Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
File: AOC06vnBB5HzU7qYfeI2ChOEF70.cer (raw, json)
Hash identifier: s3ZvO+LgKmNAA6I6/aL0uhJffIp2zYHnQFBvSbuRUhI=
Subject key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C462D56EAAC31DDDE4C10D0E229AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.223.4.0/22
IP: 195.93.227.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:46:2d:56:ea:ac:31:dd:de:4c:10:d0:e2:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:28:38:d1:7f:d0:a0:00:5b:bf:94:d9:87:
6e:0b:d1:0e:7f:84:d3:0b:04:96:9a:86:36:db:f6:
74:a5:cd:9e:b9:1f:e3:f2:07:48:4d:0f:9d:2a:83:
f7:63:19:0d:ac:1b:c3:90:e6:b4:38:95:c5:84:c4:
b3:2f:98:6b:e3:a6:df:5d:26:f7:42:bf:60:c7:ed:
5d:30:f9:47:b4:ab:cf:46:22:b2:0f:21:b9:7b:93:
13:5e:a4:12:76:ed:7c:18:b5:28:c1:32:5c:16:94:
10:27:69:20:88:bf:9a:2f:bb:fb:0f:a0:d6:71:61:
9a:00:90:9c:94:66:d9:30:ec:31:97:52:ee:30:35:
bb:35:b0:b0:c9:5e:7f:0a:12:15:b4:97:75:44:2b:
06:30:b0:d1:78:41:b3:fb:30:0c:aa:54:32:00:1a:
34:73:a4:9c:f8:c0:94:a1:79:7c:51:40:04:a2:31:
c5:13:2c:e6:cb:eb:0c:3a:05:42:e6:53:59:0a:b5:
88:bb:e1:b1:b2:0b:6e:29:53:cd:58:13:eb:d8:89:
58:19:a0:1f:1f:cd:eb:ac:a6:1a:b3:74:9c:9e:b8:
95:f5:87:89:10:63:98:17:b2:27:11:64:47:62:3a:
1a:90:a4:a2:85:e9:2b:bf:b5:f8:a0:2b:6b:e1:5e:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.4.0/22
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:79:3e:be:a8:38:eb:63:d5:36:ff:7b:33:92:06:b3:6c:b3:
18:ce:4a:f7:32:e1:b0:ce:ae:8e:43:24:14:dd:75:8d:f8:41:
8c:ec:52:11:85:4c:b3:f3:ed:af:f9:61:df:77:c4:c8:d8:8c:
63:4d:b6:e0:c2:fe:b1:f2:d1:8d:39:ae:dc:ed:5c:ce:74:4d:
5a:7f:6e:60:52:57:42:f0:1a:b3:bf:ae:70:ba:7f:fb:6f:97:
d3:8b:10:eb:39:d9:bb:19:af:1a:21:b3:34:d2:c2:10:9d:0e:
aa:02:13:28:c6:e9:86:ec:6a:70:33:11:39:72:4a:55:8e:f0:
84:9b:1e:d3:1c:a5:09:74:c2:46:32:6f:65:5a:ff:f0:db:5c:
72:75:05:e2:52:a5:18:b7:4a:f9:7f:76:13:dc:94:41:1a:e6:
6f:28:31:a1:32:bf:d5:8a:21:b1:b2:66:5c:a8:c9:1b:9e:95:
8e:0e:57:c8:7c:e5:05:b9:2b:8c:ab:57:12:a5:78:99:07:39:
fd:87:72:dc:1c:cf:fa:ba:a5:fa:82:c9:e5:1a:b7:ef:81:33:
c3:ed:1b:94:8a:f7:f2:8f:2e:62:68:9a:ec:e7:41:ac:33:72:
bb:50:8b:ad:25:57:e7:c7:30:bb:2b:1d:e8:f3:86:63:0f:aa:
26:cc:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:37 2025 by rpki-client