Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer (raw, json)
Hash identifier: 46hVp+m9NwB6GBD9my0ZVK5fICIoMLuyk1uJAiyfMbw=
Subject key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424455DFB7CD2F0573004D737B5DA6E6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56962
IP: 91.242.235.0/24
IP: 212.24.121.0/24
IP: 2a11:2740::/29
IP: 2a11:ad40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5d:fb:7c:d2:f0:57:30:04:d7:37:b5:da:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:04:2a:52:c9:6c:3f:50:cb:8c:eb:95:59:
88:c4:49:96:91:da:07:03:f5:8a:13:3b:00:fd:d0:
5a:f6:93:fa:13:7a:36:98:8c:29:1b:e1:7a:f1:d1:
22:cc:b2:fd:5a:19:a1:10:59:d0:3f:e9:1f:da:5c:
c1:a7:5b:07:6f:c4:a3:6a:24:9d:fc:16:6e:f9:b4:
cc:26:f1:ff:ad:8a:5b:91:4a:6d:4e:36:26:9b:2a:
0c:0d:88:fe:cc:53:6a:f2:18:69:78:f0:f0:73:47:
e4:60:e6:1c:44:52:59:e8:40:46:7b:52:18:ec:37:
f2:a6:b4:c7:bf:d9:61:90:9b:4a:04:d0:fa:38:d6:
9f:30:02:02:3b:e4:aa:92:f6:df:a2:8e:ac:df:ec:
43:1f:69:28:9b:47:85:2c:d0:a6:69:b0:c7:e9:7b:
dd:cb:27:93:40:62:bb:71:ba:79:e2:ac:f8:bf:fc:
4b:fd:30:6e:23:74:36:a6:c5:76:68:7e:29:3b:3a:
3e:83:73:8b:ce:b6:d9:7a:72:af:a8:69:db:3f:eb:
92:7a:20:7c:c4:aa:5c:11:ba:55:c4:2f:8f:e1:ec:
47:0a:9e:9b:7f:be:83:64:fa:ac:42:1f:af:a7:91:
e0:1a:ac:52:e9:d4:00:9f:d1:2e:6a:5b:b7:9f:1b:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.235.0/24
212.24.121.0/24
IPv6:
2a11:2740::/29
2a11:ad40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56962
Signature Algorithm: sha256WithRSAEncryption
34:64:75:16:48:cd:00:03:20:1a:cd:74:50:34:ed:49:15:3e:
d3:5b:46:4d:3a:c3:98:8e:75:ae:e3:d7:27:bc:57:ad:2d:7a:
a5:e4:7c:b8:94:19:5d:fc:45:69:a4:34:a7:cb:ef:2b:93:20:
61:df:12:ee:9a:eb:fd:9e:84:4c:5e:91:cd:7d:ac:82:35:9e:
16:a9:9d:29:80:be:7e:5e:52:57:00:f5:d1:55:dc:e2:d0:90:
88:66:b9:71:d5:a8:fd:b6:33:38:94:36:88:65:82:cd:88:0d:
91:dc:eb:8b:08:eb:f3:c3:e1:fd:61:74:7e:9a:39:94:bf:13:
92:99:ac:77:1a:73:00:80:28:71:24:3d:3e:fd:b6:cb:4a:c1:
f1:7b:5c:5b:aa:9c:e4:89:0f:d5:e3:d3:0f:18:ab:5f:2d:4a:
6e:24:46:68:52:b2:ce:fc:a7:fd:1a:25:06:59:f9:cd:51:78:
81:a4:9d:c2:6e:b0:08:d2:d7:47:a8:bf:c1:78:20:d8:1a:04:
22:d3:f4:01:a1:0e:02:59:68:c3:66:98:5a:3e:26:46:57:4f:
d1:38:de:f0:45:55:f0:ae:af:8d:54:dd:36:5a:04:0b:28:5f:
88:05:b7:7f:c2:b1:8b:e6:22:38:93:8e:5a:8b:e0:fa:88:e3:
73:c1:ba:2b
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQkRV37fNLwVzAE1ze12m5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTdjMzNjNzU5NjEzMThkOGVlM2NiMTM0NjRhOTBkMDBhYjhiZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfsEKlLJbD9Qy4zrlVmIxEmWkdoH
A/WKEzsA/dBa9pP6E3o2mIwpG+F68dEizLL9WhmhEFnQP+kf2lzBp1sHb8SjaiSd
/BZu+bTMJvH/rYpbkUptTjYmmyoMDYj+zFNq8hhpePDwc0fkYOYcRFJZ6EBGe1IY
7DfyprTHv9lhkJtKBND6ONafMAICO+Sqkvbfoo6s3+xDH2kom0eFLNCmabDH6Xvd
yyeTQGK7cbp54qz4v/xL/TBuI3Q2psV2aH4pOzo+g3OLzrbZenKvqGnbP+uSeiB8
xKpcEbpVxC+P4exHCp6bf76DZPqsQh+vp5HgGqxS6dQAn9Eualu3nxvDAwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2FjMjcz
YS05YzhiLTRlZjctYTQwMC1jMzc2MWE3NWQwNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvYWMyNzNh
LTljOGItNGVmNy1hNDAwLWMzNzYxYTc1ZDA0Ny8xL2tYd3p4MWxoTVkyTzQ4c1RS
a3FRMEFxNHZTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQAW/LrAwQA1Bh5MBQEAgACMA4DBQMqESdAAwUD
KhGtQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3oIwDQYJKoZIhvcNAQELBQAD
ggEBADRkdRZIzQADIBrNdFA07UkVPtNbRk06w5iOda7j1ye8V60teqXkfLiUGV38
RWmkNKfL7yuTIGHfEu6a6/2ehExekc19rII1nhapnSmAvn5eUlcA9dFV3OLQkIhm
uXHVqP22MziUNohlgs2IDZHc64sI6/PD4f1hdH6aOZS/E5KZrHcacwCAKHEkPT79
tstKwfF7XFuqnOSJD9Xj0w8Yq18tSm4kRmhSss78p/0aJQZZ+c1ReIGkncJusAjS
10eov8F4INgaBCLT9AGhDgJZaMNmmFo+JkZXT9E43vBFVfCur41U3TZaBAsoX4gF
t3/CsYvmIjiTjlqL4PqI43PBuis=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:09:43 2025 by rpki-client