Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer (raw, json)
Hash identifier: JC6ZGxWgIpCb592It+z47bURu07bJgWYnbCKwbNu3PY=
Subject key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B58D0A9271E7A2E8CCD914F720C273
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62420
IP: 193.203.26.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:0a:92:71:e7:a2:e8:cc:d9:14:f7:20:c2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:68:8e:85:6d:32:42:de:7e:97:df:2b:b1:
08:51:3d:de:d5:2e:61:61:35:0d:5c:76:a7:a8:c7:
f9:3e:2a:83:73:85:a5:ac:e5:e1:f9:e5:f4:8a:ee:
4f:8b:e6:c2:85:6d:67:20:c2:21:03:b4:69:d5:e1:
e2:38:be:ee:e1:1b:ab:9d:b7:66:8e:81:29:ae:25:
b4:45:15:63:b0:48:f1:62:27:14:d6:3c:25:37:4c:
8b:fa:f9:56:b8:c1:7b:f3:fb:4b:8a:7c:cf:ed:01:
3f:1c:d2:52:ab:d4:6b:31:71:f8:a1:7a:98:57:af:
9a:40:21:26:d9:fb:07:21:ea:c7:18:08:d3:50:d1:
c0:ce:6b:88:63:65:70:37:fa:a8:47:de:80:ac:fc:
42:50:47:30:24:c1:5f:e7:47:f4:d1:20:cd:30:76:
1f:92:3f:c6:55:68:e6:21:ae:23:ff:93:55:1c:3f:
35:10:86:a7:f4:d8:54:f8:83:5b:75:e2:9b:60:20:
3b:43:69:41:d8:8a:0c:05:7a:67:41:13:64:bb:b4:
f9:6f:89:1f:ef:b7:e3:59:af:16:33:07:1b:69:cf:
c2:be:9b:28:8b:ac:53:7c:ca:82:8b:c7:3f:0a:a8:
78:04:bc:79:bc:f3:a9:ff:a9:98:0d:d1:f0:9e:60:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.26.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62420
Signature Algorithm: sha256WithRSAEncryption
a7:d3:d9:f0:8d:10:c1:27:10:24:d3:45:d6:26:7f:ba:cb:63:
9e:ad:fe:cb:99:94:8e:4f:18:9c:20:6b:20:da:dd:4b:41:17:
3e:f5:11:c0:af:3c:2b:2c:06:10:69:d3:5c:07:e4:3d:32:76:
9e:53:2f:f6:b1:d3:ba:48:15:ba:cb:e7:65:7c:1f:e7:aa:de:
32:01:31:1f:72:65:90:f2:49:05:94:3a:72:3b:c3:f9:3c:49:
80:fb:8e:63:77:ff:8e:23:9a:f5:bb:a2:11:99:df:29:d1:9c:
38:7e:3d:6d:69:d5:5d:90:4a:90:cc:8e:16:e3:27:9b:83:73:
83:28:b2:5e:64:32:60:a0:7f:68:48:1a:4b:dd:42:b5:2d:ea:
b2:89:e6:d5:1c:5b:e1:fa:70:6a:b6:42:b6:48:a2:7f:9d:9c:
22:fe:c7:cc:31:a1:7e:bb:e3:c4:52:09:a4:b7:af:34:77:34:
59:75:68:34:20:d4:d0:06:e6:ce:da:9f:cd:d4:06:af:8e:e7:
db:73:dc:1a:3c:89:12:18:40:1c:cc:e5:25:87:5e:1d:92:5b:
64:98:b6:bd:75:3d:84:a4:38:dc:10:44:61:96:5f:96:92:48:
87:61:a1:a8:32:cf:df:15:0b:d4:9b:88:ea:2d:cc:46:d9:71:
b1:d5:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:10 2025 by rpki-client