Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer (raw, json)
Hash identifier: Yol364/v7TDf4BJCR15Dp8HLFvKaqvGr1l0980a6f8I=
Subject key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521F5262D52407F43EBC21D60260439
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31140
IP: 193.22.248.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f5:26:2d:52:40:7f:43:eb:c2:1d:60:26:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:c8:db:2b:71:df:4f:7c:2d:2d:70:48:a5:
4e:dd:64:0d:94:33:57:bb:ad:c5:4d:76:33:89:b1:
af:5e:1f:b7:02:31:28:14:71:18:4f:a9:28:1d:cd:
91:26:a5:9f:f5:5d:15:eb:8b:aa:22:98:a3:96:0e:
25:53:9e:87:ec:cf:94:db:4b:24:2f:58:07:87:1c:
aa:12:a4:34:50:28:84:f2:45:2f:4b:8b:76:b2:25:
9e:e9:a1:03:b5:d1:7a:26:c6:d5:36:06:22:54:7b:
aa:a1:2e:93:0c:81:9b:b7:0c:60:75:a7:31:a5:ca:
0c:64:d3:b3:77:0e:9d:0f:8c:38:e8:a4:6e:8a:fc:
21:ba:e6:15:b8:c8:76:6b:8c:a1:47:65:c7:04:0a:
c5:c3:73:9b:41:8c:aa:70:89:2d:30:c8:a1:a4:0c:
77:a0:8f:3e:d8:3e:02:20:2a:c8:53:cd:04:e9:83:
9f:3f:27:32:b7:da:59:16:e3:0b:c8:e6:0b:31:b1:
37:65:b7:ca:83:29:0d:70:a5:e3:26:69:c5:34:ec:
83:4e:d6:c6:d3:85:7a:b5:9b:1a:f6:a9:7b:ed:c2:
42:7c:73:47:a4:e1:de:5f:44:4c:d8:2c:f3:70:3e:
8b:35:8f:af:fd:43:71:19:e2:fd:a0:3e:6c:bf:50:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.248.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31140
Signature Algorithm: sha256WithRSAEncryption
0c:9a:41:5c:5d:d5:25:2c:9c:e0:69:fd:78:85:45:42:9c:4a:
59:b5:bd:b5:68:7a:2e:0d:15:ef:a9:72:68:7f:75:c1:60:40:
d2:a6:b4:13:c5:2e:d4:d9:d7:eb:5a:cb:cc:91:a4:e6:d4:0c:
1f:b1:ec:c4:0f:30:94:84:bd:ef:5e:d2:35:d3:ee:e4:ac:cd:
36:ce:be:77:6f:71:d5:a9:a7:a1:93:a8:ea:85:fc:9f:5f:6f:
7b:51:88:9c:b9:1e:5c:f6:05:6d:9e:7b:41:2b:ad:f7:62:bc:
44:e8:22:fc:2b:1f:37:c3:98:dc:4c:99:57:38:5b:8e:c3:24:
6b:d0:ae:3a:7e:23:7d:c8:6d:80:79:4d:aa:b2:1f:ad:41:39:
41:ca:80:a3:9e:7a:7f:3b:fc:2f:7a:86:f6:f1:a3:9d:a3:64:
e2:a8:91:49:3c:dc:1b:b4:61:d3:b2:26:54:46:33:f5:e5:0d:
de:c4:ee:ef:0b:1c:a3:c3:b5:a4:99:a8:6f:59:59:32:fc:cd:
76:eb:79:1e:fc:9f:04:64:a7:da:62:b0:9f:b9:10:ba:f0:da:
4e:1e:ef:31:e9:bd:2a:2e:b6:c8:b6:b6:75:19:52:ef:85:8b:
66:fb:24:5c:ea:b0:0b:0c:bb:9d:2e:35:49:6a:aa:dd:91:41:
68:d3:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:50 2025 by rpki-client on console.sobornost.net