Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
File: KY60_lwZ8pLyiSTL8VVaj1do2CY.cer (raw, json)
Hash identifier: r9zhedsPTndLn3Hvimk0xkSTrTsS0S462gHcmWBSc8o=
Subject key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421443EC9B9CE30D542F4A26AE932A99B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41563
IP: 89.254.128.0/18
IP: 185.182.92.0/22
IP: 2a09:2ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3e:c9:b9:ce:30:d5:42:f4:a2:6a:e9:32:a9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:72:f8:62:7d:cc:34:96:96:36:ae:99:7e:
f7:25:06:25:c8:46:3a:75:54:1a:00:6e:1b:aa:3b:
1f:ae:f1:1c:82:54:11:18:02:d5:ef:32:4a:05:b5:
d0:3d:ee:d9:43:11:93:70:6c:2b:7e:ea:18:bb:4b:
11:56:aa:f6:80:3b:06:f8:8b:50:51:de:a3:46:34:
4b:cc:8b:88:51:bd:5f:f7:cd:ba:64:a8:c2:7e:ee:
ca:d1:30:19:b2:f6:6f:61:2d:76:fe:89:c2:b5:97:
8e:85:07:bf:bd:79:29:b8:4e:1d:92:41:8b:ce:73:
d7:f1:a1:8b:f8:4e:85:d7:40:ff:4f:a0:1a:e4:89:
08:a1:b6:81:48:66:39:c1:8d:32:fa:15:0e:b9:b0:
6a:65:d6:8a:4f:4c:ea:0d:03:a4:05:18:7d:12:93:
7b:e3:a9:02:a3:24:72:17:83:3d:d7:b9:93:ce:2a:
c9:d4:03:e4:a1:58:04:eb:13:54:c3:2d:e1:35:73:
b6:06:ef:ab:cb:67:09:6a:d0:f3:6a:82:5a:4c:39:
a9:bc:3d:fe:68:5c:26:17:e9:71:52:10:3e:aa:2f:
4b:42:90:24:76:a3:af:1d:9a:e5:9e:01:55:16:c6:
73:2a:3f:3f:85:6a:24:64:a6:d8:8c:f8:d0:60:ba:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.128.0/18
185.182.92.0/22
IPv6:
2a09:2ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41563
Signature Algorithm: sha256WithRSAEncryption
7d:a2:0b:05:20:a5:a6:5c:ff:2b:19:67:86:c2:85:7e:87:08:
31:2f:10:8e:7e:32:76:ea:00:9b:16:df:c3:1d:15:aa:a9:31:
32:1a:2d:a6:9e:aa:1d:59:3c:90:9c:6a:59:2f:72:d2:2b:9f:
32:4a:d0:77:f0:a0:1e:04:fa:cb:1c:67:dc:ad:76:38:cb:21:
16:c8:59:1f:b7:38:01:75:d2:5d:e7:2d:1c:c8:1a:b1:8f:07:
42:4e:a7:e0:66:bf:28:f7:d5:da:22:f6:78:53:fd:bb:c5:4e:
35:74:82:5e:df:35:7a:42:f5:d6:20:db:1b:dc:4b:3b:7f:68:
d5:1b:34:01:e3:14:2e:c1:c9:b7:dc:2d:19:0a:b6:bf:77:a6:
db:b3:aa:19:5f:96:cb:ad:95:f4:6a:c3:6b:b0:12:6f:74:69:
47:17:d4:9b:27:66:6c:00:a9:2d:2b:f3:b5:9a:4a:93:e8:2e:
4f:24:97:ed:82:e2:85:82:10:5c:fb:b6:11:19:31:69:d1:75:
41:5b:68:68:1b:a7:3c:4d:32:02:2b:c9:0d:a0:fc:01:ce:50:
7f:85:a1:0c:32:b4:c5:59:1b:98:f4:2b:84:71:4b:cb:86:40:
ac:fc:b2:50:bc:7b:d9:2a:44:6b:04:62:fc:b7:f6:fa:84:46:
af:1c:2b:14
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQhRD7Juc4w1UL0omrpMqmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOThlYjRmZTVjMTlmMjkyZjI4OTI0Y2JmMTU1NWE4ZjU3NjhkODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1y+GJ9zDSWljaumX73JQYlyEY6
dVQaAG4bqjsfrvEcglQRGALV7zJKBbXQPe7ZQxGTcGwrfuoYu0sRVqr2gDsG+ItQ
Ud6jRjRLzIuIUb1f9826ZKjCfu7K0TAZsvZvYS12/onCtZeOhQe/vXkpuE4dkkGL
znPX8aGL+E6F10D/T6Aa5IkIobaBSGY5wY0y+hUOubBqZdaKT0zqDQOkBRh9EpN7
46kCoyRyF4M917mTzirJ1APkoVgE6xNUwy3hNXO2Bu+ry2cJatDzaoJaTDmpvD3+
aFwmF+lxUhA+qi9LQpAkdqOvHZrlngFVFsZzKj8/hWokZKbYjPjQYLp2LwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFCmOtP5cGfKS8okky/FVWo9XaNgmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzk3MTEx
Yy0yZTYxLTQzNTktODc2Ni02YmVkZjJmYmRjZTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvOTcxMTFj
LTJlNjEtNDM1OS04NzY2LTZiZWRmMmZiZGNlMi8xL0tZNjBfbHdaOHBMeWlTVEw4
VlZhajFkbzJDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQGWf6AAwQCubZcMA0EAgACMAcDBQMqCSrAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCiWzANBgkqhkiG9w0BAQsFAAOCAQEAfaIL
BSClplz/KxlnhsKFfocIMS8Qjn4yduoAmxbfwx0VqqkxMhotpp6qHVk8kJxqWS9y
0iufMkrQd/CgHgT6yxxn3K12OMshFshZH7c4AXXSXectHMgasY8HQk6n4Ga/KPfV
2iL2eFP9u8VONXSCXt81ekL11iDbG9xLO39o1Rs0AeMULsHJt9wtGQq2v3em27Oq
GV+Wy62V9GrDa7ASb3RpRxfUmydmbACpLSvztZpKk+guTySX7YLihYIQXPu2ERkx
adF1QVtoaBunPE0yAivJDaD8Ac5Qf4WhDDK0xVkbmPQrhHFLy4ZArPyyULx72SpE
awRi/Lf2+oRGrxwrFA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:26 2025 by rpki-client