Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.cer (raw, json)
Hash identifier: h5CnGEe62bv1dGz7PrY4JLezvROuQFRHCkXWuaYBdk0=
Subject key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC31A7216AACE08B7CC6E5E858251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47630
IP: 185.174.4.0/22
IP: 2a0b:7900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:1a:72:16:aa:ce:08:b7:cc:6e:5e:85:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:b2:c1:9b:4e:2c:f0:6d:46:0d:75:28:51:
52:e7:e7:6c:6a:bf:48:14:8c:b1:a6:2b:bc:ab:a6:
d5:a5:42:44:2d:c0:18:69:bf:a5:2b:ec:07:7e:5f:
c3:ab:df:ac:ae:7b:b2:48:5e:1a:fa:19:e7:f6:ae:
db:2d:42:6c:dd:bd:d3:5c:fa:ee:eb:b4:25:3b:27:
60:f6:c4:68:24:3c:20:84:85:7f:d4:19:f7:f7:21:
c3:70:59:ee:7f:2c:8d:95:13:24:e2:ed:0c:eb:c1:
0c:b3:0c:ba:62:0c:35:b5:f8:09:a6:e8:2b:65:d2:
0a:c0:21:95:1d:98:55:6f:d0:dd:b1:ed:fc:70:cd:
b3:48:4a:a4:95:c9:c9:e9:e4:d5:3c:2e:51:0a:46:
c2:0f:51:f4:ff:08:c7:c2:cb:88:a9:e1:5f:3b:ff:
54:54:40:11:f7:29:cf:a4:06:de:98:6d:c5:e3:c4:
1c:b8:88:8f:c1:f7:ee:06:a8:d4:c0:f9:5b:3e:82:
c3:a6:99:bc:52:75:0b:4b:ff:83:1e:ee:26:f3:86:
a8:fa:2e:68:bd:04:d1:48:58:bf:cc:47:82:51:d6:
f9:a5:d3:c8:9a:14:56:db:af:86:8e:dc:47:18:93:
54:b4:66:b1:ab:cc:de:ca:cc:fb:82:f4:d9:02:c5:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.4.0/22
IPv6:
2a0b:7900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47630
Signature Algorithm: sha256WithRSAEncryption
56:71:48:35:71:ef:0d:a6:35:4f:8c:9e:4c:2d:6b:82:d0:37:
d8:e2:cd:bc:ae:65:ee:62:f4:aa:37:f8:ff:bc:86:da:82:78:
d4:75:9e:f1:7d:e2:42:14:b2:c2:6c:8d:7b:42:f3:5b:8d:b1:
fe:4a:64:46:c9:82:db:13:e2:98:28:90:83:2a:92:15:ef:58:
cb:6d:c9:2b:04:31:5f:13:d7:3b:72:ab:4b:3a:67:a9:a3:2d:
7d:cf:09:a8:95:93:c8:7b:fd:27:c1:6a:37:8c:31:96:0e:88:
8a:a6:1c:1f:a3:21:91:84:bb:19:56:a2:22:37:b8:03:f7:49:
d6:60:d0:7f:ef:67:f2:fe:71:58:ba:25:09:ea:98:bc:30:62:
83:0b:74:18:81:d3:80:2a:12:d2:b8:be:1a:3e:5f:19:f0:03:
29:70:6c:3f:88:78:08:4b:c0:fe:5b:14:f2:b8:88:39:09:df:
47:56:02:bc:71:26:e1:71:51:f3:b3:88:97:11:36:97:7d:93:
e3:71:34:2e:80:fb:65:f3:bc:31:21:c9:96:c5:f6:94:e2:df:
0a:78:b0:8f:dd:f0:2c:6d:9c:99:e9:8c:a8:a6:e6:1a:9f:cd:
0f:88:aa:16:f0:5c:be:18:26:fe:1d:bd:5f:4c:9a:59:04:34:
d2:3b:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:05 2025 by rpki-client