Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
File: O94s1SFek7-gym34ssH17SyUr3Q.cer (raw, json)
Hash identifier: EzD/vmMc1T6fLMcbvWzRL8faL8BismYd0Yn5KQWKe1k=
Subject key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B601FC074CC06E81FD928851747F4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.112.128.0/18
IP: 80.114.128.0/18
IP: 80.115.224.0/19
IP: 80.242.224.0/19
IP: 91.195.160.0/23
IP: 91.198.151.0/24
IP: 91.221.96.0/23
IP: 91.236.83.0/24
IP: 185.130.172.0/22
IP: 194.0.250.0/24
IP: 194.30.188.0/24
IP: 195.35.128.0/17
IP: 195.85.128.0/18
IP: 212.178.64.0 -- 212.178.159.255
IP: 212.178.192.0/19
IP: 212.203.0.0/19
IP: 213.34.64.0/19
IP: 213.34.160.0/19
IP: 213.124.0.0 -- 213.124.159.255
IP: 213.125.0.0 -- 213.126.127.255
IP: 213.132.160.0/19
IP: 217.100.0.0/16
IP: 217.102.224.0/20
IP: 217.105.192.0/19
IP: 2001:41f0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:01:fc:07:4c:c0:6e:81:fd:92:88:51:74:7f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:ed:df:ca:3d:9e:e0:91:9a:bc:99:58:ba:
93:b9:7e:92:62:83:32:a7:2e:d5:e4:82:d0:bb:3e:
26:82:1d:c9:13:c2:91:34:7a:90:53:81:04:e9:58:
00:c5:b0:b1:67:92:d1:8c:3f:5a:72:00:a0:15:1c:
60:a7:3b:18:56:09:71:25:e8:8a:ed:2d:93:bf:46:
9e:1c:14:5e:48:80:8b:24:03:8e:ff:d7:fc:11:78:
a9:c0:96:6a:71:da:93:cb:a1:c4:66:d0:35:f5:f0:
e9:1e:f7:59:2b:bf:10:b9:ef:80:dc:ad:0e:46:1e:
9f:c4:a4:b5:f0:1e:78:b1:ce:4b:b8:34:76:88:ec:
78:95:be:07:f7:ff:89:9b:50:87:79:2a:86:1b:42:
65:1e:52:47:ce:2c:82:89:bd:f0:f5:ec:98:c5:f8:
ac:f6:55:63:03:77:00:f9:4c:d8:e3:d5:c3:37:c2:
5c:cd:58:8b:4c:5e:44:f0:28:38:19:bf:56:ae:b3:
d0:26:69:70:f1:54:28:65:7a:c7:a3:93:e6:b1:3e:
75:9e:f5:38:f0:0c:ad:3b:94:63:d0:b5:ee:b6:37:
0a:0e:df:27:84:57:b1:2a:25:10:f5:6f:89:59:a8:
4c:7d:b6:d9:52:fb:93:3d:b6:24:59:ab:62:d4:2b:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.195.160.0/23
91.198.151.0/24
91.221.96.0/23
91.236.83.0/24
185.130.172.0/22
194.0.250.0/24
194.30.188.0/24
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/20
217.105.192.0/19
IPv6:
2001:41f0::/29
Signature Algorithm: sha256WithRSAEncryption
75:17:c7:dd:d2:aa:80:df:c0:71:77:76:b7:a4:d8:fd:8f:1a:
ef:a0:88:38:18:bd:a1:25:92:91:ea:42:32:2e:ab:36:f8:ea:
ac:8e:3e:a4:97:8d:70:4e:a4:fc:fc:c8:0b:9b:4f:3f:3b:be:
2c:88:6b:d3:36:bd:3e:63:56:be:2f:b3:8c:c4:5d:b7:5f:f8:
dc:a0:d6:ee:b5:f6:ef:29:10:af:63:b8:7e:57:d4:cc:57:24:
6e:ad:c3:a4:d4:8d:e0:42:46:29:e2:ad:14:0e:d3:6e:44:bc:
48:8d:b6:fa:61:c4:44:c8:2f:83:f0:59:17:70:96:99:d8:17:
9e:7d:54:65:7f:17:2e:b4:97:07:b2:d5:ba:80:a1:2c:d9:ba:
20:2c:6a:2b:cc:5b:b7:99:50:98:9f:25:ee:2e:f3:d3:58:93:
85:d0:51:a6:ad:5f:6a:0c:28:cf:3e:d2:97:43:37:63:fc:5a:
31:8f:18:3c:26:3b:d6:17:ec:89:1a:93:c2:91:6c:67:f1:6c:
e2:d9:c3:b0:1c:7d:62:e8:5f:ed:82:30:9b:fd:f0:54:16:61:
e3:9d:b8:10:36:ce:12:1a:f5:df:09:02:39:7c:d7:7a:b6:ec:
ba:02:5e:57:f1:a0:18:c0:70:23:4e:25:1f:ee:44:75:ac:f0:
39:7a:87:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:55 2025 by rpki-client