Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.cer (raw, json)
Hash identifier: EFTAXHneLY14eK+qDCtymD+DC0+N8wEaXYU67QiBPqU=
Subject key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948EA6AC7D1CA8392909DA1A95908BAC9B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Jan 2025 15:34:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.202.120.0/22
IP: 2001:67c:2e38::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:a6:ac:7d:1c:a8:39:29:09:da:1a:95:90:8b:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 15:34:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:50:28:d3:fa:63:98:55:a4:e7:41:6a:8e:
b7:ee:fe:78:a8:41:54:b3:45:0a:94:fa:17:21:23:
08:dc:c0:00:85:e2:00:2f:45:5b:09:f3:67:99:c8:
ac:93:e7:83:f0:6e:b3:f1:db:d2:2f:3c:4f:75:9c:
2c:d1:bd:f1:be:33:bb:5d:63:4d:2f:2a:76:54:db:
39:97:5c:e8:aa:69:64:e4:d0:0e:59:8b:0e:ce:f9:
b1:d0:f1:ee:a7:f2:8b:4e:2f:9f:d3:8d:eb:6f:11:
87:fb:bd:1e:65:97:07:c0:48:0c:01:54:61:f7:c6:
ad:6d:5b:12:48:84:ed:c2:cd:26:a1:1c:ec:14:05:
f8:79:97:0c:9b:af:1a:68:62:80:b1:37:65:0c:c6:
f7:1c:c9:ee:ef:90:3a:85:f4:4c:42:c3:93:7b:eb:
a9:e7:b6:b8:07:3a:f7:5f:56:13:08:ba:92:d3:bd:
7e:38:43:77:ae:45:bd:bd:36:04:7e:e8:da:b0:ff:
12:b8:25:b0:69:1d:cd:00:50:0e:97:10:9d:11:d6:
98:5d:6d:95:ed:9f:a9:65:3b:ae:a8:18:a4:65:01:
7d:e4:d0:80:a3:17:ce:29:bc:47:ea:92:db:00:17:
df:d2:8f:d1:f2:68:f0:5c:b5:c4:10:70:71:9a:90:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.120.0/22
IPv6:
2001:67c:2e38::/48
Signature Algorithm: sha256WithRSAEncryption
82:57:60:9b:4a:27:91:9e:17:7c:95:eb:28:76:31:48:43:69:
93:06:5d:19:4b:93:f6:bc:c2:87:27:cd:de:17:f3:ae:99:cf:
58:b3:8a:93:58:dd:ec:45:08:c1:d2:de:b7:fd:02:0c:62:61:
8c:25:31:fb:b4:ef:22:0e:c4:90:65:f9:b4:23:22:84:f1:26:
1f:9e:71:ef:cc:d0:a4:d4:d8:be:af:f5:65:44:e9:5e:2e:75:
bd:4c:43:0c:cf:57:0d:74:66:8f:81:11:59:f5:a4:10:16:8d:
70:a4:36:7e:4a:d5:83:c8:1d:3c:56:9a:59:c3:12:be:64:1f:
36:d7:2b:7e:f5:ee:4c:34:bf:66:cf:e0:fc:3d:02:e1:73:ab:
95:a5:27:c8:80:be:5b:77:79:bf:48:54:0f:db:e6:70:32:c4:
d6:1e:ef:52:cc:47:1e:40:52:97:a5:71:ba:d6:6e:6d:31:ca:
f1:70:02:57:4f:59:ad:54:d9:9b:50:0a:df:1d:06:7a:72:58:
47:72:8c:49:bd:68:9f:04:d9:9f:ee:04:19:4a:1b:1e:0d:de:
77:32:81:f0:7b:9b:bd:ae:c3:30:62:bc:e1:92:51:d1:de:36:
cb:3b:52:ff:33:8f:f5:96:ed:50:87:48:13:ce:62:54:57:b0:
bf:87:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:01 2025 by rpki-client