Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
File: KBZKV1f91XJaYIRPKufvc7EHpMA.cer (raw, json)
Hash identifier: Y4Fdz7y4mnRkJYGAxAaZGBHH2CqAPyjLx8eLkm9J3Mw=
Subject key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD1F3567BD1B95613232E1A98B39B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206377
IP: 185.178.180.0/22
IP: 2a0a:6780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:f3:56:7b:d1:b9:56:13:23:2e:1a:98:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:14:52:cf:ec:f8:4d:7e:02:b8:d9:f4:6f:
2e:3d:75:38:8f:1f:c1:72:f6:ca:b4:2b:cc:1d:ef:
5c:cb:07:04:50:5e:6e:90:c6:93:22:ce:7a:4a:53:
53:a3:19:5e:22:3e:45:1a:0a:e5:49:dd:69:1c:25:
68:d6:c2:34:cd:21:7e:19:6b:3a:58:e2:da:d5:9f:
a1:8d:0b:cb:d7:3a:f8:fc:f4:51:73:54:0e:ff:0d:
81:b2:a4:15:a9:4b:37:52:2c:bd:2a:64:1c:2e:03:
30:30:32:25:48:e7:24:cf:48:3e:5b:bc:4c:46:58:
5e:aa:55:fc:1a:69:2e:dc:5b:65:cc:77:49:af:76:
ad:99:e6:08:6b:28:91:66:8f:94:53:6a:f7:da:af:
a9:7d:d7:f0:b9:f5:2e:5d:8d:f9:d3:4c:bf:63:e0:
12:44:c6:2a:44:a3:ea:9c:a1:6e:1f:31:68:94:d1:
1c:9c:63:40:71:7f:51:0a:ae:27:30:45:49:b7:2f:
44:24:6e:40:e8:7d:a1:90:a0:44:b7:52:8c:19:ef:
37:1c:2d:c4:6a:d0:0a:c3:cb:ad:f6:e2:4e:74:db:
ce:8f:f0:0d:e3:ba:58:60:71:a4:cb:f0:81:20:da:
66:68:0c:f4:65:c4:bd:35:f9:1a:75:34:84:b6:22:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.180.0/22
IPv6:
2a0a:6780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206377
Signature Algorithm: sha256WithRSAEncryption
a1:8e:ec:23:cc:34:31:4e:a8:9c:72:c6:59:f5:a3:b6:a2:b1:
11:1d:2a:ee:a7:16:ea:c2:8b:c4:59:50:e7:d4:28:c5:bd:92:
95:32:7f:5e:ad:43:b1:40:0d:69:d3:bb:fd:2a:28:e2:2a:5c:
b8:2b:83:f9:44:a8:2d:62:a0:85:16:af:aa:3c:3f:03:0d:4c:
7d:c0:18:97:b6:39:b6:c9:63:9a:66:d1:c1:7c:18:dd:62:bf:
1c:a3:e6:bd:09:e3:c6:9c:44:0a:ec:12:a7:7e:19:2a:eb:89:
77:47:5d:f2:6c:e6:c2:c9:03:82:3f:12:79:c8:62:e2:c1:45:
74:26:38:fa:0e:b9:5e:a8:68:2e:a4:c0:4c:dc:8e:12:41:e6:
a5:4d:7e:b3:fd:bb:c5:8b:e6:1f:f2:77:27:56:82:8d:44:11:
c0:74:b4:96:ca:07:88:7e:eb:0a:0d:45:da:5a:ef:ba:d3:6f:
59:ff:8d:76:ba:79:e9:75:1d:02:45:97:11:e1:82:00:73:2a:
d1:87:95:9b:23:5e:93:48:1b:2f:e2:43:24:5f:c4:e9:e0:ad:
d6:52:85:fe:94:aa:a6:71:4a:2a:77:06:bf:74:db:93:db:b2:
a4:0d:b1:d6:ba:62:e4:fb:67:3c:14:89:c3:79:6d:80:6c:c9:
39:20:17:78
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQma9HzVnvRuVYTIy4amLObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODE2NGE1NzU3ZmRkNTcyNWE2MDg0NGYyYWU3ZWY3M2IxMDdhNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogUUs/s+E1+ArjZ9G8uPXU4jx/B
cvbKtCvMHe9cywcEUF5ukMaTIs56SlNToxleIj5FGgrlSd1pHCVo1sI0zSF+GWs6
WOLa1Z+hjQvL1zr4/PRRc1QO/w2BsqQVqUs3Uiy9KmQcLgMwMDIlSOckz0g+W7xM
RlheqlX8Gmku3FtlzHdJr3atmeYIayiRZo+UU2r32q+pfdfwufUuXY3500y/Y+AS
RMYqRKPqnKFuHzFolNEcnGNAcX9RCq4nMEVJty9EJG5A6H2hkKBEt1KMGe83HC3E
atAKw8ut9uJOdNvOj/AN47pYYHGky/CBINpmaAz0ZcS9NfkadTSEtiLXXwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCgWSldX/dVyWmCETyrn73OxB6TAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4Lzk1NTM1
Yi1lNjMwLTQ1N2YtOGEwMS1hZWFlNWJiYzM5MjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTU1MzVi
LWU2MzAtNDU3Zi04YTAxLWFlYWU1YmJjMzkyMC8xL0tCWktWMWY5MVhKYVlJUlBL
dWZ2YzdFSHBNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubK0MA0EAgACMAcDBQMqCmeAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmKTANBgkqhkiG9w0BAQsFAAOCAQEAoY7sI8w0MU6o
nHLGWfWjtqKxER0q7qcW6sKLxFlQ59Qoxb2SlTJ/Xq1DsUANadO7/Soo4ipcuCuD
+USoLWKghRavqjw/Aw1MfcAYl7Y5tsljmmbRwXwY3WK/HKPmvQnjxpxECuwSp34Z
KuuJd0dd8mzmwskDgj8Sechi4sFFdCY4+g65XqhoLqTATNyOEkHmpU1+s/27xYvm
H/J3J1aCjUQRwHS0lsoHiH7rCg1F2lrvutNvWf+Ndrp56XUdAkWXEeGCAHMq0YeV
myNek0gbL+JDJF/E6eCt1lKF/pSqpnFKKncGv3Tbk9uypA2x1rpi5PtnPBSJw3lt
gGzJOSAXeA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:42 2025 by rpki-client