Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer (raw, json)
Hash identifier: L2zMfpFoV2IT8xjVQIGHfqDILK7yrQ2NPuOkOqowDm8=
Subject key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422202795F343059E3977C640D8BC4183
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.80.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:27:95:f3:43:05:9e:39:77:c6:40:d8:bc:41:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:28:3f:e1:36:c6:94:2d:54:23:12:17:d6:
37:ed:ae:a5:8c:4f:a8:0e:17:1e:31:ce:ee:5e:40:
3d:b6:ba:a2:91:a3:47:e8:be:d0:26:dc:9a:1a:0f:
31:91:d4:48:27:70:08:57:92:ed:6c:17:82:24:df:
1b:8c:05:a2:33:0c:a0:ea:62:a4:7a:67:bb:e8:e2:
ca:2d:55:37:0d:cb:9d:d0:8f:4e:0a:8a:7d:cc:0c:
de:a8:29:12:ca:1f:94:df:8a:37:7e:e3:5b:62:0e:
59:8f:3c:df:b4:f9:33:8b:aa:3a:4b:46:f1:7b:0c:
23:06:82:e6:9a:48:34:d5:72:85:d0:16:36:b0:eb:
07:17:28:04:95:66:bd:f3:ed:ae:8d:c1:95:1a:b3:
94:32:bc:6f:0a:86:05:f2:c1:15:4c:60:8b:1c:aa:
8b:32:8d:b9:80:1c:03:a6:3d:ac:3b:84:a1:2a:fd:
f6:5f:75:86:19:dd:40:cf:14:88:9a:1b:5c:72:3f:
b5:d0:f0:06:22:e9:8f:ed:a8:14:dd:de:04:59:1a:
e6:67:c8:d3:46:d9:1a:62:5d:92:35:a0:6c:08:54:
ae:fa:87:b4:db:cf:a3:46:a4:69:04:b9:2f:45:46:
a7:37:db:3a:3e:2f:8a:77:dd:69:a5:1f:c9:91:20:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.80.0/24
Signature Algorithm: sha256WithRSAEncryption
46:13:f3:32:33:20:87:e6:e3:9b:10:58:56:f2:38:d3:82:ca:
1b:b1:41:b0:2d:50:cc:59:37:ee:82:d6:b1:36:d9:f5:88:9c:
8a:c6:1b:bb:46:ca:07:82:c4:01:e4:f0:78:1e:eb:12:64:5c:
94:82:29:e5:41:38:14:09:34:9e:f5:1d:d7:37:08:78:6f:75:
91:3e:83:40:2e:9d:af:42:f7:5f:f2:47:4a:cd:b3:d0:75:8d:
e7:bf:d8:0e:14:3f:51:8d:7c:0f:40:4a:3e:8e:2f:b5:a4:3c:
3d:e2:63:83:86:aa:30:f8:ab:0e:24:4a:80:fe:04:f8:29:5e:
2a:08:4d:be:39:d8:36:82:ba:12:79:73:86:39:b8:34:ab:c9:
be:7a:64:1f:f5:00:ed:01:f0:9d:39:59:d5:7f:40:02:9e:e8:
ec:d6:df:46:f3:78:dd:4f:2f:b7:9f:dc:47:74:14:c6:87:a5:
13:a7:db:59:d2:2e:33:e9:d0:23:57:02:e6:da:f3:64:cb:7d:
02:6d:f5:d4:b6:bc:fe:41:dd:8a:45:d2:fe:a7:21:ec:e2:51:
45:66:9c:ba:54:f8:8c:3c:18:74:2b:d0:d4:51:34:fe:1a:8d:
93:4b:ef:73:a9:4c:1d:56:f7:98:ae:27:ff:a2:62:34:bb:20:
e2:4a:06:19
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiICeV80MFnjl3xkDYvEGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk1NGUyOGY2ZTAxY2E1YzczNTNiYzM3MmYzNjlhNWY1MWQ5YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EoP+E2xpQtVCMSF9Y37a6ljE+o
DhceMc7uXkA9trqikaNH6L7QJtyaGg8xkdRIJ3AIV5LtbBeCJN8bjAWiMwyg6mKk
eme76OLKLVU3Dcud0I9OCop9zAzeqCkSyh+U34o3fuNbYg5ZjzzftPkzi6o6S0bx
ewwjBoLmmkg01XKF0BY2sOsHFygElWa98+2ujcGVGrOUMrxvCoYF8sEVTGCLHKqL
Mo25gBwDpj2sO4ShKv32X3WGGd1AzxSImhtccj+10PAGIumP7agU3d4EWRrmZ8jT
RtkaYl2SNaBsCFSu+oe028+jRqRpBLkvRUanN9s6Pi+Kd91ppR/JkSCgmQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCiVTij24BylxzU7w3LzaaX1HZu0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2YzNzAy
Ny1hZmM0LTQ0NGYtODAwOC05NWNlMmM3NTVkNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZjM3MDI3
LWFmYzQtNDQ0Zi04MDA4LTk1Y2UyYzc1NWQ0Ny8xL0tKVk9LUGJnSEtYSE5UdkRj
dk5wcGZVZG03US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwYpQMA0GCSqGSIb3DQEBCwUAA4IBAQBGE/My
MyCH5uObEFhW8jjTgsobsUGwLVDMWTfugtaxNtn1iJyKxhu7RsoHgsQB5PB4HusS
ZFyUginlQTgUCTSe9R3XNwh4b3WRPoNALp2vQvdf8kdKzbPQdY3nv9gOFD9RjXwP
QEo+ji+1pDw94mODhqow+KsOJEqA/gT4KV4qCE2+Odg2groSeXOGObg0q8m+emQf
9QDtAfCdOVnVf0ACnujs1t9G83jdTy+3n9xHdBTGh6UTp9tZ0i4z6dAjVwLm2vNk
y30CbfXUtrz+Qd2KRdL+pyHs4lFFZpy6VPiMPBh0K9DUUTT+Go2TS+9zqUwdVveY
rif/omI0uyDiSgYZ
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:59:03 2025 by rpki-client