Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer (raw, json)
Hash identifier: L+VNbFwcasLyPm7jW5DPC27/bcuNpQpbofhg+MaFjXo=
Subject key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E2988DD410DC03A9DD008B2B4193
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201535
IP: 185.71.164.0/22
IP: 2a05:34c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e2:98:8d:d4:10:dc:03:a9:dd:00:8b:2b:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:43:fc:c1:e2:ec:75:e8:e4:3e:02:e9:20:
0f:6c:f5:82:32:f3:de:a6:94:ae:97:0c:2d:0a:64:
cb:2b:4f:39:12:dd:8c:65:92:ca:14:be:3f:c7:c1:
41:92:47:99:47:c2:33:96:68:33:22:b6:58:c5:28:
b4:5e:53:87:d5:69:9e:d7:99:00:ce:03:2e:36:91:
9b:87:37:f9:8b:b5:8e:cb:73:9e:7b:3f:7c:ad:e2:
a9:3b:82:81:64:5a:a4:cd:56:56:05:17:0e:d7:08:
ac:94:b6:bd:86:71:5a:b0:a9:cd:f9:70:5d:42:41:
79:bb:fb:0c:f0:fb:90:34:5c:70:e0:cf:e5:e4:ee:
b1:e6:05:da:a8:8d:f9:f0:87:19:97:c4:05:ad:62:
a9:f4:30:bc:f7:05:54:90:5a:96:3f:ef:66:f1:02:
db:03:15:ca:79:6b:b6:5c:fc:fe:4b:76:2a:a1:95:
a4:1b:e4:ab:7a:20:e0:a4:92:bd:42:6e:e1:93:46:
10:02:c4:02:05:7d:80:b7:d6:45:54:4f:43:cb:61:
0a:44:45:78:72:9f:fb:c4:d6:2f:d8:ab:2e:78:b7:
41:76:64:33:d0:18:55:c0:77:de:e5:9f:72:a9:f6:
9a:6b:ee:ba:e5:74:7c:54:4a:84:e5:ae:38:c8:b2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.164.0/22
IPv6:
2a05:34c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201535
Signature Algorithm: sha256WithRSAEncryption
52:62:f8:6e:5a:12:b9:b9:3c:f6:e1:e9:6d:67:f3:d8:43:86:
e3:af:b0:00:5b:fc:55:fa:7b:b7:40:e5:d1:c2:42:01:92:6d:
96:7d:00:6b:fd:f9:05:fa:a8:ea:5f:1e:33:c2:fb:33:61:a3:
ef:e6:59:82:6c:3f:98:23:60:db:ba:c2:05:9e:44:f2:4a:eb:
b3:bc:d1:e7:8f:ff:7e:bd:f5:7c:24:3f:49:04:b4:9f:1f:b5:
29:6e:d6:d9:ac:b1:40:3c:80:ff:13:70:aa:0f:43:eb:7c:41:
fd:42:c5:17:7d:6e:ef:55:ca:20:27:8d:0e:e0:eb:f8:96:05:
c2:d7:4a:22:88:32:59:c9:3f:a6:e4:39:eb:98:3c:f8:d9:99:
62:c9:3a:e7:e5:4f:49:4b:43:7c:11:9f:de:75:c0:43:32:e9:
a0:f4:5c:6a:3c:01:42:11:15:b7:41:fb:39:37:17:29:b2:a6:
dc:fe:da:29:e8:ee:ff:27:b5:46:e7:fa:c3:5f:ef:2b:03:43:
af:42:78:90:99:dd:f1:bd:bc:8e:18:31:8c:f2:42:72:bb:0b:
89:34:a4:fc:ee:4b:dd:01:86:f7:2a:8f:a1:a6:43:e8:21:27:
34:7d:c8:3d:50:b8:fe:7a:5e:08:db:90:cb:cc:e5:7f:fd:8a:
90:e8:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:03 2025 by rpki-client