Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
File: O62c1QNPgVWPg9I47KQGMyvXuoU.cer (raw, json)
Hash identifier: oeazIggnUA52IHCqQRhtZLmStwHi5jipThyzveqcf4g=
Subject key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97A12B56F85B85643EDEB3D3B4263
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13054
AS: 44058
IP: 185.253.12.0/22
IP: 213.164.64.0/19
IP: 2a03:3500::/32
IP: 2a0c:3040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7a:12:b5:6f:85:b8:56:43:ed:eb:3d:3b:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:02:18:cc:17:7e:73:6c:81:56:3f:64:d3:
c7:61:30:66:ca:c0:fd:23:35:e5:ca:06:c0:19:f4:
ef:a4:98:db:97:5d:7c:38:7a:3a:ed:0d:36:59:d8:
d5:31:de:62:d1:0f:60:a0:98:ff:4d:09:09:40:1f:
17:40:2b:5e:24:00:16:82:53:d1:de:bf:01:a2:1d:
ae:9d:18:d9:ac:ad:81:83:dc:8f:d7:a3:d0:c4:69:
e2:66:5a:98:8e:ca:5e:cd:b6:7a:12:ae:bf:f3:e3:
0b:91:c8:bd:3d:b1:a0:8f:7d:30:ef:cc:95:ab:58:
de:c0:01:45:e4:6f:10:bb:f4:0b:51:2c:bd:34:f4:
93:74:44:b5:06:f5:6f:fe:8b:a2:f9:70:90:42:fd:
05:0d:84:09:a7:12:78:27:da:a9:0a:28:0a:fb:56:
aa:f8:46:08:57:19:fa:cd:ab:7d:5b:53:39:48:0c:
3f:16:92:59:1d:65:3b:39:13:2b:ca:f9:70:90:0d:
48:15:59:b1:ac:73:75:fb:7d:92:af:d4:88:da:e8:
21:95:c1:e5:6f:c2:cd:87:b9:57:98:53:2b:ab:a0:
fa:09:96:b8:19:18:e4:a2:74:de:7e:cf:e2:49:3c:
66:5e:10:18:c9:dd:d3:ba:ee:9a:eb:f1:ca:e3:df:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.12.0/22
213.164.64.0/19
IPv6:
2a03:3500::/32
2a0c:3040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13054
44058
Signature Algorithm: sha256WithRSAEncryption
44:e8:34:34:60:1f:96:35:9f:b1:d0:4b:fc:83:f9:70:d4:9e:
d2:d9:93:b9:1e:60:c2:71:cf:8e:bf:ad:8a:f7:f6:13:54:8d:
95:9b:cf:2c:41:a4:17:50:fb:aa:43:47:9a:f2:2e:f0:c9:62:
cd:04:dc:7b:d9:9b:9d:24:4b:05:e6:68:1a:39:24:b7:bc:d1:
94:bf:52:64:51:10:d3:0e:8d:51:60:01:84:bb:86:83:ca:4b:
f8:43:b2:e2:3f:9b:90:1b:26:7b:63:b1:4e:6c:9f:e9:eb:9f:
11:90:6b:a3:16:8a:c9:35:fc:c9:9a:c1:8b:f2:32:57:1a:c6:
8d:62:40:80:eb:bc:e6:08:46:6e:d7:13:2e:58:2c:72:6f:3a:
69:d5:87:ba:9d:fc:31:ca:70:7c:4c:5d:69:31:a7:0e:fa:1e:
8b:52:5e:c3:46:6b:d2:bb:0a:c7:67:f1:c5:30:09:6f:c8:9e:
f9:ae:70:86:0c:97:94:bb:72:0c:1c:c4:df:15:c3:43:37:2a:
62:a5:43:84:f0:77:9d:35:92:2b:18:1f:4e:e9:36:65:3f:3c:
c1:be:d7:85:7b:4b:88:10:78:53:08:1e:e8:a2:22:c5:ba:89:
63:8f:ea:f0:0f:b9:34:b0:23:d9:2b:72:d2:1c:6c:e2:e2:07:
24:df:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:01 2025 by rpki-client