Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
File: o-boI_bdpn0oOp9BpykJkGrJqDc.cer (raw, json)
Hash identifier: UFYz4lSEtSW/BbDKVARyZTT8h6T1k3rg7X7OC+2NcPo=
Subject key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424452E66D18331BCF12EFD64AD00498B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44124
IP: 78.31.136.0/21
IP: 79.124.96.0/19
IP: 81.161.104.0/22
IP: 185.15.0.0/22
IP: 185.34.236.0/22
IP: 185.189.136.0/22
IP: 193.189.116.0/23
IP: 195.20.218.0/23
IP: 195.225.244.0/22
IP: 2a03:6600::/29
IP: 2a0b:ea80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2e:66:d1:83:31:bc:f1:2e:fd:64:ad:00:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:98:c0:d9:8a:3b:2f:7d:4b:e3:9e:d7:50:
12:ed:fd:6b:f8:03:50:85:f0:b0:4f:df:51:b5:45:
a9:52:a9:10:93:61:3d:c1:54:82:01:88:80:7d:38:
ab:bf:f7:fc:44:fc:71:6f:89:a4:45:3b:62:5a:cb:
cf:0a:93:4b:41:9f:31:7e:5b:98:2f:17:b8:31:23:
e7:c7:61:77:5b:41:93:48:30:1a:28:66:1b:39:79:
2d:64:fc:ae:16:82:99:97:a8:ac:79:da:49:ac:4b:
43:63:85:70:39:f1:dd:6e:d5:9c:7e:8c:5f:b7:5f:
e5:12:83:b0:b0:d3:35:fd:bf:6b:a3:c8:e4:d8:64:
f7:d3:a5:0b:c7:18:28:18:1c:39:86:e6:33:5c:69:
56:ed:95:2f:23:d3:44:13:ab:8e:33:e7:b4:cf:e4:
18:60:eb:4d:e3:a4:9f:94:2d:ce:c5:06:7c:4f:a7:
6c:10:a3:cc:2b:9a:aa:5b:79:e7:c3:f1:cd:77:b1:
62:35:6c:8a:38:d4:8a:01:b6:41:8f:78:14:e8:a6:
b1:77:a6:ea:9a:71:89:56:ab:84:5b:55:ae:9a:4c:
ba:14:c0:90:02:63:66:d5:d2:8f:92:de:be:60:63:
b9:ae:ed:db:40:c0:f4:20:90:50:cb:25:04:67:23:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.136.0/21
79.124.96.0/19
81.161.104.0/22
185.15.0.0/22
185.34.236.0/22
185.189.136.0/22
193.189.116.0/23
195.20.218.0/23
195.225.244.0/22
IPv6:
2a03:6600::/29
2a0b:ea80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44124
Signature Algorithm: sha256WithRSAEncryption
27:6a:65:3f:0e:ba:e1:3c:a8:69:16:73:1b:ac:41:5f:05:65:
a4:03:51:1f:8c:db:81:41:20:5b:fc:de:0f:97:f5:70:1f:75:
d0:41:ba:66:17:12:32:7b:ff:9f:2a:15:41:3b:7e:5b:ca:c2:
eb:ee:4a:fc:5f:29:5e:97:14:97:be:1a:b6:55:d9:46:80:e4:
d7:80:e9:8f:0a:de:72:0f:62:59:de:db:1d:83:fc:ed:23:42:
2e:a8:75:29:e0:b7:2c:c9:8e:19:47:c9:05:57:ae:10:c5:b0:
57:e0:61:8d:e8:86:fd:f9:b4:e7:d1:23:45:54:6a:53:91:66:
0c:07:15:2c:20:48:e6:74:c4:2c:42:4d:95:3c:64:82:b9:64:
92:ca:f5:81:16:79:a4:cb:18:18:84:3d:08:5e:97:3a:cc:75:
9a:57:6d:ca:a7:1e:46:a2:cc:5e:fb:b7:10:9e:4a:b5:0e:00:
f1:4d:69:31:12:45:f3:bb:5a:53:49:9b:d2:70:4f:13:d1:f4:
e5:98:d1:ea:8c:f0:eb:2a:29:f3:64:d1:54:ae:db:89:66:78:
4b:9f:97:23:85:3d:59:d4:01:7f:4f:8c:51:33:bf:58:db:88:
61:75:27:57:4c:bc:cf:fc:79:c4:3e:5a:5f:56:8a:fb:a1:c1:
37:98:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:22 2025 by rpki-client