Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer (raw, json)
Hash identifier: FQ/2Hpbhy55n3PibardtDTwbDOdVfM3i6Rjx4xqBIh8=
Subject key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206854F3A39D0254BBA1947C3324AA3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211528
IP: 84.234.126.0/24
IP: 185.251.37.0/24
IP: 2a10:ae40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:f3:a3:9d:02:54:bb:a1:94:7c:33:24:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:4d:b3:2a:ad:76:ea:90:2b:f8:1c:ed:7a:
b1:34:dd:53:ca:2c:18:16:7a:58:ce:c1:6d:f5:83:
3b:2c:f8:6f:a0:71:db:12:a3:9f:d0:ae:12:02:61:
fa:70:57:20:35:95:67:67:7e:78:f4:22:f4:88:70:
0c:90:2f:18:d8:42:40:18:22:ff:a9:d5:61:d8:44:
c4:c9:12:df:0f:2d:ec:67:05:9f:e6:33:76:40:4c:
92:a7:45:79:ff:5c:e7:6a:08:66:4d:7c:db:0a:ad:
63:87:b0:0f:51:45:54:0e:5e:b3:98:eb:8a:ad:fd:
61:39:c3:0d:ab:62:24:61:ad:f2:00:e3:e0:fc:5d:
9a:d2:3e:23:47:8a:cb:6c:ad:4f:5f:6b:b8:0e:09:
e4:19:44:96:4d:3b:91:1f:37:07:3b:34:58:c4:6a:
1d:ce:3c:5a:e4:e4:70:18:6f:95:e4:23:a1:6a:bb:
38:c1:70:db:cb:57:89:b2:4b:6a:d5:96:8e:92:78:
86:74:22:e7:b4:b7:7e:8d:05:3f:79:73:2c:29:90:
86:14:0f:72:8b:1f:c1:02:bd:3a:ed:4c:56:76:77:
05:c0:f8:ae:c7:03:f2:c3:f3:95:aa:0f:74:05:81:
e9:89:a8:b3:a3:3b:c1:dc:eb:b7:5e:9e:b3:af:be:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.126.0/24
185.251.37.0/24
IPv6:
2a10:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211528
Signature Algorithm: sha256WithRSAEncryption
52:ed:e9:b7:a3:e5:e4:aa:6f:55:fe:bf:ca:18:00:b9:0f:2a:
d0:d6:86:6c:07:b1:d0:ea:4c:7f:0c:fc:90:88:71:e5:c6:93:
98:fb:75:60:04:8a:18:c9:fe:3b:46:de:68:c3:5d:0a:23:59:
1b:00:9a:25:f8:e2:e0:cd:60:bd:d9:7a:7b:55:66:5e:9e:5a:
3f:73:81:1d:1d:4e:91:34:b2:1e:db:bf:83:45:da:b7:dc:af:
b2:39:d4:32:ab:c5:ef:ef:4c:09:f4:90:12:e4:59:3a:76:61:
95:98:fc:22:1a:14:48:d6:64:de:70:2e:20:a0:5e:db:ff:52:
d4:f5:d8:6c:6c:74:64:1f:26:0e:15:56:82:81:0c:b8:1c:86:
59:85:a8:ea:85:9a:5b:d4:6f:0d:0a:fe:d6:33:ab:15:ba:2c:
80:ca:0d:18:e9:06:8e:86:ea:cc:11:5b:52:dc:17:d6:2d:d0:
70:5f:71:3d:f6:3f:6a:d2:4f:03:0f:dc:23:ab:7e:3c:e7:9b:
4b:6b:1f:d2:d5:fb:5e:00:a4:c6:4d:19:36:63:5e:1d:ce:83:
c7:39:f8:98:bf:eb:a9:fd:7c:08:d9:e3:21:eb:19:99:08:59:
30:a1:4a:87:a4:b5:3d:9a:a5:15:31:17:36:8a:23:3d:cf:06:
83:9c:cf:34
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZQgaFTzo50CVLuhlHwzJKo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVjMTQ2OGVlMzEwM2ZlNTNiMWNmNWE5ODc1YWVjZDRlMjhhZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2tNsyqtduqQK/gc7XqxNN1TyiwY
FnpYzsFt9YM7LPhvoHHbEqOf0K4SAmH6cFcgNZVnZ3549CL0iHAMkC8Y2EJAGCL/
qdVh2ETEyRLfDy3sZwWf5jN2QEySp0V5/1znaghmTXzbCq1jh7APUUVUDl6zmOuK
rf1hOcMNq2IkYa3yAOPg/F2a0j4jR4rLbK1PX2u4DgnkGUSWTTuRHzcHOzRYxGod
zjxa5ORwGG+V5COhars4wXDby1eJsktq1ZaOkniGdCLntLd+jQU/eXMsKZCGFA9y
ix/BAr067UxWdncFwPiuxwPyw/OVqg90BYHpiaizozvB3Ou3Xp6zr74lcwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPjsFGjuMQP+U7HPWph1rs1OKK1RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2IwMjRi
ZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNjNDQvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJk
LTJkMGMtNDU3Mi1hNDlhLTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlh
bUhXdXpVNG9yVkUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF
BQcBBwEB/wQlMCMwEgQCAAEwDAMEAFTqfgMEALn7JTANBAIAAjAHAwUDKhCuQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOkgwDQYJKoZIhvcNAQELBQADggEBAFLt
6bej5eSqb1X+v8oYALkPKtDWhmwHsdDqTH8M/JCIceXGk5j7dWAEihjJ/jtG3mjD
XQojWRsAmiX44uDNYL3ZentVZl6eWj9zgR0dTpE0sh7bv4NF2rfcr7I51DKrxe/v
TAn0kBLkWTp2YZWY/CIaFEjWZN5wLiCgXtv/UtT12GxsdGQfJg4VVoKBDLgchlmF
qOqFmlvUbw0K/tYzqxW6LIDKDRjpBo6G6swRW1LcF9Yt0HBfcT32P2rSTwMP3COr
fjznm0trH9LV+14ApMZNGTZjXh3Og8c5+Ji/66n9fAjZ4yHrGZkIWTChSoektT2a
pRUxFzaKIz3PBoOczzQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:16 2025 by rpki-client