Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer (raw, json)
Hash identifier: PBk4vojcipG05L1IFx6C24f8ReB/dhoaVhsMayCAwb8=
Subject key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C6664BFBB378A09EB2794EF43A4D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215574
IP: 2001:67c:ddc::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:66:64:bf:bb:37:8a:09:eb:27:94:ef:43:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:6e:74:d6:29:1e:54:49:bc:70:72:55:3a:
3e:1e:12:cd:24:11:c7:33:d3:ec:4c:f3:9f:41:03:
9d:f3:f5:a2:c3:62:c1:71:b7:71:ec:88:55:17:ee:
e5:89:04:72:22:21:e9:0a:ca:c2:c6:88:9d:7f:b4:
68:93:5e:46:3b:a3:38:29:78:62:7e:79:bd:71:67:
5f:7b:af:b6:5e:8a:ff:cb:c9:3c:47:ce:d7:22:39:
9d:ae:9c:c3:e3:08:0f:3a:9a:22:65:38:9d:9c:59:
98:5c:70:71:98:23:55:f8:ff:25:b5:67:46:63:c3:
f4:8e:64:c4:64:84:fc:0a:50:42:0d:23:38:f6:53:
90:20:45:a0:57:1d:f4:0c:a9:4d:75:12:fc:99:6f:
13:ca:21:4c:a2:4c:41:96:52:af:95:4c:0f:7a:d6:
d1:59:aa:88:cd:ea:61:5c:5a:d5:5d:3c:8f:d5:99:
1f:83:2a:aa:1b:ae:6a:03:01:76:0c:23:6f:03:9b:
12:7d:84:2e:b6:71:13:fb:64:2c:86:a9:10:9e:cb:
c8:72:8a:51:21:84:78:ca:f9:41:c7:7c:6c:e2:6e:
a5:13:7b:cb:b6:3e:12:ed:a8:21:8a:f2:d6:34:31:
33:1f:4b:31:b4:37:f5:20:49:c6:b7:b3:c9:29:fd:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ddc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215574
Signature Algorithm: sha256WithRSAEncryption
6d:07:e8:e4:5a:b0:97:dc:5b:1c:48:6d:54:60:05:fb:22:f8:
7f:9f:c7:b7:2d:61:cf:25:ab:8e:33:35:52:ed:4a:ec:32:39:
30:0f:03:5b:34:a4:b2:bc:56:35:18:c0:8e:8d:1f:50:8f:b5:
3c:0f:93:c1:de:e5:78:ce:22:7c:b2:2f:fe:5d:45:9e:6a:3b:
2f:f6:a2:3c:19:bf:87:13:50:c1:14:b1:7c:a1:44:ca:86:93:
50:7a:06:89:4b:dd:d6:d0:1d:2c:27:65:3f:08:d8:6b:04:13:
77:61:82:c7:59:18:09:27:3c:da:35:73:b3:32:7f:d2:49:54:
3b:c6:3f:e4:76:b0:c9:e1:40:b0:03:9b:eb:e3:ce:bb:bb:f9:
db:d9:00:c3:6c:fe:07:21:85:c9:8e:79:4c:f7:9b:41:79:f0:
5b:02:b7:19:95:11:66:4e:32:92:c6:78:ff:db:66:96:d3:74:
47:b3:a4:a7:39:c2:a3:2c:0f:5a:7a:67:02:fc:05:df:f8:79:
16:5d:44:a8:e2:72:07:20:26:ad:36:c2:e7:44:82:0a:4e:0e:
64:fb:18:23:b5:85:82:ed:45:62:0c:a3:eb:bd:07:43:2c:6b:
a2:1f:cf:f6:56:78:eb:8f:a2:1c:4c:eb:26:41:b4:52:23:cd:
5b:a3:ef:8d
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQfjGZkv7s3ignrJ5TvQ6TXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTY0Y2RlZWUzNDYxMTZjYjk2NDFiYTQ4MDBmNTViOTkwNmRjM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZxudNYpHlRJvHByVTo+HhLNJBHH
M9PsTPOfQQOd8/Wiw2LBcbdx7IhVF+7liQRyIiHpCsrCxoidf7Rok15GO6M4KXhi
fnm9cWdfe6+2Xor/y8k8R87XIjmdrpzD4wgPOpoiZTidnFmYXHBxmCNV+P8ltWdG
Y8P0jmTEZIT8ClBCDSM49lOQIEWgVx30DKlNdRL8mW8TyiFMokxBllKvlUwPetbR
WaqIzephXFrVXTyP1ZkfgyqqG65qAwF2DCNvA5sSfYQutnET+2QshqkQnsvIcopR
IYR4yvlBx3xs4m6lE3vLtj4S7aghivLWNDEzH0sxtDf1IEnGt7PJKf143QIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFDlkze7jRhFsuWQbpIAPVbmQbcOlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2EwMThh
Ny02YjVjLTQyMzktODliNy0yYTAyNDdmYmI2ZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYTAxOGE3
LTZiNWMtNDIzOS04OWI3LTJhMDI0N2ZiYjZkNS8xL09XVE43dU5HRVd5NVpCdWtn
QTlWdVpCdHc2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3cMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNKFjANBgkqhkiG9w0BAQsFAAOCAQEAbQfo5Fqwl9xbHEhtVGAF+yL4f5/H
ty1hzyWrjjM1Uu1K7DI5MA8DWzSksrxWNRjAjo0fUI+1PA+Twd7leM4ifLIv/l1F
nmo7L/aiPBm/hxNQwRSxfKFEyoaTUHoGiUvd1tAdLCdlPwjYawQTd2GCx1kYCSc8
2jVzszJ/0klUO8Y/5HawyeFAsAOb6+POu7v529kAw2z+ByGFyY55TPebQXnwWwK3
GZURZk4yksZ4/9tmltN0R7OkpznCoywPWnpnAvwF3/h5Fl1EqOJyByAmrTbC50SC
Ck4OZPsYI7WFgu1FYgyj670HQyxroh/P9lZ464+iHEzrJkG0UiPNW6PvjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:56 2025 by rpki-client