Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
File: koAW21XmZLpyHhmumrQxbBDZZwg.cer (raw, json)
Hash identifier: 4FnpcYCquR1vRNqbz8nibxxWc0PZwUHN+FMMoCNz3cs=
Subject key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA3F0EF7929D1FA61F815C2E6AE975
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.43.97.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:0e:f7:92:9d:1f:a6:1f:81:5c:2e:6a:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=928016db55e664ba721e19ae9ab4316c10d96708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:c4:c7:cd:0d:d2:ad:82:27:a7:63:16:d6:
72:de:df:be:b7:79:44:00:d0:3b:b1:00:46:4b:6e:
65:53:af:59:de:39:2b:a5:1e:db:5d:06:50:42:77:
19:d0:60:92:8a:0d:44:81:b5:b8:bc:18:72:dd:e8:
6e:53:8b:d4:de:ec:fc:46:ec:f3:2d:de:3b:81:86:
e4:88:64:d8:d8:90:6e:19:ae:80:f0:45:41:88:41:
7a:44:6c:f1:2b:46:3a:6b:85:5c:07:60:b1:ff:6b:
6a:03:6a:15:f1:a4:f8:8c:dc:d7:7f:db:e7:95:a2:
73:3b:ff:24:50:5b:a4:98:55:1f:9b:9a:08:54:31:
d0:cb:82:38:76:3b:18:75:4d:63:f6:29:d3:e0:d5:
ee:d4:4c:b8:3b:0c:24:e3:b8:9a:fe:12:84:f4:d0:
0a:f7:75:e4:ef:1d:f7:77:2b:ad:25:73:4e:5e:1a:
32:d8:71:f9:de:84:bd:6b:cb:f9:cb:a2:68:20:0d:
4d:c8:d0:dc:d3:fe:d9:9b:7e:a6:fe:24:20:e3:0b:
b1:30:9e:c5:69:9c:8f:99:5e:8f:bf:f8:d1:49:b2:
c8:23:1b:14:ba:43:28:f0:1d:97:06:6d:a6:28:cd:
71:54:fb:7c:88:59:f7:fa:31:20:cc:4f:0b:15:1c:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:24:bf:8e:28:a2:0b:78:bb:68:b5:7c:4c:20:56:1d:6d:45:
95:3f:e2:a7:70:f0:8e:5f:07:d1:d6:8f:dc:66:af:1b:f4:94:
af:8c:ea:56:83:2c:c8:bf:d8:72:62:12:47:64:08:60:9f:13:
0c:fb:cc:93:d2:13:26:0d:1e:8d:b0:9d:9c:26:18:fa:57:34:
75:57:c4:9c:69:47:77:3a:8d:fe:cf:b9:48:c6:08:9b:30:2f:
59:31:54:f3:6f:f3:45:67:69:41:36:da:cf:b4:d2:f8:c2:9a:
d7:6d:9b:1f:2d:78:be:ac:78:8b:50:8f:15:e9:b6:a6:a5:08:
e1:38:17:de:27:c1:7a:c8:9c:2c:52:05:c7:49:0f:68:94:13:
6b:53:3d:41:32:77:5b:e9:94:d8:d8:9f:42:56:a0:b6:59:55:
85:70:0f:12:71:04:40:82:4b:95:66:56:44:14:e5:02:93:da:
0b:e0:1a:42:8a:f7:86:76:cc:7f:27:77:74:e9:64:17:92:a3:
af:7f:cb:47:ca:dd:c6:d1:e6:8e:8f:40:dc:25:3b:33:a6:12:
2b:0b:5f:fb:28:c5:b9:4f:1b:d4:bd:d9:ba:ee:e2:c7:6a:e6:
f4:8e:de:c7:87:4c:d8:5e:bb:ec:30:c2:87:12:3c:a9:b5:52:
a7:41:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:23 2025 by rpki-client on console.sobornost.net