Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
File: t_OeNnC0P1fxURt43eIIWWQBdFU.cer (raw, json)
Hash identifier: 7fc0d5Jq33/BFozJFkI7qV5Kt0pGmsQtwsB0erU2yZg=
Subject key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428256EA8B239D5E2C96DDE391A7A00EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43326
IP: 185.124.242.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:6e:a8:b2:39:d5:e2:c9:6d:de:39:1a:7a:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7f39e3670b43f57f1511b78dde2085964017455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:4e:9b:f3:36:71:dc:eb:6a:6f:c0:05:67:
9c:09:58:c5:96:02:2f:83:47:69:93:b1:a9:d1:dc:
fa:31:00:a3:c8:5f:fd:58:e6:f2:ad:76:97:7c:aa:
49:9d:96:6b:42:34:a7:25:5c:ef:bd:60:cb:d7:1d:
e2:cf:9d:81:f8:a6:c7:9a:fc:b6:b6:04:b4:c6:dd:
f1:2b:f7:24:60:69:a0:27:29:d3:a2:13:e0:bf:ba:
0a:6b:7b:ec:75:8f:af:eb:c7:9b:de:03:ec:c1:b1:
47:3f:9a:af:8f:a9:04:0b:3b:d7:a9:40:58:75:be:
78:13:55:a4:cd:5b:0b:b1:26:a6:c2:4e:04:bd:d7:
84:05:65:db:40:82:7d:c3:f9:21:17:5c:75:ca:23:
8b:0c:70:53:89:8b:94:0c:46:9a:de:8d:74:98:e3:
13:1c:31:61:bf:45:ef:50:5a:a7:8a:05:85:f0:ea:
a8:10:6a:ed:bc:5d:44:4d:82:2b:74:23:1e:93:cf:
b4:fb:7e:ee:ba:c2:f1:dd:1d:79:5d:e7:c9:0f:b1:
44:42:5e:3f:2e:fa:3a:db:5a:75:be:a5:80:cd:4e:
44:98:8c:b5:73:6f:b0:5a:cb:59:45:50:ee:b8:3a:
a0:da:04:2b:2c:8e:e4:95:63:8e:17:24:9b:68:47:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.242.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43326
Signature Algorithm: sha256WithRSAEncryption
88:9f:1b:15:38:79:2a:9a:6d:d8:88:aa:4b:68:69:89:75:c0:
5d:1f:24:ca:d4:04:7c:16:f8:4a:29:b3:58:b2:48:46:36:0d:
3c:39:5c:f4:df:45:85:3b:31:21:cd:3e:ed:86:65:f5:23:51:
db:a0:70:b8:25:31:7e:89:6d:b7:b4:2c:a2:72:70:74:e2:03:
0c:55:d8:01:8a:36:87:01:28:36:a2:ab:d9:66:a5:5c:04:3c:
dd:32:f0:2d:da:08:a3:c2:01:fa:df:8e:4a:91:db:87:f7:49:
2f:eb:74:03:55:75:ee:36:cd:ed:d6:27:3a:9a:3e:f4:7e:62:
d6:d9:a2:dd:3b:9f:7f:ba:21:7b:80:0d:e8:35:41:e7:95:1b:
6f:4f:35:36:56:22:73:71:04:8e:ff:47:43:88:f8:64:03:48:
57:ff:79:72:07:bb:14:b5:ac:95:ac:44:af:bf:65:e5:c8:e3:
c1:eb:6e:2b:e7:30:cc:3c:46:ca:3b:b6:5d:92:6a:d3:9e:93:
42:6e:82:b4:e1:87:89:71:be:dd:a8:8f:6c:87:d2:49:d9:8b:
b8:ad:1d:89:93:09:fa:7c:f0:f9:5e:72:83:ef:d1:45:04:53:
23:41:be:d3:44:19:0a:e8:16:e6:4d:30:12:55:bc:a4:79:4b:
2f:cd:b6:cd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQoJW6osjnV4slt3jkaegDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2YzOWUzNjcwYjQzZjU3ZjE1MTFiNzhkZGUyMDg1OTY0MDE3NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQFOm/M2cdzram/ABWecCVjFlgIv
g0dpk7Gp0dz6MQCjyF/9WObyrXaXfKpJnZZrQjSnJVzvvWDL1x3iz52B+KbHmvy2
tgS0xt3xK/ckYGmgJynTohPgv7oKa3vsdY+v68eb3gPswbFHP5qvj6kECzvXqUBY
db54E1WkzVsLsSamwk4EvdeEBWXbQIJ9w/khF1x1yiOLDHBTiYuUDEaa3o10mOMT
HDFhv0XvUFqnigWF8OqoEGrtvF1ETYIrdCMek8+0+37uusLx3R15XefJD7FEQl4/
Lvo621p1vqWAzU5EmIy1c2+wWstZRVDuuDqg2gQrLI7klWOOFySbaEezFwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLfznjZwtD9X8VEbeN3iCFlkAXRVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzRhNjRj
Yi1hN2Y1LTQyYjAtYWMxNS1jZTI5ZmQzNTI2YTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNGE2NGNi
LWE3ZjUtNDJiMC1hYzE1LWNlMjlmZDM1MjZhOC8xL3RfT2VObkMwUDFmeFVSdDQz
ZUlJV1dRQmRGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuXzyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCpPjANBgkqhkiG9w0BAQsFAAOCAQEAiJ8bFTh5Kppt2IiqS2hpiXXAXR8kytQE
fBb4SimzWLJIRjYNPDlc9N9FhTsxIc0+7YZl9SNR26BwuCUxfoltt7QsonJwdOID
DFXYAYo2hwEoNqKr2WalXAQ83TLwLdoIo8IB+t+OSpHbh/dJL+t0A1V17jbN7dYn
Opo+9H5i1tmi3Tuff7ohe4AN6DVB55Ubb081NlYic3EEjv9HQ4j4ZANIV/95cge7
FLWslaxEr79l5cjjwetuK+cwzDxGyju2XZJq056TQm6CtOGHiXG+3aiPbIfSSdmL
uK0diZMJ+nzw+V5yg+/RRQRTI0G+00QZCugW5k0wElW8pHlLL822zQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:55 2025 by rpki-client