Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.cer (raw, json)
Hash identifier: zZXFfbpP8jOrFFcpR2+1klTRsH4ttVNPcwIqlv+j4PI=
Subject key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3BD3E708B9F3B800EC82AC5706EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41358
AS: 41907
IP: 194.34.198.0/24
IP: 195.74.92.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:d3:e7:08:b9:f3:b8:00:ec:82:ac:57:06:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:cd:13:25:1e:65:ff:b0:06:4d:9d:21:89:
2e:80:b9:50:71:4d:2f:34:8d:f4:b2:22:2b:8f:fc:
10:f8:fb:a8:0e:c9:c8:c5:e9:29:4c:2d:e8:61:e0:
06:c0:2d:9d:07:76:9e:a5:e0:71:5a:6c:69:2e:68:
4e:8a:78:68:e1:2d:0a:7e:94:2f:c1:17:b2:e6:e2:
c7:cc:4e:05:61:67:9d:d1:0a:b1:6d:db:38:17:fe:
25:a0:32:5c:fb:e5:7b:7c:c5:bf:af:57:9f:0d:0e:
dd:1d:26:ed:02:d2:e5:e2:51:64:ef:d0:7c:1e:43:
6b:a3:1a:76:82:19:b6:1d:9d:ef:ac:eb:fc:2c:b6:
02:fd:7d:6f:62:7d:6f:46:be:33:b1:11:53:f5:90:
fa:f9:9d:7c:98:83:f8:3c:47:8f:22:ce:3e:34:8d:
04:1b:df:4a:c3:10:34:81:9c:0b:3e:32:5c:a5:22:
de:a5:d2:0c:26:cf:71:64:65:c1:82:3a:59:d4:c9:
18:39:04:18:5b:34:21:7d:4b:1c:da:62:cd:f1:90:
ba:61:3b:2f:54:22:f2:02:2f:a3:46:5d:5a:54:a8:
aa:2d:ec:cb:87:ce:bf:70:4f:23:09:12:a4:23:9e:
c5:21:08:40:2b:5e:28:cd:f3:9d:91:57:fe:4d:d9:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.198.0/24
195.74.92.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41358
41907
Signature Algorithm: sha256WithRSAEncryption
54:64:68:0c:74:69:ae:58:3f:ed:aa:b5:44:9f:45:b5:30:b2:
9a:f9:9f:92:f2:17:8e:5b:d0:12:2f:64:be:fe:31:ea:44:e7:
93:ff:4c:3e:fa:83:b4:0f:98:5a:dc:47:78:a9:1d:36:40:81:
ba:e4:67:2e:bf:0a:b4:b6:3e:cb:64:b4:2e:7e:05:38:d2:c0:
22:7d:2f:c0:db:68:27:ee:16:43:58:9d:20:d9:cd:ad:9f:7b:
25:87:54:3d:3c:37:0c:f4:30:12:2d:82:f8:36:6b:32:40:eb:
91:e4:70:f1:1b:e7:da:5d:70:e8:fe:a2:2d:04:4a:d1:4d:8d:
d2:12:e5:dc:a3:d0:93:e4:cc:81:2a:63:76:88:70:5e:4f:86:
80:04:4b:11:88:11:63:d4:07:15:75:72:7d:aa:a0:49:1a:74:
a7:32:e1:0e:b3:11:28:a9:cc:2a:67:28:04:fa:df:e6:4d:dd:
b5:9b:ff:c5:c9:7e:c1:05:46:f3:d7:54:fe:5a:24:18:dc:ad:
a5:98:1b:c8:cf:b4:58:09:88:f3:b8:23:80:99:c9:5a:58:cd:
16:10:fb:5a:57:1f:0d:78:2e:ce:1f:b4:86:bb:77:41:2b:b1:
db:4c:75:6f:e4:ca:7c:ad:0e:54:f3:4c:08:49:cc:9a:25:03:
87:4f:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:42 2025 by rpki-client