Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
File: JOmh8SqE1TJSY3_4XW646xY2OT4.cer (raw, json)
Hash identifier: +xf7kHFgScV4RdsL3EJ6/YWEba3lY5vBzCbAI8MHqhU=
Subject key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D1DA30A583ABFB33F6EAE8992F81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198354
IP: 37.19.0.0/21
IP: 185.214.160.0/22
IP: 2a00:6240::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1d:a3:0a:58:3a:bf:b3:3f:6e:ae:89:92:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:5b:b5:fb:70:41:0d:27:84:c9:04:da:95:
9d:a8:75:1c:e7:f5:b3:c5:cc:e8:2d:f3:ae:e9:09:
c7:ea:4e:30:66:25:14:4e:11:d9:5c:f2:94:51:a1:
a5:a2:1e:d8:02:f2:59:61:8b:d8:76:8f:2b:ca:7b:
a2:1b:fb:b8:95:84:39:30:66:83:c4:4b:8e:47:d2:
5c:9c:f5:c6:14:10:27:dd:70:c1:e7:6f:45:51:29:
db:01:4d:ad:27:30:b9:c0:e7:38:eb:5b:0b:d6:c1:
54:cd:34:78:1e:f9:2e:12:0d:6f:92:20:31:d7:45:
8c:ed:c5:87:2a:86:d0:24:a2:93:60:24:9d:1f:b4:
99:36:46:5b:1b:ba:87:44:3d:8b:8a:35:d7:82:a6:
99:f5:7a:68:c7:fe:cf:72:c4:80:d2:15:93:e3:a8:
2b:4c:de:94:69:a8:91:08:ca:a5:97:dc:23:25:67:
19:bd:8b:dd:8a:92:46:98:6b:26:72:7e:ff:8e:bd:
04:96:08:55:f1:a8:44:3f:ab:a4:ef:63:b2:68:3f:
4e:83:12:15:b8:a1:aa:ac:74:bf:c4:e3:c7:2c:a2:
37:71:41:59:28:f9:e3:f6:1c:74:47:62:75:78:20:
ba:b4:73:c0:1f:e4:0c:78:27:c2:40:ab:66:f9:b2:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.0.0/21
185.214.160.0/22
IPv6:
2a00:6240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198354
Signature Algorithm: sha256WithRSAEncryption
33:83:20:77:f9:f6:ee:a5:3d:c8:d9:a9:84:95:50:26:0d:04:
0d:04:66:c2:e9:7e:0e:52:0e:3a:3f:38:d2:65:bc:52:ec:08:
66:eb:8b:b4:a2:fa:e7:81:15:33:8a:ce:50:08:50:5b:68:fd:
81:ba:3c:ae:89:11:d1:eb:f4:fb:7e:07:c3:83:35:86:27:18:
6f:d0:5c:1e:a6:20:96:11:bd:b3:2d:7e:5f:86:97:7c:ee:fe:
54:11:1a:ef:44:78:be:ef:8a:7a:fa:c9:8b:90:a0:49:a9:c0:
00:32:79:86:a3:15:c1:2b:ca:0d:88:f7:a2:dc:8e:46:b8:29:
39:7e:d6:02:14:14:e0:d5:4b:4f:17:1a:65:80:33:21:94:cf:
44:54:e0:b9:e9:d9:a6:2c:c9:a4:76:fb:07:a3:3e:41:50:89:
cb:61:a6:a3:09:d1:f4:32:59:8f:da:aa:75:86:54:b1:bb:56:
d8:c6:76:9f:f7:36:7d:ee:56:ec:87:af:94:f9:33:49:0c:ed:
a5:78:0e:9c:78:e3:8d:d8:d2:c6:b9:0e:0d:97:d2:a5:14:cd:
21:7d:e9:25:be:0b:ef:85:0b:07:0f:fa:33:e8:81:6b:28:7c:
2d:0c:be:6f:b2:d0:ad:c6:53:6b:25:73:5c:4d:1d:45:92:42:
7f:8e:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:19 2025 by rpki-client