:bf:
bb:13:24:69:f9:40:04:46:95:99:0d:1a:a4:77:44:38:ba:97:
a7:8b:26:5d:db:fe:15:79:85:cb:e3:33:38:6a:34:5e:9b:4f:
ac:21:2a:f3:cb:02:76:40:f3:1a:94:88:69:10:6a:a3:c3:58:
a2:4d:8c:63:4d:41:30:d7:25:3b:e9:fe:76:c5:cf:b9:c9:0b:
00:74:1f:19:12:1e:5a:b5:5e:e7:9d:ea:95:e6:2b:58:25:c6:
c9:a0:1d:c2:c8:bb:75:6d:20:5a:17:a1:e8:d5:fe:f9:50:46:
4b:f3:c1:ae:50:16:e3:a1:95:88:fe:5b:30:b2:7a:17:b3:fd:
14:ee:30:89:ce:15:0f:9a:0c:61:cc:97:42:87:99:3c:2e:50:
b4:8d:9e:d7:30:53:cd:d8:16:de:db:1a:26:96:4d:82:31:3d:
a6:b7:8d:c7:0a:ff:80:46:02:fe:b4:fa:a6:ee:db:c6:07:9c:
ec:cd:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net