Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer (raw, json)
Hash identifier: GeozQUaCtbNidX3BCR0O13n4f85gwd9ESzP+NNbcsXo=
Subject key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B201ACB4A7FBFB26CF64E59EEAEFFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207275
IP: 91.226.33.0/24
IP: 2a10:3180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:01:ac:b4:a7:fb:fb:26:cf:64:e5:9e:ea:ef:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:25:8e:e6:83:5c:23:a6:c2:db:4d:e2:a6:
4d:fa:89:96:e9:b3:a4:60:99:76:70:fa:71:82:2c:
91:53:27:da:43:30:1b:5a:f2:de:ee:6f:ee:c2:02:
c9:d9:f1:00:c6:d5:49:80:f7:8f:44:15:ef:01:5f:
3d:ea:03:16:6e:fb:b9:22:47:2a:94:a6:74:ac:70:
22:9c:b2:ac:f0:82:b2:64:43:0d:2d:8a:0d:ea:71:
04:0d:34:fb:b2:f8:02:5a:96:67:97:10:87:29:4c:
d8:8d:5d:a7:dc:22:0f:1b:66:20:5d:c9:6b:cf:30:
1c:fd:39:28:67:a2:18:df:44:f5:45:ab:3d:82:ee:
7b:4c:90:1d:42:91:d5:82:66:ac:56:c0:b6:7b:b4:
e9:98:19:92:3f:8f:de:90:62:07:05:90:29:5b:0e:
62:a2:e4:53:8a:06:d5:f0:78:2f:d3:c3:5a:a7:4a:
c1:98:4a:43:32:4f:9d:2c:53:b2:a0:04:13:7d:11:
d3:56:01:28:e3:9e:ce:86:53:c8:7f:f5:2e:a9:fe:
e7:20:a9:a6:54:07:67:c2:de:13:67:60:47:f4:1b:
e7:74:59:d5:80:2e:1d:16:ce:09:a6:08:ae:58:d2:
d6:e8:06:96:ee:78:ed:16:1c:79:a7:8e:b4:32:3d:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.33.0/24
IPv6:
2a10:3180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207275
Signature Algorithm: sha256WithRSAEncryption
53:20:e6:69:de:98:31:e5:6e:10:a5:78:4e:f9:9f:e0:7c:92:
28:78:d7:7b:3f:22:32:14:7c:df:10:6e:23:3a:46:03:3d:e2:
1b:b3:87:e6:cc:d8:8c:15:9c:1c:f8:11:29:5b:9e:a9:0b:51:
49:dd:69:cd:9d:76:f5:cd:cc:3c:30:b0:95:dc:68:5a:02:55:
dc:9e:d1:74:22:f5:ba:cc:d6:ee:e9:a4:23:b7:46:31:f7:a6:
5a:2d:97:77:71:2b:a9:32:04:89:bc:78:5b:2e:5f:ef:0d:4a:
5b:bc:e7:85:ed:08:e2:80:2f:ce:1a:6e:67:c1:d4:00:90:f9:
4d:82:2b:11:d6:96:02:b6:b9:c7:b1:4c:ab:be:b8:4e:b7:4a:
48:e1:55:98:97:18:a1:3a:92:a8:aa:f1:5a:c0:51:41:38:9c:
32:be:7f:98:f4:57:c8:d1:79:a8:4d:94:f0:cd:c5:30:be:e8:
64:70:06:72:9d:7c:bc:10:a4:c8:25:46:89:dd:11:a7:24:1c:
4f:06:d4:53:71:cd:8c:67:e3:9a:8d:f7:6f:a4:c7:fe:ce:8f:
03:39:eb:41:e2:b8:93:98:fc:45:29:80:13:74:10:50:a5:2d:
8e:85:9f:d0:36:9c:83:5a:d1:43:d6:71:ba:99:8c:e4:54:d2:
f2:1e:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:29 2025 by rpki-client