Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.cer (raw, json)
Hash identifier: ExaudujMOHn0grvsvLWoFYtvmkBQgSLrHhLQ5iDaXXg=
Subject key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826606318DB2FD6C2636B88FC0C3DCB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58131
IP: 193.201.41.0/24
IP: 194.8.63.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:60:63:18:db:2f:d6:c2:63:6b:88:fc:0c:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:5e:44:89:5d:ef:cb:7f:29:26:c8:1d:9a:
65:02:e8:06:e6:26:e6:04:4c:c6:40:62:44:99:dd:
a5:d1:b4:93:bf:71:b7:29:10:98:09:0b:29:64:76:
74:42:1e:ff:ed:61:c5:86:1a:ce:98:91:ff:2a:12:
34:90:2c:de:7c:36:4c:80:89:c6:71:5d:80:e1:6c:
8f:8a:00:c2:ce:d9:82:f1:e8:83:ed:b4:66:ac:cd:
6d:db:f5:34:40:02:af:38:6d:36:8c:66:9a:5b:e0:
e1:21:d1:f7:46:c5:0d:4f:b6:c0:a3:2d:f1:6a:72:
ae:b5:ef:be:62:9e:e9:18:e0:b8:9f:7c:f8:23:64:
e3:6e:7b:c1:f8:cb:66:9f:c3:47:fd:f1:dc:5a:e5:
53:0e:5d:f3:7a:72:21:92:18:4e:0c:5c:07:ef:d0:
46:62:43:44:bc:2a:64:8d:86:03:d6:82:3d:50:0b:
3a:c7:28:ac:f6:03:99:b0:db:3d:f9:c7:79:ef:59:
1d:71:03:3d:e6:68:f9:93:1f:aa:5b:2e:a1:f7:57:
22:2b:70:96:c0:d2:85:5a:79:cb:06:be:49:a5:f5:
65:f3:51:f3:af:17:3e:eb:f9:36:1f:7d:0e:40:05:
5a:d8:01:6b:36:45:76:72:03:7c:2d:36:0b:a2:44:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.41.0/24
194.8.63.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58131
Signature Algorithm: sha256WithRSAEncryption
84:78:9c:95:c7:5a:5e:18:e6:7c:7d:39:39:80:85:b9:ec:ba:
eb:91:0d:98:ff:92:f6:fe:bf:cc:56:9e:c0:a0:32:fc:13:39:
35:33:18:70:f0:2a:b0:a6:57:44:38:86:c1:ca:35:2f:f8:d6:
60:8a:a3:50:22:49:ee:fe:e3:91:b5:a6:1b:9e:c1:1f:52:8c:
85:13:c4:67:c0:cd:04:e7:f3:3e:ce:24:36:df:59:c1:11:94:
6a:82:46:49:87:8d:56:e8:35:7c:d5:19:d0:5a:37:eb:82:51:
04:6a:e8:26:b3:a4:56:7d:12:8e:d1:d7:d4:b9:12:d5:87:08:
24:e0:00:7c:99:11:4b:ea:a2:18:61:60:77:0e:0a:a3:a9:0f:
38:64:80:41:34:bb:c0:f9:72:a3:3a:64:b5:1d:db:4a:50:66:
a8:3a:95:f3:e9:89:db:d7:19:0f:85:bc:a5:4d:9b:77:37:a8:
2b:2a:26:a4:ea:4a:88:fc:8a:57:ae:5e:2d:f1:37:c6:80:7b:
19:ce:27:3d:7f:79:33:65:41:c9:38:f2:55:a8:8d:e3:35:c9:
8c:55:4f:2d:29:79:6f:30:a0:61:6d:df:7e:38:c5:34:46:8a:
c3:f3:44:10:60:9a:d0:f1:07:c8:6f:71:90:39:2d:c9:aa:c6:
ba:25:ed:99
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQoJmBjGNsv1sJja4j8DD3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGJiMTcxODk2M2RkZDkxMjhiNzZmZDNkODIxM2ExNTY1ZWY4NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT5eRIld78t/KSbIHZplAugG5ibm
BEzGQGJEmd2l0bSTv3G3KRCYCQspZHZ0Qh7/7WHFhhrOmJH/KhI0kCzefDZMgInG
cV2A4WyPigDCztmC8eiD7bRmrM1t2/U0QAKvOG02jGaaW+DhIdH3RsUNT7bAoy3x
anKute++Yp7pGOC4n3z4I2TjbnvB+Mtmn8NH/fHcWuVTDl3zenIhkhhODFwH79BG
YkNEvCpkjYYD1oI9UAs6xyis9gOZsNs9+cd571kdcQM95mj5kx+qWy6h91ciK3CW
wNKFWnnLBr5JpfVl81Hzrxc+6/k2H30OQAVa2AFrNkV2cgN8LTYLokQB9QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKC7FxiWPd2RKLdv09ghOhVl74VtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2M0MjEw
ZS05MGRlLTRlY2EtODIwNi01NTM3ZDg1ZDJiZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYzQyMTBl
LTkwZGUtNGVjYS04MjA2LTU1MzdkODVkMmJkMC8xL29Mc1hHSlk5M1pFb3QyX1Qy
Q0U2RldYdmhXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwckpAwQAwgg/MBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDjEzANBgkqhkiG9w0BAQsFAAOCAQEAhHiclcdaXhjmfH05OYCFuey6
65ENmP+S9v6/zFaewKAy/BM5NTMYcPAqsKZXRDiGwco1L/jWYIqjUCJJ7v7jkbWm
G57BH1KMhRPEZ8DNBOfzPs4kNt9ZwRGUaoJGSYeNVug1fNUZ0Fo364JRBGroJrOk
Vn0SjtHX1LkS1YcIJOAAfJkRS+qiGGFgdw4Ko6kPOGSAQTS7wPlyozpktR3bSlBm
qDqV8+mJ29cZD4W8pU2bdzeoKyompOpKiPyKV65eLfE3xoB7Gc4nPX95M2VByTjy
VaiN4zXJjFVPLSl5bzCgYW3ffjjFNEaKw/NEEGCa0PEHyG9xkDktyarGuiXtmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:43 2025 by rpki-client