Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
File: kVVkGgex5FW3iSuS2A1gkSORsg0.cer (raw, json)
Hash identifier: +8NTrCWqIow4EPRwZ+k3KUm5OC+iXZMVx4BoqZJfepI=
Subject key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D100EF3AD49C3E6E8B25150080F2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51146
IP: 91.203.156.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:10:0e:f3:ad:49:c3:e6:e8:b2:51:50:08:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9155641a07b1e455b7892b92d80d60912391b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:17:f0:7f:c1:9d:d0:6c:7b:30:0b:ff:98:
80:c2:60:82:29:e7:a7:c3:4d:37:3f:53:06:54:e4:
66:ec:02:b1:de:e1:ff:eb:e7:f0:b7:d0:a1:07:83:
39:0b:28:f6:71:20:a0:9c:8e:aa:95:ef:9b:85:97:
7b:f0:e5:9d:d8:cf:8c:dd:8d:56:18:07:b6:07:6f:
0b:b4:04:ab:b1:20:24:88:50:2b:60:94:7a:d6:ac:
2b:1e:c8:b7:b6:e8:d9:2d:ed:5b:e7:d9:df:62:2d:
81:54:60:08:d2:ee:a7:1d:4e:6f:b2:1d:2f:13:70:
62:ef:8b:e4:c1:54:1d:17:9f:d5:30:53:5b:0d:06:
c1:3a:58:8f:77:14:63:c8:61:69:8e:cf:46:45:64:
a5:06:47:14:0c:ea:e4:e8:d5:8d:ce:fa:c6:5d:d4:
e8:34:59:43:67:2f:5d:85:6b:7a:5b:d0:35:53:4f:
fc:64:e8:b1:3c:29:1f:65:98:16:2a:b7:84:0e:69:
23:e0:33:9b:c2:5c:98:ea:b1:d7:4f:de:f5:83:67:
ec:fa:42:ae:9d:38:5c:bb:7a:c7:8e:de:dd:e2:ea:
3e:78:fe:a9:d0:47:45:93:dc:e5:b6:a3:68:ad:9c:
04:82:9f:ce:2e:57:ec:4e:fa:26:4e:cb:45:0b:36:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51146
Signature Algorithm: sha256WithRSAEncryption
ab:40:f2:45:09:3f:22:a8:fc:cc:97:93:e5:12:f7:92:d6:b0:
9c:3c:13:25:45:e7:af:eb:85:ce:0e:3d:7e:76:ff:dc:72:22:
be:c7:a0:8f:a6:02:ee:a7:37:66:54:53:d4:06:a7:3e:f1:01:
ac:74:5d:71:c3:3a:b4:8b:6e:e7:21:07:fa:01:1d:6a:c3:f2:
3c:93:52:1b:2b:f2:d2:a6:ce:84:cb:c1:f0:61:b6:6f:40:59:
1d:83:46:3e:c9:04:2e:cb:15:eb:f4:8e:01:e6:71:85:23:2e:
3f:4c:d8:08:df:f5:f6:f9:39:0d:ce:2c:b4:57:26:5d:79:08:
f4:8d:3e:37:48:dd:8d:4b:60:c7:7a:f4:11:85:3a:fa:f2:92:
f5:f0:77:06:47:7a:df:ef:d3:00:a7:43:38:74:f9:b8:ff:c2:
6f:54:6c:49:52:95:82:56:1e:d6:55:64:51:5d:56:90:c1:f5:
56:39:2d:e3:20:f7:b2:35:80:96:81:5f:13:41:5f:33:96:0f:
7e:1f:12:fb:71:d4:73:bb:6b:2c:e7:3d:04:bc:9f:ca:21:0b:
a6:cf:ae:58:46:e2:88:e6:db:5d:df:e6:f9:87:18:78:9f:09:
cc:63:b1:4d:14:fd:2b:98:e2:ec:80:be:d4:7e:c1:d7:82:ee:
f8:d4:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:22 2025 by rpki-client on console.sobornost.net