Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
File: Ooz8_rg-iPNror8kRduewegvDVQ.cer (raw, json)
Hash identifier: kzzk6lXXEsSbdzRd3rnCl5K+5ZuRH97u5e5AaYThHT8=
Subject key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244549C1EFC28F621A0A6D20BD8A1BBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200301
IP: 2001:678:7e4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:49:c1:ef:c2:8f:62:1a:0a:6d:20:bd:8a:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:90:8b:00:52:15:13:11:21:fd:26:8d:d4:
42:8c:01:32:22:48:3d:94:6b:07:e5:52:51:08:e7:
3e:f8:ee:1d:10:4f:9c:88:1d:7d:b3:02:92:34:f0:
18:56:ae:6b:9e:7e:f8:b1:3f:f9:3e:92:e4:17:81:
59:68:45:a0:ea:f1:77:f4:91:a1:1e:45:6c:26:9e:
0a:66:92:3b:a0:74:a0:1c:71:7b:14:e1:d6:d9:71:
78:ee:47:c7:3c:e0:76:12:80:1e:1d:ed:15:fc:33:
13:f9:9e:2f:13:f6:8b:c2:74:d2:62:fa:d4:59:32:
fe:a5:be:61:5f:c1:c9:98:c6:34:9e:a1:c9:8d:bd:
e3:6a:25:15:90:1e:76:89:4d:ac:7e:10:4a:df:51:
90:78:4a:6f:b9:a8:79:35:85:df:77:40:e7:ee:f0:
a9:e6:66:f6:bf:0e:e1:62:b2:3e:be:47:fc:b9:5a:
a4:16:83:64:ad:a3:47:eb:91:da:05:81:bd:b3:fc:
6b:81:69:b8:2b:90:83:f2:e2:db:68:e2:0e:5f:86:
77:9f:2b:60:20:93:06:e7:a5:e5:f7:45:5f:f6:92:
b0:4c:a2:bb:97:cc:42:18:7d:5a:6e:bf:97:20:c2:
ef:75:db:6e:7a:86:22:bf:ab:85:35:e7:47:df:0b:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7e4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200301
Signature Algorithm: sha256WithRSAEncryption
0a:80:78:ca:89:87:5f:3d:21:a7:97:a4:90:c9:e2:e8:26:5b:
e8:cd:57:c7:2c:2d:e0:b3:1a:c8:3e:74:67:55:25:14:36:88:
df:e5:81:a5:e6:40:0b:d9:08:bc:bb:04:6c:a7:a9:d7:a7:bc:
82:9a:94:6c:de:76:0e:3e:4b:07:01:ad:13:1c:74:ad:ef:49:
a5:46:c8:03:b6:42:53:58:9f:2c:55:2b:4b:5e:fe:e6:8a:58:
a8:34:b9:f0:8f:d2:1c:5c:33:da:46:bf:1c:89:c3:8a:78:85:
64:2a:22:dc:1b:32:9d:1a:94:a2:14:d7:2c:a7:bf:90:53:68:
b7:c2:ce:58:c3:2f:14:a3:32:bd:76:4c:f0:36:47:ec:5f:3c:
9f:a9:3d:8f:b6:38:81:38:d0:18:af:b7:a9:f4:b8:39:a3:c5:
38:44:01:12:3f:66:14:db:a5:8c:63:ef:7d:9e:89:4f:35:22:
fc:c7:66:49:ec:65:4e:ab:52:4a:2b:56:6e:7a:1a:8a:7c:70:
32:f8:24:37:45:75:43:cc:82:f5:07:36:f2:5c:bf:7b:d3:07:
17:3f:31:89:4a:1a:b0:46:9f:da:9e:73:65:27:0a:c7:5d:cc:
53:0f:01:97:bd:2b:30:f5:9f:fe:00:24:9b:64:86:58:cb:9a:
2d:ea:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:47 2025 by rpki-client