Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer (raw, json)
Hash identifier: tT5zmQl+i560w2lqH66SwvvOYEiiTi2cNceSLtzU7I4=
Subject key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252142CB69E52B8BCC7AA88CEBB2D6A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.204.248.0/23
IP: 86.107.180.0/24
IP: 94.177.148.0/23
IP: 185.186.128.0/22
IP: 188.213.51.0/24
IP: 188.214.151.0/24
IP: 188.241.69.0/24
IP: 2a10:52c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:42:cb:69:e5:2b:8b:cc:7a:a8:8c:eb:b2:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:ad:ec:f7:4e:84:12:24:c5:3e:ab:8e:59:
32:39:7a:cb:8e:5e:15:c0:32:82:53:47:25:21:f4:
e9:26:09:22:78:6f:81:5c:b7:19:3c:e4:58:06:4f:
03:0f:a8:9c:86:e4:4f:9a:d5:ff:01:8f:98:e3:3d:
61:14:7d:fa:80:ab:2f:2b:91:be:12:10:fc:47:52:
c9:ce:a1:d0:14:b1:ea:d2:f5:e0:fb:2a:9b:ff:f5:
ea:57:5d:39:d3:33:6d:b2:9c:78:0a:21:4a:9f:13:
d8:83:25:40:18:ba:7a:63:68:a4:01:3d:59:0b:e1:
88:fb:9a:8c:83:e7:c8:9a:dd:f8:91:b8:12:97:f5:
35:62:4d:83:e1:ac:fb:27:c2:ae:7d:37:0c:3a:ec:
d0:2c:39:3f:fd:60:2e:21:2a:49:d2:66:f4:86:fd:
20:e9:0f:73:8f:63:e1:26:e5:c7:15:40:8b:4e:ec:
d2:99:e6:10:14:10:d9:02:cf:61:ce:29:4b:06:c3:
f7:5e:a1:15:4a:d7:ac:41:fd:20:ce:21:94:6c:e6:
87:95:f5:47:1e:59:48:5e:10:b1:cc:5c:20:cd:45:
fb:7c:5b:6a:c6:2a:5b:40:2b:bc:f9:36:eb:16:fd:
0e:53:be:fd:fc:55:2a:26:18:47:b7:77:0d:c5:ff:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.248.0/23
86.107.180.0/24
94.177.148.0/23
185.186.128.0/22
188.213.51.0/24
188.214.151.0/24
188.241.69.0/24
IPv6:
2a10:52c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:c4:28:8a:3b:99:26:93:a3:a0:30:02:7a:ca:26:0e:70:4c:
cc:56:57:ba:6a:01:ba:eb:6a:5e:b5:90:21:d6:db:89:e7:ae:
94:d1:93:62:ff:13:4d:f5:7b:af:5b:50:e1:f6:d4:76:11:ac:
a5:fc:5e:e4:76:c6:50:27:da:b3:a4:c4:e6:21:a8:68:19:40:
1e:02:b6:60:88:ac:21:d1:77:f3:43:3a:94:c0:74:5a:b3:60:
fb:56:8e:35:6f:02:2c:a3:b2:c4:6a:1b:61:2b:a3:6e:c1:8d:
97:f6:7f:19:f5:b1:a6:35:14:fe:89:bc:8f:a1:1c:9b:2b:91:
29:41:da:e7:8e:8a:ce:6b:7b:d1:7a:a7:f1:a2:87:f0:d8:1d:
88:48:16:a5:a9:c1:30:8b:e8:9c:95:01:f8:32:d8:d9:d7:80:
6d:8c:67:9c:f7:55:34:bf:62:0e:a7:cb:38:54:9f:5e:fc:8e:
b7:76:70:dd:82:10:26:0e:8a:f9:32:4b:0d:09:d1:9d:fc:00:
c3:ea:94:0b:8b:72:a3:2e:4f:02:ea:ba:4b:cf:bd:0b:66:c2:
de:ea:8e:40:3e:59:00:98:fb:82:fe:3c:b7:ec:b7:ac:17:2c:
42:cd:59:58:fe:3f:67:05:3c:cb:9d:6b:18:5b:fd:da:e1:29:
d9:ae:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:55 2025 by rpki-client