Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.cer (raw, json)
Hash identifier: Lgl3Ke9+c8TppilA0O/XZZotR2WFvGFwvsQgGyxN/GU=
Subject key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423694AFB82F390201155338F9C93DA33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20682
IP: 91.235.248.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4a:fb:82:f3:90:20:11:55:33:8f:9c:93:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38180c074fbe598824c7003195b30aa4a366152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:7f:37:f6:2c:f6:70:79:a2:3f:57:ae:74:
1c:bf:bd:b2:61:89:7c:81:92:1b:d1:c1:c5:23:68:
d6:dc:44:34:ab:cf:dc:c6:8c:fa:2d:61:56:6e:f3:
e5:19:6f:71:94:96:de:17:16:79:79:a2:dc:a8:83:
84:85:08:f9:62:8c:cd:47:65:33:2e:6e:82:b0:4d:
eb:5d:2d:aa:81:0c:d6:74:e8:1a:06:34:e8:5f:a6:
b0:de:d0:28:e4:ce:86:91:ee:f2:76:1a:b2:ce:c5:
9b:33:49:3b:bb:de:29:07:da:ce:87:bb:58:d3:7d:
ad:83:33:a4:dd:55:00:46:87:03:53:b0:53:24:b3:
9a:98:10:9d:7a:d4:d1:d8:84:a1:ed:8d:29:d2:7d:
01:0f:38:19:1a:e3:7c:24:f8:d8:90:47:b9:e2:95:
34:d7:cf:11:ee:87:f9:b6:79:e2:58:01:e4:b2:31:
2c:5d:f1:f2:b1:9d:6f:0c:c3:84:c3:32:ca:a3:89:
7a:ab:13:e1:92:a9:4f:08:0a:53:56:5c:d5:41:e5:
3b:e6:61:45:14:ff:de:b4:2d:90:57:54:c3:22:58:
b6:42:5c:c3:08:d6:f0:3a:7d:13:5f:00:92:fe:15:
1b:fe:48:f9:e4:9c:a7:de:a4:e0:a7:75:30:ce:bb:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20682
Signature Algorithm: sha256WithRSAEncryption
75:1e:fe:1d:e5:a3:27:39:a3:5e:99:fe:d8:18:c8:25:15:54:
ac:2d:92:14:ac:53:64:f8:a3:4a:b6:4a:47:df:22:2d:2c:50:
ee:7d:39:c4:61:60:02:64:8b:c1:a7:90:61:a0:55:d6:2d:1b:
a7:26:8e:cf:14:b3:67:d5:a5:a4:7e:99:02:b4:7e:ce:6e:b0:
35:a9:7f:59:ed:ef:db:36:59:7b:73:dc:ba:f3:3d:07:b0:c2:
f3:75:03:59:c1:11:c6:68:a9:5f:61:d7:2e:f0:58:12:47:31:
02:97:75:d0:8e:d3:c9:cb:c6:d9:c8:0f:79:98:bd:13:a9:a6:
67:e8:6f:3b:ea:e3:73:b6:c5:c3:79:e9:2f:cb:ef:f5:ba:19:
ce:ba:64:70:3e:8d:25:aa:05:5e:c2:9c:8c:2e:a7:97:e8:a7:
ac:31:53:87:6b:0e:c0:d6:c6:22:5f:83:34:7a:a6:df:2a:ae:
55:e7:f2:a3:38:09:92:b9:7c:c9:eb:45:e1:ff:3b:88:b2:0f:
51:85:c1:fb:6a:23:56:ca:46:42:c4:f3:6e:4e:05:57:0d:6d:
6e:24:a9:46:62:37:24:93:01:11:d2:bd:8f:08:e8:ab:60:99:
f2:cc:df:cb:7d:d9:1a:39:32:aa:de:2c:cd:40:56:e2:1d:36:
11:00:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:50 2025 by rpki-client on console.sobornost.net