Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
File: ooinzLTItWvoPCxXZZ3A2W6VZig.cer (raw, json)
Hash identifier: j8OHyCcPMN/KK3+pGM1YUtSYAyjhNWKnsLZMSO8hKlg=
Subject key identifier: A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D95023FC2AEB41DDF2C4BD7A1A9049
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198825
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:50:23:fc:2a:eb:41:dd:f2:c4:bd:7a:1a:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:79:25:41:28:68:28:87:d3:7e:a2:ac:8f:
88:62:4c:fc:f2:a1:88:1e:a3:9d:ea:0b:c1:8a:18:
4b:d9:4b:93:eb:a2:da:6b:aa:74:52:3b:eb:f7:d9:
2f:85:ad:a9:32:cd:cf:72:a4:54:13:dc:2b:25:1d:
c8:c5:0e:2a:72:49:d6:7f:38:ad:b5:96:e3:0a:34:
69:7f:14:14:09:3a:a2:cc:a7:f8:c0:08:c2:ee:c9:
b8:9c:8b:9e:6a:d7:19:90:a1:26:27:3f:bc:87:34:
b3:94:36:1c:ed:69:11:0a:49:64:ef:56:4a:4d:ea:
21:09:1b:0c:aa:14:d7:68:f3:bc:39:aa:8f:78:06:
7a:80:08:3f:32:6c:9d:c7:08:96:11:ef:ed:a9:14:
c6:f5:b8:6d:5a:64:91:bd:3a:b1:98:8b:65:fa:b5:
bb:7f:28:78:fd:84:57:e3:e9:7f:37:88:a4:29:fa:
65:5c:65:f2:16:18:de:64:78:31:f9:45:61:77:55:
55:1e:80:2b:50:d3:a7:7b:62:b1:94:d0:27:ea:77:
e2:48:0c:86:51:a7:4e:59:0f:e9:5e:ee:c9:6d:41:
40:fe:74:dd:d5:54:3e:68:56:05:51:3d:e6:a9:1d:
fb:6d:a7:18:7e:f6:50:21:96:30:76:75:51:e5:cf:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198825
Signature Algorithm: sha256WithRSAEncryption
64:94:f0:8b:da:3f:d7:20:05:ec:df:0c:7f:a8:89:8f:21:5d:
7a:62:11:8c:5a:91:55:28:7b:75:b6:13:a1:af:d3:39:b3:f2:
42:4f:b3:3e:19:d7:13:27:71:d4:88:c6:36:17:5e:8c:1a:45:
10:49:5a:19:22:89:62:c6:38:6e:5c:90:7c:67:ec:cb:9f:80:
3c:5c:7b:00:75:c7:16:c5:df:fd:ff:45:37:49:16:22:32:19:
2d:37:c3:9b:8f:6d:c4:bf:69:ac:09:19:58:53:c1:76:7a:86:
21:85:93:24:8f:2c:7a:46:09:57:0f:60:0d:65:ed:13:77:34:
0c:0f:89:9e:8e:2f:9d:02:98:c3:ce:a9:77:6b:24:59:b4:8c:
0b:5d:68:36:25:c4:1b:a3:ac:3e:7e:73:1b:8b:10:4a:aa:02:
d7:d7:60:50:9a:28:00:32:e8:fb:47:8c:d1:15:6d:e3:b4:fb:
bb:dd:f5:32:4f:89:a3:f2:c6:56:a3:c1:b1:c0:b2:b1:7a:f8:
16:d6:9d:9e:5f:e7:e9:19:f4:90:62:02:79:5c:85:61:07:3f:
41:e5:4f:82:4a:48:fe:45:1f:46:d9:df:ff:4b:38:90:e8:63:
64:65:f3:e3:91:92:a8:5d:50:36:8e:62:53:66:23:c2:58:1c:
b5:76:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:32 2025 by rpki-client