Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.cer (raw, json)
Hash identifier: 1QV7FkVW++EbJAtjIxCPkeRukVvQp4x2XJvqXNx/x50=
Subject key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521921ED2513D550AA7B0F19A2E7804
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.105.216.0/21
IP: 185.114.24.0/22
IP: 2a06:6c80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:1e:d2:51:3d:55:0a:a7:b0:f1:9a:2e:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:da:e2:0d:69:37:a7:a3:4c:1e:60:77:80:
7e:2a:09:8e:0d:49:6b:55:38:bd:68:6d:cb:81:30:
be:d7:88:ad:c6:a6:71:d9:07:14:1f:21:53:af:51:
19:6c:a6:97:c3:50:be:0d:70:dc:f6:26:f1:3e:10:
96:9d:81:9f:7a:cd:91:b2:19:8e:48:44:21:66:fa:
87:1c:6f:b0:2b:c1:73:20:97:ab:4c:ae:c2:11:fd:
9b:24:60:f2:ee:49:1e:c8:dd:2e:a9:99:5a:61:de:
e1:6c:a3:04:43:f6:e0:6e:72:a8:f2:19:18:99:74:
fd:54:ba:bf:cd:41:d4:ef:e3:e9:f7:ec:db:25:15:
40:39:dd:d1:5d:59:ea:7e:04:3c:ab:a3:99:25:4a:
3e:35:9f:f2:df:6c:34:fb:94:27:ee:1c:fd:81:a9:
82:f8:77:aa:72:ff:3e:1a:79:e1:94:52:d8:24:49:
96:f7:ea:78:aa:9f:ed:75:a7:25:b1:d6:8e:f8:cb:
4d:fb:41:1c:76:6f:02:30:6b:36:72:bd:fe:2b:a3:
7e:c5:c0:0d:5a:8d:74:a7:6a:51:fc:e0:91:64:0d:
ea:a8:ac:36:9b:2b:36:12:dc:05:95:be:ac:81:90:
db:e3:3c:e9:b5:42:e2:4c:7c:cb:6f:7d:74:a4:ec:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.216.0/21
185.114.24.0/22
IPv6:
2a06:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
79:0c:84:5f:b4:de:b4:5a:dc:ad:63:e3:86:f4:f9:3d:fb:cf:
7a:77:f6:08:00:44:40:c0:c0:1b:3f:1b:8d:bb:c3:f2:73:64:
a8:16:77:0e:b5:46:90:d9:29:06:16:55:6b:9c:6b:1b:ac:b8:
4d:50:f7:21:9a:eb:06:75:1a:ad:30:40:1e:d6:2c:0b:4c:0d:
b8:37:9f:30:fe:3f:d5:83:61:93:a1:bd:4e:cb:59:d2:0d:2f:
2f:45:cd:05:f3:c6:9e:4b:16:d5:1c:0e:51:89:e7:5e:fa:b5:
02:cd:cd:c1:bf:65:06:f8:0c:d4:e3:a8:12:31:8c:59:47:0b:
c7:bd:18:8e:dd:3c:2d:d3:79:e3:27:51:c1:05:af:df:5a:e4:
c5:11:cd:2d:ef:27:5b:2c:17:ab:5d:f5:7d:6d:07:7a:04:54:
98:f9:42:dc:ec:79:df:c1:7f:e1:6c:51:f5:c5:70:3a:03:00:
53:50:b3:14:63:7b:ad:79:0a:51:00:30:22:5d:10:e1:da:3a:
2a:62:55:13:6a:dc:c5:c3:6a:13:a8:00:da:a7:86:54:2a:71:
39:a5:a1:69:eb:c2:54:50:a3:d5:b1:4d:a6:dc:34:91:87:b2:
2a:c9:5f:10:9f:2c:d3:01:85:49:50:0b:4b:f8:ce:97:65:28:
25:28:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:13 2025 by rpki-client