Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
File: OTdAGaVNS94j8NooolIVDVy0c60.cer (raw, json)
Hash identifier: EsAaQzyLon/6EyNtb2v6qRzufnnFVPfREvEZhFxZKHc=
Subject key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BA7554132B94BC0AFA8A69981C1B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211752
IP: 195.8.125.0/24
IP: 2a0a:fcc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a7:55:41:32:b9:4b:c0:af:a8:a6:99:81:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:5c:21:cf:e5:ae:8b:5a:39:08:dc:e4:98:
5f:0b:15:e2:08:fb:c3:a4:4d:c5:ca:bd:0a:7d:48:
56:a0:76:4d:e1:28:2b:88:df:77:32:bc:33:89:98:
74:6d:84:aa:59:96:1c:4e:e3:2b:9b:f7:61:d4:a0:
7f:55:8d:80:77:90:b2:31:cd:65:89:6b:41:c5:1a:
b6:33:68:39:b6:f3:0a:35:ed:8f:8e:32:e5:05:cd:
b4:43:60:19:7a:57:0b:32:2f:3f:5a:dc:5f:69:9a:
c0:42:68:fe:ea:77:96:e7:26:63:29:11:5a:65:49:
28:ce:52:ab:03:15:36:52:7d:fb:53:bc:92:b7:40:
90:83:5e:01:da:6f:cc:2c:80:47:d3:48:04:50:5b:
a6:0b:30:cd:cf:35:b8:b0:c3:98:67:6f:c1:58:56:
74:ff:f5:1e:96:a6:68:de:e8:bb:16:6c:18:d3:01:
dc:02:a1:19:bf:dc:c7:45:05:ba:04:6e:a5:fe:1a:
10:d9:29:60:2f:0e:bc:71:a6:59:f5:59:f3:b9:f2:
4d:26:39:d0:a2:cc:71:ef:18:b9:ed:d1:23:6b:da:
bc:7a:9f:c5:68:55:fd:8d:2b:b9:f6:6c:ef:8b:36:
96:4e:d2:b3:97:5d:81:99:a4:3a:b1:7e:af:98:66:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.125.0/24
IPv6:
2a0a:fcc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211752
Signature Algorithm: sha256WithRSAEncryption
11:98:ef:90:fe:0a:c0:c6:cd:db:de:d9:d7:bf:2e:6e:1a:f9:
fc:4f:1d:8a:6b:5f:6c:34:72:3c:98:ab:c2:5c:08:a1:cd:d7:
87:82:64:ba:40:bd:33:9c:63:fc:20:d3:36:b0:70:a9:9f:83:
08:6e:0a:7c:f6:b7:14:6d:bd:07:4e:c8:6a:60:06:f8:28:7b:
ff:d3:23:c5:0e:5a:55:3f:ab:d7:99:b5:e1:17:aa:28:09:b4:
11:df:49:fc:a2:53:ac:3a:e0:20:4b:1b:26:6d:47:6b:2e:cb:
2e:4f:7d:96:71:e2:e1:95:3c:c7:0a:73:a8:98:c6:2c:40:4b:
4e:03:8d:00:94:c2:a7:a6:1d:12:10:3d:ee:e0:86:bc:c8:34:
4a:e6:fe:4a:bc:7b:b5:b1:a0:b7:74:b2:8e:a4:6b:62:94:69:
80:3d:b2:bb:b0:f2:85:6d:3d:bd:5d:31:b3:e7:5c:97:5f:b4:
f1:c6:6c:94:87:68:26:ac:6d:72:e3:f0:5b:85:e1:70:f8:76:
97:39:6d:26:b3:67:45:f3:61:44:1c:ee:e7:fa:d9:8e:ef:9f:
94:f4:2c:92:c3:da:f2:dd:0e:91:18:d5:fe:c9:cd:22:29:70:
b7:57:a0:53:d1:83:9b:20:e5:30:8b:89:d2:cc:5f:3d:54:2d:
fb:0d:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:03 2025 by rpki-client