Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.cer (raw, json)
Hash identifier: yRZZ+gD16TjJeZbtzoDow61KnoMIvtEWJ1/pQAlfT88=
Subject key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B082B8C8356176DCAFD9A4BAB32C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43594
IP: 95.215.124.0/22
IP: 185.184.232.0/22
IP: 2a0b:4380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b0:82:b8:c8:35:61:76:dc:af:d9:a4:ba:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912f169fc744cbe895a9f85edab796d4ac700029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:78:7d:db:f0:53:df:d0:58:fa:5c:e1:ab:
99:73:9a:f5:1c:6a:c3:41:85:77:a6:46:35:22:67:
dd:34:b0:8c:df:8e:09:ac:1b:55:68:69:50:a2:dc:
7b:15:60:0c:92:f0:b2:7a:68:c8:f3:f7:c6:f1:c3:
0d:4d:d3:b3:bd:60:bf:48:9d:79:9f:52:96:90:8f:
80:0e:52:f6:a6:5e:49:2e:a9:e3:27:46:e7:5c:e0:
b4:89:90:24:4b:74:1e:17:83:79:11:eb:0f:65:25:
75:a8:3b:68:fb:9c:b0:ae:f5:1f:60:4e:3d:86:ad:
96:44:e7:d9:72:3d:8b:0b:15:bf:9f:71:de:d9:4e:
27:24:aa:eb:b5:b0:e4:bb:f7:c7:70:db:d5:fb:66:
2c:ca:15:5a:ec:22:0d:71:82:31:98:66:2c:70:0d:
2d:82:7a:e3:d1:ea:b3:8c:30:b0:ce:d6:a4:ea:e6:
02:f2:de:5f:5e:66:3d:43:c4:13:7f:99:2d:a3:29:
46:c0:8a:57:c6:8c:11:88:1c:fc:0f:bb:d0:dc:3e:
60:75:c0:7a:b2:09:54:fb:cc:08:44:4f:44:83:9d:
c3:b7:23:32:40:51:78:48:60:3c:6e:e4:e2:71:95:
15:2f:d8:5b:bd:63:d9:55:aa:44:9d:8d:b9:37:d6:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.124.0/22
185.184.232.0/22
IPv6:
2a0b:4380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43594
Signature Algorithm: sha256WithRSAEncryption
76:60:28:20:c5:fd:f7:da:60:38:bf:05:48:ea:25:88:f0:38:
53:b1:57:3c:91:cd:30:59:4e:42:29:4e:c9:3f:1d:1c:92:46:
44:c3:b3:1f:da:21:7f:24:3e:62:73:c5:4a:75:dd:bc:8d:e0:
98:d5:b7:e9:38:08:8d:47:29:2d:11:8e:fe:20:2a:35:8a:1a:
76:6f:e3:38:df:fd:51:5a:4f:7a:63:23:0d:65:16:16:96:5d:
39:86:b1:ae:fd:7c:bd:1d:39:9c:a0:ee:97:a6:93:0f:11:b2:
92:1d:82:97:57:3e:af:af:68:38:a4:56:b9:e8:97:91:20:c5:
a0:2b:f6:c5:09:81:3d:dc:e6:7e:d0:53:b1:67:87:5b:fe:ec:
93:62:fb:a5:29:78:af:cb:be:d3:41:ed:c7:29:97:50:06:dc:
f4:6d:79:dd:41:82:35:f2:13:c9:4d:46:90:63:17:26:4a:4f:
7d:a2:2a:9d:3b:6d:bd:b4:3d:09:60:ed:3a:de:bf:1d:a0:6d:
55:e5:83:92:ae:a7:1e:fe:9f:0f:11:c1:a4:64:04:f5:bc:7e:
79:03:7f:76:c0:ef:d1:3c:7f:43:a2:c5:eb:3a:65:ae:cb:98:
fb:a2:7d:14:47:99:77:64:4f:e2:b9:75:30:37:9d:33:4c:23:
bd:6a:80:41
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQkRLCCuMg1YXbcr9mkurMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTJmMTY5ZmM3NDRjYmU4OTVhOWY4NWVkYWI3OTZkNGFjNzAwMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXJ4fdvwU9/QWPpc4auZc5r1HGrD
QYV3pkY1ImfdNLCM344JrBtVaGlQotx7FWAMkvCyemjI8/fG8cMNTdOzvWC/SJ15
n1KWkI+ADlL2pl5JLqnjJ0bnXOC0iZAkS3QeF4N5EesPZSV1qDto+5ywrvUfYE49
hq2WROfZcj2LCxW/n3He2U4nJKrrtbDku/fHcNvV+2YsyhVa7CINcYIxmGYscA0t
gnrj0eqzjDCwztak6uYC8t5fXmY9Q8QTf5ktoylGwIpXxowRiBz8D7vQ3D5gdcB6
sglU+8wIRE9Eg53DtyMyQFF4SGA8buTicZUVL9hbvWPZVapEnY25N9boFQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFJEvFp/HRMvolan4Xtq3ltSscAApMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzlkNTRj
Yi03Y2ViLTQ1OGYtYmQ3Ny1iMjI4M2M5YTUzNmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvOWQ1NGNi
LTdjZWItNDU4Zi1iZDc3LWIyMjgzYzlhNTM2Zi8xL2tTOFduOGRFeS1pVnFmaGUy
cmVXMUt4d0FDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCX9d8AwQCubjoMA0EAgACMAcDBQMqC0OAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqSjANBgkqhkiG9w0BAQsFAAOCAQEAdmAo
IMX999pgOL8FSOoliPA4U7FXPJHNMFlOQilOyT8dHJJGRMOzH9ohfyQ+YnPFSnXd
vI3gmNW36TgIjUcpLRGO/iAqNYoadm/jON/9UVpPemMjDWUWFpZdOYaxrv18vR05
nKDul6aTDxGykh2Cl1c+r69oOKRWueiXkSDFoCv2xQmBPdzmftBTsWeHW/7sk2L7
pSl4r8u+00HtxymXUAbc9G153UGCNfITyU1GkGMXJkpPfaIqnTttvbQ9CWDtOt6/
HaBtVeWDkq6nHv6fDxHBpGQE9bx+eQN/dsDv0Tx/Q6LF6zplrsuY+6J9FEeZd2RP
4rl1MDedM0wjvWqAQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:45 2025 by rpki-client