Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
File: oWsNirSUNlULar9Ft5A1rsav8jw.cer (raw, json)
Hash identifier: 6iYaYz/xjVnlymi2zjkGKPTUM2QD93PNgLIh0yvt93w=
Subject key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1AD51BD569BFFD2BC48111E822AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20836
AS: 34971
AS: 200522
IP: 37.247.48.0/21
IP: 95.157.64.0/18
IP: 178.249.184.0/21
IP: 185.34.136.0/22
IP: 185.47.228.0/22
IP: 188.164.128.0/21
IP: 195.88.4.0/23
IP: 217.171.32.0/20
IP: 2001:b60::/29
IP: 2a00:dcc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:d5:1b:d5:69:bf:fd:2b:c4:81:11:e8:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:fe:8a:5e:c4:cf:61:a8:c3:f2:05:c5:e0:
f6:f2:ae:ce:37:ed:6f:f6:39:fd:4a:db:f9:f1:4a:
b9:4b:f7:84:a3:e2:e6:f2:47:f8:2c:54:53:22:82:
fd:22:df:9d:48:00:dc:2a:d4:fd:16:e9:e7:e5:6c:
f6:a8:c3:ad:86:e7:a2:08:70:93:25:1e:06:04:78:
4f:2b:83:01:43:61:70:14:8c:e8:0f:e7:93:4e:b5:
46:d0:1b:78:dc:65:00:a8:6e:75:f1:2e:df:ec:f1:
7a:81:ba:b8:15:96:f4:05:5b:52:4f:04:09:d8:38:
82:74:5d:57:c1:b2:67:5f:be:00:e4:06:0b:ac:0f:
92:ad:0b:25:4d:73:a3:a0:6e:99:5a:19:b0:05:05:
65:35:4b:fd:ae:2e:11:fd:f6:62:bf:6b:ff:00:00:
c4:2c:e2:fc:37:20:f4:0d:30:2a:74:72:84:b5:40:
c4:4e:ab:b9:47:ef:08:5a:6a:37:57:b9:a1:f1:e5:
60:1b:92:05:e4:02:95:fc:34:7e:e7:03:01:89:f1:
b9:0d:1f:f8:1d:df:d8:6c:fc:b5:ae:78:0b:44:8f:
0a:97:73:c8:17:50:8a:7a:19:4b:b8:17:cb:97:86:
1a:9f:0d:f9:c1:36:c6:fd:ab:fb:cc:f1:a6:2c:e3:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.48.0/21
95.157.64.0/18
178.249.184.0/21
185.34.136.0/22
185.47.228.0/22
188.164.128.0/21
195.88.4.0/23
217.171.32.0/20
IPv6:
2001:b60::/29
2a00:dcc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20836
34971
200522
Signature Algorithm: sha256WithRSAEncryption
91:4b:2c:ca:75:59:6c:22:b2:a7:52:fc:db:f0:e4:1f:c3:1d:
12:8d:5a:fc:81:2e:7b:48:66:a9:6b:b6:7e:bc:5e:f8:80:2a:
e0:5c:61:59:a9:8a:af:b0:34:b3:4b:e8:37:df:3b:6b:83:4c:
90:38:8a:d6:d3:d3:e5:13:b7:4d:49:da:01:f0:ef:59:b5:a9:
68:b4:5f:13:c1:55:8f:a9:68:f7:38:e6:70:e3:c6:1a:28:07:
cc:0c:59:c9:92:55:4e:fd:09:16:db:b7:d9:04:f2:ca:56:f3:
28:12:08:6f:4f:e9:f9:64:05:5e:63:44:30:08:69:c9:ba:5e:
6d:ac:a1:bb:d8:05:2a:f8:b8:33:7c:44:20:e1:da:04:5a:e3:
1d:42:a4:3b:07:74:3b:99:71:ff:fc:cd:ab:c9:ed:12:c9:5f:
1e:ab:9f:e9:02:6a:56:08:88:6b:e5:6d:47:fa:ca:6e:c0:6c:
4f:1e:df:b2:fd:d2:7e:d7:4d:09:d7:64:41:ea:dd:45:f2:64:
69:f6:25:49:31:d0:57:eb:47:c2:57:50:07:e2:ca:6c:72:10:
c1:b6:e6:51:97:03:70:00:d3:b7:eb:17:5c:50:6f:0d:b1:e5:
e0:37:f7:33:bb:6e:d1:54:2c:ce:9d:71:07:fe:34:c5:c2:15:
08:ab:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:39 2025 by rpki-client