Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.cer (raw, json)
Hash identifier: EM7VwuVxBbB1jClI+lkUPFPxOj+t6xKgeI26RnPmPxQ=
Subject key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3D1D003DA2CFEE1331593E21DF7BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 161.41.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d1:d0:03:da:2c:fe:e1:33:15:93:e2:1d:f7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:9a:81:8b:08:39:c5:d5:b0:9a:00:a7:8d:
c3:32:9f:c9:7c:5a:c6:26:de:15:79:ba:1b:98:fe:
60:fa:55:65:e9:86:62:23:9b:62:fd:94:a9:c9:0c:
30:40:97:42:66:2d:b0:45:d1:fb:6c:8c:6f:cf:1d:
4c:38:a6:0f:10:d1:c4:83:eb:a6:ae:01:0d:07:d4:
9a:2f:f6:95:92:6a:b9:17:87:f7:32:72:5f:3b:ba:
64:b0:56:93:c0:f0:c9:8b:10:2c:87:f6:5e:a9:c9:
3c:c5:d5:81:af:8f:b4:95:bf:7c:b9:b4:1f:56:6d:
25:b1:f8:bd:90:c1:4c:b6:5c:70:32:df:0a:58:4f:
e5:77:c4:60:20:b8:9c:80:6f:1e:98:46:a7:31:d6:
02:6b:b8:fa:1a:6c:52:50:10:7f:05:c2:43:5e:cb:
d1:d6:5a:d4:57:09:88:52:c8:7e:5c:29:5e:6a:e2:
b1:a5:aa:b3:66:63:6f:4a:5b:52:3f:5d:0f:79:16:
f7:18:2f:77:c4:85:f2:1c:16:b0:e5:70:23:b0:d0:
41:5a:ac:1b:fe:5f:07:80:2e:77:75:72:58:a8:5b:
e7:de:2f:c0:5e:dc:43:63:2b:04:a5:23:14:67:04:
0b:0a:ff:e7:90:da:ec:54:75:0a:7c:73:b7:f5:bf:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:32:11:61:26:82:3b:18:76:ab:ef:45:63:33:34:c0:c1:f9:
56:32:ad:6b:d3:72:08:c8:d0:c2:18:c9:b7:0c:0e:99:60:b5:
78:fe:02:5d:90:5c:e3:bb:95:fa:c3:8b:87:f4:00:3a:99:1a:
07:06:d3:1a:41:4a:ad:7a:88:e4:5f:36:e4:09:0f:82:82:a5:
51:fe:bd:9a:d8:74:76:fa:28:07:3e:1f:29:f6:50:c2:04:dc:
6c:b5:05:99:fe:38:c0:a5:62:65:52:34:8b:79:72:ae:ca:ed:
ce:45:0b:69:0c:b9:a6:88:c1:82:2d:d1:5b:3d:28:d6:4a:29:
ab:54:99:5a:5e:19:da:b4:ac:30:fe:84:42:9a:5c:5d:2b:29:
e9:5a:9b:4a:77:8a:94:99:01:5d:7b:df:30:e3:df:87:98:08:
79:c0:84:2a:54:de:0f:ee:ef:0c:41:e0:a3:97:e2:e1:aa:00:
cb:bc:5d:fe:9c:16:8e:f8:56:db:f9:b5:e1:a1:3b:e0:dc:25:
55:7b:0c:58:9f:b0:1c:5c:80:88:93:33:45:57:f8:a2:6b:44:
67:2d:21:1a:c1:04:46:10:29:0b:41:f2:a9:75:37:e2:ac:c6:
08:bb:eb:45:69:91:72:2c:96:ab:63:44:a2:e9:2c:d6:75:91:
1c:ca:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:04 2025 by rpki-client