Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.cer (raw, json)
Hash identifier: 6ET1qXBe3ynbYu21aKrT1R5zTtiIx3kqfD+gVvcx3RY=
Subject key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427477DBE8316B03EAA051C17DF517B34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197481
IP: 91.213.33.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7d:be:83:16:b0:3e:aa:05:1c:17:df:51:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3e:69:9d:4f:04:bb:68:05:3c:31:bc:3c:a7:
87:20:5f:2a:eb:17:02:0e:a5:61:54:fb:fe:50:86:
4b:36:20:95:8a:f8:a7:9b:b7:7b:c5:00:f8:13:8c:
1c:e3:52:41:4b:14:41:4c:d9:a2:41:5f:bd:97:7a:
ba:f6:9e:92:c2:5e:a9:2f:8c:ad:9d:ae:07:19:97:
32:ec:a7:6f:d6:16:9d:2f:9f:25:15:cb:a6:01:24:
bd:34:11:e3:a1:ca:f7:ee:4e:4e:2d:d4:44:3e:ba:
c3:b6:16:67:b8:48:87:4a:58:72:2c:aa:89:68:19:
74:71:e3:a3:c7:d9:7c:ae:f3:69:09:e9:b5:ab:0f:
14:9b:4e:c3:18:4d:4a:ac:0c:6c:af:ad:13:5d:9c:
a0:86:76:b2:6a:4e:39:de:9b:d8:9e:42:6b:db:f4:
61:22:00:f5:6c:60:68:78:88:40:eb:f5:1b:14:53:
50:b2:41:77:1b:34:bf:86:42:fb:0e:ab:a9:62:42:
67:72:6b:d5:a3:92:b5:dc:0d:ae:ca:2f:f4:d2:e5:
b3:6d:66:bc:89:88:22:70:d0:86:cc:ca:09:b7:c4:
3f:a5:4b:47:be:2b:28:23:50:a3:8f:4e:d2:c8:8a:
1f:08:83:a4:b4:c0:9d:c9:9d:5a:6e:d8:05:a0:1d:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.33.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197481
Signature Algorithm: sha256WithRSAEncryption
2b:08:10:d2:68:3b:5d:1d:6b:b6:04:f3:a9:ef:27:0f:c9:f6:
4a:99:e6:a4:82:a0:bf:26:2c:16:78:b2:ec:90:fe:d4:71:73:
eb:70:9a:ec:a4:c4:a1:d0:72:66:b3:2b:cd:11:ab:d2:4a:43:
13:a9:fe:24:3c:95:b6:8b:31:33:e5:39:7f:e1:5d:12:af:0a:
92:eb:3d:5d:23:63:99:75:c5:c9:be:4c:ea:18:8b:f7:ec:c8:
8e:c3:23:d9:9d:79:b5:9b:ab:ef:32:6b:49:08:08:4f:c2:c8:
38:a6:27:58:31:3d:3d:e2:ed:e9:46:91:47:57:78:b1:73:20:
d9:ac:e4:9a:b6:2c:22:eb:20:17:52:93:b9:cf:15:7a:2f:08:
c2:a3:43:39:d4:ed:2c:83:83:ee:70:f6:45:06:18:0d:fa:69:
e3:d7:5e:b3:72:9b:d1:d9:bb:d0:12:eb:7d:71:df:a6:67:b6:
ae:55:a7:66:f5:60:92:25:2f:60:88:d7:34:da:54:9e:38:a8:
ba:e6:27:de:bf:6e:a0:19:6f:a2:99:80:d9:66:e3:f0:f1:4d:
d8:2f:50:1d:78:40:18:6d:49:2e:3a:f1:5e:cd:28:b2:fe:1c:
9a:97:98:b2:af:47:52:44:f0:12:15:26:8f:35:87:a4:ce:b9:
db:04:0a:b3
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQnR32+gxawPqoFHBffUXs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzBhNTcyYzE2ZDBjNDRmNzc2NjU4N2Q5MmQ4NzhiYTMwNTQxZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j5pnU8Eu2gFPDG8PKeHIF8q6xcC
DqVhVPv+UIZLNiCVivinm7d7xQD4E4wc41JBSxRBTNmiQV+9l3q69p6Swl6pL4yt
na4HGZcy7Kdv1hadL58lFcumASS9NBHjocr37k5OLdREPrrDthZnuEiHSlhyLKqJ
aBl0ceOjx9l8rvNpCem1qw8Um07DGE1KrAxsr60TXZyghnayak453pvYnkJr2/Rh
IgD1bGBoeIhA6/UbFFNQskF3GzS/hkL7DqupYkJncmvVo5K13A2uyi/00uWzbWa8
iYgicNCGzMoJt8Q/pUtHvisoI1Cjj07SyIofCIOktMCdyZ1abtgFoB2QxwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJMKVywW0MRPd2ZYfZLYeLowVB0eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2FhNTVh
Mi1lMzNlLTRkYzAtOWQ4Ny04Y2M2NTc5NDE1ZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYWE1NWEy
LWUzM2UtNGRjMC05ZDg3LThjYzY1Nzk0MTVkYS8xL2t3cFhMQmJReEU5M1psaDlr
dGg0dWpCVUhSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9UhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMDaTANBgkqhkiG9w0BAQsFAAOCAQEAKwgQ0mg7XR1rtgTzqe8nD8n2SpnmpIKg
vyYsFniy7JD+1HFz63Ca7KTEodByZrMrzRGr0kpDE6n+JDyVtosxM+U5f+FdEq8K
kus9XSNjmXXFyb5M6hiL9+zIjsMj2Z15tZur7zJrSQgIT8LIOKYnWDE9PeLt6UaR
R1d4sXMg2azkmrYsIusgF1KTuc8Vei8IwqNDOdTtLIOD7nD2RQYYDfpp49des3Kb
0dm70BLrfXHfpme2rlWnZvVgkiUvYIjXNNpUnjiouuYn3r9uoBlvopmA2Wbj8PFN
2C9QHXhAGG1JLjrxXs0osv4cmpeYsq9HUkTwEhUmjzWHpM652wQKsw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:24 2025 by rpki-client