Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.cer (raw, json)
Hash identifier: 76CGuRuyJuOVbAJpT7M/A5q2cP0oBzITQ4Ve9ulWhDE=
Subject key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F32EC80757836446A0031557B579
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201503
IP: 82.163.120.0/22
IP: 82.163.132.0/22
IP: 185.72.208.0/22
IP: 2a05:3950::/31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f3:2e:c8:07:57:83:64:46:a0:03:15:57:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:ba:40:17:d5:6a:89:94:fc:53:9d:bc:db:
e2:08:ba:79:4c:03:a2:84:23:82:16:af:3f:25:a3:
2c:a4:97:2c:ab:8a:eb:43:ac:63:b2:e5:4a:9a:a8:
2e:98:d6:f7:51:86:a3:fb:ec:c3:2c:a7:ed:d0:10:
65:3f:99:ed:11:4a:31:29:e4:ff:77:ad:ff:38:c7:
11:4a:df:e2:b2:82:8d:00:36:2c:4b:1d:9d:36:f0:
5d:3b:77:d1:c7:dc:2a:18:b5:9a:eb:1f:e5:cd:0a:
e5:6c:0d:69:da:cc:19:ed:bb:37:5c:84:5b:a5:26:
47:57:1e:07:e3:be:3d:41:c6:2a:1a:45:40:61:de:
91:74:69:73:c1:8b:43:42:fe:8f:28:04:03:9f:2d:
77:7c:74:6b:9a:1b:5a:81:f0:95:3c:74:60:e2:54:
d4:8d:ba:6d:e5:83:c0:0d:f4:aa:e0:ec:7a:92:ab:
80:7c:14:a1:91:6c:21:e7:50:b2:6a:13:34:c7:6d:
92:e9:1e:96:dc:76:19:29:41:94:b9:eb:21:a9:bf:
03:e0:c6:26:7b:28:da:9a:1a:60:95:70:34:6c:93:
aa:11:84:3e:76:fa:23:9f:24:3c:a6:c7:d0:46:c2:
32:76:be:41:93:a6:da:03:a3:bc:74:0e:52:3e:74:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.120.0/22
82.163.132.0/22
185.72.208.0/22
IPv6:
2a05:3950::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201503
Signature Algorithm: sha256WithRSAEncryption
57:33:f6:90:19:35:6e:87:14:5b:29:df:67:04:05:2c:e1:dc:
55:f4:08:a8:f8:7d:e3:45:18:e9:66:02:66:d2:91:47:77:28:
42:07:90:09:b3:53:93:6d:30:6f:be:39:d8:52:e0:f7:a0:81:
7d:c9:61:73:98:4e:d6:30:c9:78:cd:77:3a:f8:d5:44:32:40:
85:69:e3:a1:02:7c:9d:31:6a:21:c5:ac:74:fb:bc:b4:df:4c:
73:57:e0:3e:fd:31:1f:b9:4f:2f:c4:95:3a:bd:2a:e2:32:a5:
fa:6c:4e:0d:2e:d6:9f:4b:fc:d2:95:8e:f7:1f:e3:7f:56:b9:
14:ac:87:32:5d:fa:9c:06:86:e9:32:e1:d9:ef:cb:77:1f:2b:
ba:2f:04:b6:d7:27:ed:05:8d:84:d6:87:6d:64:21:ab:eb:76:
03:ba:0c:75:d8:4c:99:72:ba:8d:2b:8d:e8:db:d9:9b:c7:7c:
ca:d6:31:17:e9:2e:6d:40:77:22:b2:fb:d8:eb:eb:00:5e:1c:
d5:90:b4:86:2b:c8:ca:12:27:fc:00:6d:e9:f1:84:6f:c9:24:
4a:88:d2:3d:5e:34:d7:15:5e:b1:ac:82:c8:7a:be:3a:c7:dc:
98:02:f9:f3:52:f4:4e:b1:a7:17:a8:e8:93:b1:1d:6b:65:66:
4b:bf:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:39 2025 by rpki-client