Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer (raw, json)
Hash identifier: 58w+g6ztm2CS8z6r4f/lkjOdJWKt+bwrqokds8R+znY=
Subject key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747AD5FACF0A10BE77816DC871E6DC8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210731
IP: 2001:67c:89c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ad:5f:ac:f0:a1:0b:e7:78:16:dc:87:1e:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:d1:62:c1:f6:38:f6:00:b0:03:4c:ac:0e:
db:c4:fc:e6:63:4b:19:ff:58:f6:3d:06:cc:60:2a:
b9:9b:47:e3:1d:97:e3:5a:ee:a5:88:11:3c:fb:6d:
7d:6f:75:df:24:b6:50:98:5f:fe:eb:35:79:84:b1:
91:50:27:ee:99:fe:21:a1:70:38:65:92:1d:84:a8:
71:0b:ab:71:1c:1c:5b:a1:9c:5a:e4:07:5e:66:51:
8d:e0:52:1e:05:07:dd:d1:ba:2a:60:01:db:2d:02:
b1:b5:17:01:17:d5:23:69:80:4d:d5:a1:2a:23:b9:
7a:81:ed:b6:0e:49:71:c7:ed:20:0f:cb:63:3b:08:
cf:93:16:0b:48:7c:7c:d3:60:79:f5:e3:c6:7d:77:
ab:53:74:b0:51:03:10:e2:4f:6d:c4:74:95:51:50:
98:3c:39:02:94:62:1c:e1:b8:6d:ad:f3:33:b9:9f:
f5:84:41:fd:33:2c:8e:75:94:78:04:e7:6c:1c:f0:
cc:40:48:14:36:0b:2e:2a:1f:ac:0c:3b:e5:82:b0:
d6:8b:09:16:e6:0e:f6:37:3b:9b:bf:d3:b2:0c:7f:
b0:a1:c1:82:89:ac:00:3a:e5:2c:e9:d6:bd:42:08:
b4:c3:cd:f3:46:f8:55:c2:ae:cb:85:f4:20:0a:c5:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:89c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210731
Signature Algorithm: sha256WithRSAEncryption
4e:d1:57:3c:fb:14:83:71:2e:fc:f6:80:e1:3a:e6:ba:35:b2:
52:0c:bb:70:15:76:1b:33:b2:89:89:d6:2e:fc:a3:57:91:e2:
51:31:5b:48:16:53:a6:64:f0:a9:04:e3:b1:b6:31:8b:2d:4c:
14:49:7f:51:19:34:db:f1:18:2d:b1:2b:f3:f6:3f:a2:b9:df:
77:e3:36:59:cc:54:da:2c:4c:d7:7a:e9:ea:0c:ae:9a:74:69:
33:b1:19:b8:0b:fa:cd:c7:34:0f:11:e7:09:3f:23:a7:f8:37:
2d:63:99:15:d7:71:3b:e9:32:f4:81:37:fd:d9:04:86:91:12:
a0:41:22:0b:aa:58:77:09:1b:35:7c:89:69:78:6b:b1:2e:00:
07:24:6a:d4:96:ae:66:5d:6b:a0:f3:cc:35:77:36:af:80:1c:
a6:f8:2e:93:d4:a5:aa:02:11:a4:bb:1d:6e:b3:ae:18:d5:33:
66:3d:13:d7:56:8e:15:37:10:7f:bc:87:6d:4c:75:f3:14:a1:
61:e3:f3:d9:c4:19:01:3f:26:7d:2a:bd:78:63:15:35:04:f2:
c9:f5:81:57:67:97:fe:4b:0d:60:ee:bb:1c:98:27:9a:71:c0:
b2:c1:dd:bf:b0:58:af:cf:d4:72:8c:ed:39:df:18:ec:fb:5e:
fb:15:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:01 2025 by rpki-client