Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.cer (raw, json)
Hash identifier: esJR7u9usjSzl+dIMOd4xQiSUTHdsEz/O/7IjQjIHP8=
Subject key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946F52A0A2C24459AD14F3A92736128668
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jan 2025 13:34:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.37.236.0/24
IP: 185.206.34.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:52:a0:a2:c2:44:59:ad:14:f3:a9:27:36:12:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 13:34:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:ea:69:b6:d7:c8:b2:99:7a:5c:29:37:49:
ac:57:aa:52:07:18:3d:85:35:0a:df:a2:4d:9d:83:
45:97:25:61:ee:d3:c1:c0:95:4f:ea:23:a2:c9:98:
69:f6:83:d2:73:8c:79:70:9d:7a:24:12:31:33:bf:
84:1c:86:e1:cf:5f:0f:7f:c7:98:21:a4:b5:56:68:
84:bb:7e:9e:9a:f5:2b:d9:8d:09:c6:82:4c:ba:14:
cc:71:b0:b5:fa:8b:68:bf:ae:12:6c:47:68:81:b5:
af:9e:35:36:52:fc:32:f5:73:24:d7:f3:44:92:66:
46:04:d9:e9:56:1a:02:e7:07:0f:f5:06:51:7b:9a:
f3:d0:4b:36:ff:b2:a0:b2:16:37:27:e3:26:87:b4:
6b:ac:98:61:67:57:d8:e3:29:61:2b:6d:4d:53:32:
08:44:6b:9b:d9:e6:be:3b:b0:2a:a9:29:5f:32:39:
bd:70:ac:bc:f7:ad:e6:f1:42:2b:a4:92:34:0c:07:
9a:d8:ad:fa:ec:42:a9:56:de:85:0d:c7:1f:08:69:
60:a0:e6:a1:00:6c:0b:1e:bd:b3:2c:d7:3a:c0:f6:
00:60:0e:4d:fd:96:e9:7e:27:97:0a:d2:b9:bf:46:
6a:66:ff:38:b1:9a:18:21:84:a0:85:74:81:65:23:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.236.0/24
185.206.34.0/23
Signature Algorithm: sha256WithRSAEncryption
af:7f:d9:0e:89:e7:0e:b8:11:0b:39:4a:e4:bb:8a:a8:e9:b4:
f4:0e:6b:66:30:94:39:43:38:4e:e5:4f:53:2a:d8:76:6d:f5:
60:a7:aa:3e:ad:68:e9:ab:60:7c:32:e2:5e:95:8d:ab:a2:ca:
2b:0c:84:03:b7:05:6a:7e:5f:60:01:94:48:0c:af:a5:b0:6e:
84:33:0b:a2:5f:59:bb:65:8e:d8:42:de:b3:b0:bc:64:39:62:
b8:a9:2e:17:0e:65:f3:7b:a3:d1:00:c7:8d:b9:a8:0d:25:d1:
22:c3:d5:b5:45:81:64:20:99:8e:f9:dd:72:a8:05:58:8f:4b:
5d:bf:14:86:06:1d:89:06:c7:86:1b:74:28:75:e9:92:04:e6:
48:84:f0:89:c7:5d:5b:f5:9f:ec:70:67:c7:03:1d:05:e7:82:
24:39:6e:d4:46:bb:9c:bb:48:7a:86:3c:3b:13:e5:7b:ab:f3:
74:51:6d:97:dd:5d:0c:7e:78:9e:fb:c4:ac:4c:88:ef:c7:62:
74:38:d4:95:80:50:bc:fb:3f:57:5e:f8:b1:26:ea:34:10:29:
fc:62:1f:c9:56:cd:87:f3:7f:06:13:8e:b3:cb:50:bf:66:14:
ab:51:e2:0b:6e:f6:9e:44:40:8c:ed:f4:de:c5:42:33:13:8c:
58:f7:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:48 2025 by rpki-client