Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.cer (raw, json)
Hash identifier: jEIe/AJQTBND4kDuUXU5LaOjVatXTBrnrCrBE4DOVpo=
Subject key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA426D0E97C652C30DDAA161567DB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209975
IP: 212.60.8.0/22
IP: 2a09:800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:6d:0e:97:c6:52:c3:0d:da:a1:61:56:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:ca:5c:e0:89:ab:f8:3d:42:c8:b9:65:10:
db:5c:87:7f:41:2e:35:bc:7b:1e:9a:03:93:25:ea:
11:82:92:bc:dd:ff:61:14:d1:45:58:1c:8d:5a:73:
ff:12:71:5e:dc:b8:49:e5:b6:67:03:58:c2:88:7e:
b4:e5:5b:4b:fb:a7:e0:2f:3c:a9:39:39:4e:9f:b5:
a8:b8:41:c8:d6:48:db:8b:7b:f0:0e:b6:ec:3f:43:
59:2a:43:27:a6:c9:42:43:84:93:6a:0c:dd:7b:f0:
f9:9f:bc:f4:9b:fa:a9:e8:42:c4:86:fb:d2:70:f9:
75:3b:81:2b:bf:4a:83:3f:64:6b:74:55:11:5e:8b:
36:93:09:ff:5f:de:32:7d:76:a4:f4:a1:d9:d0:5b:
01:6a:92:5f:c2:c2:2b:e0:7b:26:e7:c0:a3:88:b7:
4a:c5:38:0c:ad:15:1d:ec:28:88:51:1f:43:b5:b0:
5b:83:53:fc:51:67:4e:c3:3b:4b:4d:10:b5:9f:93:
3d:ef:ad:f3:ec:9b:8a:65:da:d8:b7:4d:3d:91:ca:
5c:bf:58:55:9a:8b:92:7c:c9:20:08:6c:d1:da:21:
4b:10:41:a2:b9:68:c6:69:05:0c:23:cd:a6:fd:92:
b6:c1:24:8b:b8:6f:80:22:d6:e0:37:2d:d1:de:49:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.8.0/22
IPv6:
2a09:800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209975
Signature Algorithm: sha256WithRSAEncryption
2c:83:4c:fc:a6:dd:77:3b:92:2b:2d:21:56:8c:9a:d8:c5:65:
46:28:75:1d:aa:8c:9e:2d:15:78:25:f8:7a:84:dd:ae:ae:32:
d4:c2:e1:c6:a4:1d:47:cf:9b:9d:b1:6d:58:bf:e0:b5:65:7f:
69:84:e9:96:be:23:ac:d5:fb:81:bb:8a:92:86:d1:07:97:65:
47:25:4e:6b:70:3e:0e:79:68:d1:7d:e8:1d:a1:4d:65:b8:f2:
33:1b:05:c6:b5:6b:d9:97:3a:23:68:e7:33:c0:18:1e:7b:84:
d3:02:fd:3d:78:28:90:44:1a:28:df:f1:74:fa:63:70:99:cd:
4d:1c:76:07:71:7f:0d:f6:c9:0d:b6:8e:a5:5a:33:8d:d8:4d:
7e:57:3e:80:a8:cc:20:92:6a:57:1c:f1:d6:ea:73:e8:be:eb:
d4:8b:43:fb:74:13:03:7f:5b:49:d8:18:af:a1:15:90:1d:28:
94:1d:b8:7e:04:c0:b9:7f:6f:30:6a:d4:92:d6:9e:d9:21:73:
c6:ec:48:a3:55:3d:7a:98:d2:b4:93:32:10:34:87:23:c2:01:
66:e9:f1:fa:7b:26:b3:41:ad:6a:bc:6a:a0:0a:f7:c7:d8:18:
61:13:4b:6b:7c:7f:60:d6:d6:69:7d:af:d7:85:99:6d:87:93:
2d:7c:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:00 2025 by rpki-client