Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.cer (raw, json)
Hash identifier: cXW5gZLTRexx+3kTGFszSLKsNYFxyPjNpZ1K/burCLI=
Subject key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425221F436B0244DAA7A838DB337B0882
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201466
IP: 2.57.108.0/22
IP: 45.134.152.0/22
IP: 185.73.168.0/22
IP: 185.160.168.0/22
IP: 185.222.164.0/22
IP: 193.36.144.0/22
IP: 195.191.48.0/24
IP: 195.242.72.0/22
IP: 2a03:4460::/32
IP: 2a07:bec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1f:43:6b:02:44:da:a7:a8:38:db:33:7b:08:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be9593d290e0250278a73b313550329327bd589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:25:da:90:41:86:7a:49:64:cf:d7:e6:1e:4b:
99:c2:56:dc:85:03:18:f6:cc:67:9d:a1:ad:94:b1:
b1:dd:f2:4d:47:20:54:46:15:6f:bd:cf:6b:dd:9e:
c1:9b:6f:bd:ad:95:68:64:41:ea:d2:5e:6e:04:52:
b6:c7:d6:18:a8:43:be:76:fa:8a:9d:fc:09:93:a0:
71:51:76:60:49:8c:7e:3c:25:a8:b7:f5:67:ea:4f:
53:02:10:f1:8f:c0:18:37:14:95:fc:b3:6e:35:65:
2d:ae:7e:de:84:85:93:e1:84:52:29:a8:20:52:25:
e3:6b:4e:6c:d9:ef:0d:3e:a0:c2:f3:1c:c5:58:48:
8f:dd:f5:33:f5:98:82:b8:c4:84:8a:e5:3b:01:95:
32:9f:e3:83:15:0e:00:47:a9:52:58:92:02:d0:6a:
6c:2e:74:09:00:67:02:d3:92:fd:7b:85:f5:1e:7b:
64:9d:2a:72:5c:f8:dd:8c:31:0b:07:4d:1e:56:df:
5d:47:49:ae:f8:30:31:02:b1:10:3c:1a:cc:a3:d1:
71:75:a7:30:a5:ad:fd:70:1f:ac:d7:92:e1:0a:0c:
1a:43:6c:09:15:b5:c4:3b:e8:d0:fc:88:77:bd:66:
ea:5f:40:23:3d:fd:01:60:fa:a2:de:3c:ff:df:a5:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201466
Signature Algorithm: sha256WithRSAEncryption
a2:f1:7c:2b:e1:2d:61:6b:82:f8:96:3a:97:2d:67:4f:2b:01:
79:0c:d6:24:f8:a7:e6:1f:30:42:c1:39:bb:ff:e8:e4:e3:34:
13:1f:c6:c4:48:01:64:13:49:8d:11:b8:31:93:f4:d6:8c:26:
ea:5e:cf:25:ba:4f:d8:79:59:20:ac:85:2b:a7:3a:4c:92:92:
c8:c8:cb:b0:52:ea:83:b9:4a:45:1f:ec:14:1e:f5:ed:9b:8a:
70:68:85:c9:f9:2e:a8:f7:3b:0d:a6:aa:45:d7:88:76:8b:71:
2d:67:e8:c3:43:bd:1c:c2:32:ca:55:24:64:bc:71:13:d2:ff:
93:c1:35:40:f3:4b:d0:c4:7a:60:1d:7f:6d:2b:53:e7:c6:e2:
0d:95:fe:a9:c4:33:e7:ae:29:3c:ad:86:44:68:22:a8:ed:5c:
0d:a0:15:08:48:5f:3b:af:a9:1a:a1:eb:bd:17:35:01:2d:4e:
53:e6:01:ef:7a:9b:3c:95:92:30:b2:f9:d2:83:ab:42:1d:4e:
a5:7f:30:c1:26:6a:7a:e4:0b:8a:8b:c3:b9:aa:ee:f6:cb:0d:
16:19:b4:bc:04:65:8d:7b:df:3a:8a:39:a4:ab:0d:6d:98:ca:
6a:b2:46:03:bd:aa:d8:75:de:77:1a:9f:48:1b:43:e6:ea:bf:
3a:75:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:06:55 2025 by rpki-client