Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.cer (raw, json)
Hash identifier: wx5Amjki27L/ORQNtJrGVcxfrklMd8usn+LZqQRSOF0=
Subject key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218C2A2F0B6B12E8854BBD164A30A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211212
IP: 185.196.52.0/22
IP: 185.203.184.0/22
IP: 185.232.99.0/24
IP: 2a0a:66c0::/32
IP: 2a0a:ec40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8c:2a:2f:0b:6b:12:e8:85:4b:bd:16:4a:30:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=282c93d266852788e49982d9f7a620db6d9f588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:59:29:66:93:b4:75:96:20:ef:ea:16:07:
89:9c:6b:8a:4e:67:94:b1:75:39:36:d4:33:e7:87:
b9:03:4d:93:15:c0:08:05:45:b9:ec:79:a0:ac:b5:
c7:aa:b1:85:f7:23:17:33:3a:57:55:67:20:4e:a2:
c5:5c:2e:8b:e0:bb:f0:d3:2a:cf:13:da:72:4d:48:
f7:41:7f:26:78:d9:f9:d5:97:f2:a4:53:bb:05:6a:
d6:5e:1c:26:42:f1:96:b8:88:c7:82:5b:eb:9f:63:
a9:7d:32:7f:31:7a:ff:45:f6:f7:8a:d9:ac:4d:36:
95:03:ba:f5:6b:00:c8:43:14:74:c4:a1:a1:6e:e8:
5d:4c:ac:45:e4:ed:80:5c:b6:6d:de:a7:82:e7:86:
72:d9:fd:08:ce:ad:ca:90:f7:34:81:82:57:5c:e9:
23:55:3d:55:24:d1:8c:e6:38:d9:df:5b:4c:ef:1d:
0c:f2:1d:54:c0:96:03:33:4a:ca:88:29:b7:54:41:
9f:ac:8e:71:78:93:68:2b:64:d5:d7:8d:65:92:cd:
2e:35:84:03:ba:88:e8:aa:1f:7a:03:46:4b:7b:81:
54:2f:6e:d8:1b:2a:84:08:c4:81:52:da:c8:9b:1c:
df:87:38:d8:b5:91:8c:16:29:17:d0:18:dd:01:c7:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.52.0/22
185.203.184.0/22
185.232.99.0/24
IPv6:
2a0a:66c0::/32
2a0a:ec40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211212
Signature Algorithm: sha256WithRSAEncryption
1d:50:a1:5c:1e:35:ff:76:38:da:e7:33:f3:d2:03:7d:f1:53:
2b:b3:98:4e:d3:a7:ca:11:18:f2:87:4f:23:eb:67:a5:5c:62:
1a:e0:47:dd:34:3f:44:3f:1c:16:fa:cd:55:a0:59:75:55:3b:
af:2e:33:99:31:78:2c:a3:99:75:bf:2f:71:0b:cf:1f:89:e9:
df:87:61:99:d7:bc:f4:af:29:01:1e:7d:ed:4f:d7:de:67:ac:
5e:da:45:0f:d7:b1:20:96:1f:68:30:f5:84:be:cf:9d:ed:b9:
6b:4a:ab:3a:5e:85:80:f0:81:20:16:64:07:a9:9a:8a:65:95:
fa:6f:5a:f0:e5:90:2a:b9:47:06:40:cb:fc:27:14:f2:cf:86:
d5:36:f7:13:8e:37:7c:aa:6c:74:9e:f3:2f:53:8f:71:f5:8c:
83:1e:6e:dd:a6:23:ad:32:b8:53:97:5b:ba:a2:4a:62:d0:d1:
f4:13:69:dc:e9:d4:58:be:4e:8c:74:4c:3a:4a:8e:42:09:b4:
ea:64:44:c6:91:af:26:ec:24:f4:cf:e8:ac:6a:1a:87:43:8a:
2b:a1:9a:c9:bc:f3:dc:6a:8b:05:7e:43:46:b0:d6:22:a9:9c:
cd:73:d5:2d:12:09:bf:67:42:15:8e:76:96:3d:10:9c:c3:aa:
78:f5:aa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:44 2025 by rpki-client