Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer
File: OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer (raw, json)
Hash identifier: l2u+4DvqHzJzszOczU2GunEAs4zRgd90NEPQSRpMn+s=
Subject key identifier: 38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA6D18AD96B243535FEB5237D4584B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215479
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:18:ad:96:b2:43:53:5f:eb:52:37:d4:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a19e640de1f452a7dc4abe786aa581342927b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:20:a8:aa:5e:24:c5:51:3d:6e:e8:61:15:
55:1f:4a:54:e4:c2:90:2a:f4:3c:20:fc:62:c4:33:
85:48:0e:6b:e5:01:8e:d2:71:6e:55:6a:f9:41:0f:
59:16:b0:94:9b:d1:8c:13:d4:e0:6f:89:6e:89:8e:
7f:17:a3:c7:4c:bb:88:36:94:14:cc:46:ab:02:8e:
00:e5:a5:77:f8:9d:8f:a2:06:89:7a:24:5a:93:7a:
02:af:9a:be:c6:7e:ae:ae:fb:ae:2a:69:84:f5:51:
32:36:86:47:9e:8c:9a:35:90:27:e1:32:15:c1:c5:
ae:6e:49:6f:28:bb:2e:03:6b:21:89:0f:f6:bb:12:
2b:36:19:9f:5a:23:d5:88:d6:d5:d5:86:bc:82:fb:
cb:0a:6e:3c:df:c5:c3:4d:84:83:1a:a3:9c:2f:3b:
6f:57:3b:8f:da:f7:af:d7:94:70:b2:41:17:89:05:
1b:d9:e8:8b:88:21:ad:40:de:42:e9:46:e0:a3:51:
b8:31:98:e9:fe:b7:aa:03:3e:76:29:78:41:b6:2c:
97:53:29:53:ab:25:ba:1c:74:c5:3d:cc:4c:d2:ef:
b1:03:6f:4e:b7:ae:b2:0f:37:9f:dc:1d:ef:7e:ac:
5b:b9:5c:5f:db:88:ec:5b:61:37:f7:0a:04:3d:10:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215479
Signature Algorithm: sha256WithRSAEncryption
29:18:dc:e2:6f:15:e1:93:fc:9a:a4:de:de:53:8f:20:3c:65:
ac:ee:37:4c:ee:a2:85:dd:ff:bc:03:20:b3:65:59:2c:8c:af:
38:cd:72:93:b5:4d:cf:e5:c7:cb:f2:f7:30:13:09:07:83:9d:
0d:2f:46:40:3c:4b:ad:12:ee:31:70:91:3b:34:01:b4:52:50:
1c:a3:d3:f6:aa:fb:ba:33:34:2d:cb:44:84:43:63:70:a9:fa:
e6:3a:58:4f:ec:4f:cf:0f:3c:3a:34:07:b0:c3:28:91:0a:8d:
62:4e:86:4b:37:0e:c0:6d:c7:9d:8d:49:fa:09:1c:99:a5:4e:
ce:d3:79:b2:da:ba:97:c1:fb:4b:26:0b:a2:ad:5a:24:4b:93:
ff:42:09:62:af:94:e6:17:72:2e:0f:42:54:3f:58:31:99:98:
88:0f:79:2f:62:80:c7:a3:aa:0b:56:7a:30:83:b9:7a:d3:14:
3d:1b:cc:c4:0f:68:7a:1e:3d:28:2b:2f:16:48:18:0e:85:63:
43:a1:25:02:b6:10:8f:fd:bf:16:6b:44:44:95:9c:31:98:44:
f0:36:b7:fe:78:ca:95:0d:d4:df:7c:46:9c:e7:a9:11:13:9c:
ce:78:1a:a0:7d:9d:7b:21:ff:fa:a9:ed:d8:f3:0d:b8:bd:66:
42:2d:b9:1f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQf+m0YrZayQ1Nf61I31FhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGExOWU2NDBkZTFmNDUyYTdkYzRhYmU3ODZhYTU4MTM0MjkyN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AQgqKpeJMVRPW7oYRVVH0pU5MKQ
KvQ8IPxixDOFSA5r5QGO0nFuVWr5QQ9ZFrCUm9GME9Tgb4luiY5/F6PHTLuINpQU
zEarAo4A5aV3+J2PogaJeiRak3oCr5q+xn6urvuuKmmE9VEyNoZHnoyaNZAn4TIV
wcWubklvKLsuA2shiQ/2uxIrNhmfWiPViNbV1Ya8gvvLCm4838XDTYSDGqOcLztv
VzuP2vev15RwskEXiQUb2eiLiCGtQN5C6Ubgo1G4MZjp/reqAz52KXhBtiyXUylT
qyW6HHTFPcxM0u+xA29Ot66yDzef3B3vfqxbuVxf24jsW2E39woEPRBM0wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDihnmQN4fRSp9xKvnhqpYE0KSexMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzNmZTQx
My1iZDUxLTQ3NjUtYmQ4Ni1iNzQ0MTAzMmU1OWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvM2ZlNDEz
LWJkNTEtNDc2NS1iZDg2LWI3NDQxMDMyZTU5Zi8xL09LR2VaQTNoOUZLbjNFcS1l
R3FsZ1RRcEo3RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNJtzANBgkqhkiG9w0BAQsFAAOCAQEAKRjc4m8V4ZP8
mqTe3lOPIDxlrO43TO6ihd3/vAMgs2VZLIyvOM1yk7VNz+XHy/L3MBMJB4OdDS9G
QDxLrRLuMXCROzQBtFJQHKPT9qr7ujM0LctEhENjcKn65jpYT+xPzw88OjQHsMMo
kQqNYk6GSzcOwG3HnY1J+gkcmaVOztN5stq6l8H7SyYLoq1aJEuT/0IJYq+U5hdy
Lg9CVD9YMZmYiA95L2KAx6OqC1Z6MIO5etMUPRvMxA9oeh49KCsvFkgYDoVjQ6El
ArYQj/2/FmtERJWcMZhE8Da3/njKlQ3U33xGnOepEROczngaoH2deyH/+qnt2PMN
uL1mQi25Hw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:16 2025 by rpki-client