Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer (raw, json)
Hash identifier: WZvRG7cBMg2N/1d1BedT8q7ncl4YZLyyZq0OQgT0m4o=
Subject key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C86E15C2574AB15E13FE92D9DC48F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.5.186.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:86:e1:5c:25:74:ab:15:e1:3f:e9:2d:9d:c4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:77:aa:7a:7c:68:61:77:3e:84:a7:6e:10:
f6:8f:75:b1:a4:19:82:bf:34:1d:67:3f:18:34:82:
e5:fb:50:f8:49:bf:3e:e5:ff:f2:c5:6c:f8:0b:0e:
79:bb:08:15:f8:f8:6a:2a:13:5c:4d:5e:bd:62:8c:
72:99:d0:d3:a4:ed:db:fd:e8:12:c4:15:42:1d:e4:
93:ea:86:eb:01:0e:64:d4:ae:c5:9b:67:c0:83:53:
f5:36:48:26:8a:76:ed:cd:f6:7f:93:42:65:84:2a:
16:c0:b6:5a:c8:37:cb:05:80:35:41:72:1e:d9:ee:
a6:d2:e0:2b:d7:e4:60:c8:7e:e0:5b:1f:5b:4c:aa:
13:a5:e8:ae:cc:15:98:d0:77:51:8a:8e:32:d5:2c:
ff:8e:09:99:62:ba:e7:11:b0:1b:a3:25:b0:39:63:
bc:28:73:b4:f0:ae:9c:f7:68:c7:2b:b9:ef:79:67:
28:86:cb:22:65:8b:c9:d0:e8:aa:88:ee:0b:57:fb:
6b:16:63:1f:e9:d5:4b:7f:e4:b7:3d:09:59:10:79:
e9:9e:dd:6d:e3:d0:54:ed:42:f8:64:94:be:02:7a:
5c:a6:9d:ad:a5:d5:7a:72:a6:7f:58:22:3c:10:dd:
8f:d7:61:11:87:91:3b:f1:a7:91:7f:dc:55:9b:3b:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.186.0/24
Signature Algorithm: sha256WithRSAEncryption
24:24:f6:23:3d:0a:18:57:8b:5c:10:e8:11:83:52:9e:9d:9a:
37:c6:01:be:95:c6:d5:f6:89:78:b4:f5:cc:63:96:6e:93:69:
b0:b4:4e:54:56:98:9a:91:30:45:b7:18:72:ea:71:e0:46:66:
c8:a2:5e:05:b7:3b:2d:d6:33:5b:66:5f:92:22:e6:67:ad:00:
a4:88:f8:d7:7d:de:81:13:70:43:7e:e1:d3:48:df:d8:47:c9:
51:b1:2b:36:41:64:a6:8e:ec:2a:dc:cc:bf:9e:e4:d2:04:b3:
27:7c:94:d3:74:93:3c:83:69:59:f3:0b:5b:b9:e7:a4:ea:ef:
e1:73:10:19:ad:09:54:83:0d:cd:15:fd:0f:4e:81:a3:b2:b6:
bb:78:6e:19:3b:b2:5f:a8:e6:da:37:1d:e6:09:b7:52:fc:39:
e5:46:de:02:73:15:54:57:93:0a:a1:a8:38:e3:87:da:f8:5e:
af:4f:8b:4e:a9:c6:0b:7f:17:83:54:d7:c4:3f:d0:3d:60:eb:
a7:ad:22:c9:21:4e:3d:d0:9c:d5:7b:cd:f2:67:ef:58:1b:a2:
b4:8c:fe:e2:13:cb:b3:20:cf:57:84:ad:1e:5c:07:ff:18:bb:
b4:ea:74:76:7a:ca:40:06:48:bc:74:e6:ed:0a:8a:27:33:25:
84:22:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:05 2025 by rpki-client