Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.cer (raw, json)
Hash identifier: 7vYy4bV7NZYJIYH7eZARQ4/JGUJtyxheGwdxIOJ0QkM=
Subject key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D99CE1C903B4FE7EB6C21D1643155D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43966
IP: 79.173.64.0/18
IP: 94.243.192.0/18
IP: 185.159.172.0/22
IP: 185.181.200.0/22
IP: 2a0b:d600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9c:e1:c9:03:b4:fe:7e:b6:c2:1d:16:43:15:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:7f:0f:31:13:de:02:57:7d:4f:48:20:75:
43:42:51:72:b9:77:b9:f5:f6:57:fe:b1:2d:a7:ab:
97:04:b4:36:77:c7:91:a0:46:b8:72:e0:93:90:0b:
52:62:a8:aa:00:03:4b:d6:3b:e2:fd:44:f3:d6:45:
4c:6d:e4:b6:9d:f0:0d:ca:7f:81:bf:17:a6:5f:8a:
60:ea:bb:c4:9c:fe:c3:a8:8d:95:a2:50:40:04:be:
be:12:94:45:c7:d8:51:cd:19:ea:e0:34:b7:23:e6:
2f:c9:7e:0d:5a:11:0f:23:6d:0a:21:45:9c:87:e6:
e4:75:74:42:32:eb:05:91:23:47:27:3e:03:9f:e6:
1e:3f:08:46:5f:dc:6f:0d:65:c7:df:18:31:5f:65:
53:69:a9:4a:f4:3b:3c:50:69:6a:d3:21:4a:1d:09:
37:84:a6:34:15:48:80:e4:63:66:f8:4f:86:82:49:
ea:39:2a:35:7f:c0:88:a6:c8:9d:57:08:16:57:f8:
a6:5e:2e:f4:71:7e:91:f1:05:d9:23:85:15:00:f2:
23:0a:f4:52:39:73:25:e7:a5:91:83:4f:6e:f1:99:
06:66:93:9f:77:58:35:f3:77:b8:27:af:ba:9b:4b:
09:b4:66:ed:4e:46:20:12:58:6d:12:2c:b6:f6:04:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.64.0/18
94.243.192.0/18
185.159.172.0/22
185.181.200.0/22
IPv6:
2a0b:d600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43966
Signature Algorithm: sha256WithRSAEncryption
3d:85:f4:41:90:72:8a:27:b8:ef:be:b6:3f:dd:d9:0a:d7:16:
ff:70:2a:30:ab:b5:b1:c1:b9:63:7c:ef:b1:47:84:ca:2b:3e:
32:61:13:b0:86:e6:1e:b3:f0:73:0c:9c:f0:bd:73:ae:0c:9f:
22:3c:00:ab:0f:bd:d0:57:80:17:1e:18:1d:7c:07:33:49:fa:
a1:e7:ba:f6:fa:6b:d2:e3:a5:76:65:1c:f5:7a:be:9a:5d:03:
71:41:0a:fc:ee:1d:34:45:61:20:a1:06:fb:2f:b8:b9:89:7f:
d2:c8:3a:e9:d8:c6:93:35:d4:6c:3c:84:55:c5:4d:b8:39:e1:
82:7e:d0:ca:6c:0f:ce:3a:6d:42:c0:5d:97:f8:a9:08:ab:57:
35:93:38:39:3a:3b:3e:67:c4:ad:b1:1d:88:9f:ff:bf:94:f8:
dd:5c:44:3e:6e:0d:73:9d:7f:83:0a:a1:62:e3:93:8a:af:1e:
48:7a:ef:23:19:aa:78:b8:a5:43:c1:b9:3f:c2:4b:3d:2b:f5:
c4:79:73:49:e2:4f:f0:9f:94:4f:7d:06:73:10:8f:94:75:80:
3b:2a:20:ee:08:bb:b3:75:a1:fd:62:87:b2:80:83:57:7e:d5:
40:fe:e7:e1:eb:64:de:0a:79:81:26:f4:1a:38:13:64:96:53:
a9:b3:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:50 2025 by rpki-client on console.sobornost.net