Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer (raw, json)
Hash identifier: CGQjFx/HFzBnzuTQ8ymm7c3Pppdru8sPNpKNWGcEB/Y=
Subject key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274815C0B9FFB6C6C06257ED6ACF4658
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59970
IP: 185.61.84.0/22
IP: 185.219.16.0/22
IP: 185.244.188.0/22
IP: 2a02:78a0::/29
IP: 2a0b:ddc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:c0:b9:ff:b6:c6:c0:62:57:ed:6a:cf:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d43c26468819c07b1925115fe4921f84203d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:02:02:16:4a:41:1f:86:44:f0:a3:99:ff:
70:63:b3:43:68:4e:70:c3:75:b4:4a:40:02:4b:95:
ca:ae:e4:d6:58:f5:b1:a3:79:31:ec:83:46:a9:d0:
a9:04:b8:a2:b2:1e:18:5a:4a:04:23:b5:9b:2d:02:
88:e9:37:01:4c:08:ad:75:ba:7e:16:8d:b4:27:e3:
93:1d:cf:f8:ec:82:49:48:61:eb:80:27:5b:63:69:
a9:7d:91:ae:43:2d:51:59:4b:2e:cb:04:12:37:5d:
00:c2:19:6c:69:7d:41:3d:13:5f:81:f5:48:3f:9d:
4d:12:53:8c:98:70:23:4e:01:e3:e7:b8:4d:fb:ef:
c9:1c:17:0a:07:1f:85:37:c7:bc:a2:e9:09:21:8e:
8b:89:73:3d:34:61:50:85:f1:1f:f8:bf:37:68:8f:
8d:cb:ed:27:d7:3c:2f:4b:13:e6:5c:17:b6:d3:60:
dd:cd:c1:14:ea:9d:12:e6:60:48:e4:75:11:2d:fd:
e2:37:40:29:9e:d0:f2:b8:4c:51:1a:c9:0f:1a:69:
d8:8a:bd:20:87:22:b0:3e:51:53:75:eb:02:6c:27:
0b:d5:78:3a:0b:f5:41:6d:4a:f0:ad:d0:89:24:69:
af:9e:f0:ba:cd:d0:60:ed:d3:22:a7:b1:af:2e:b6:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.84.0/22
185.219.16.0/22
185.244.188.0/22
IPv6:
2a02:78a0::/29
2a0b:ddc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59970
Signature Algorithm: sha256WithRSAEncryption
2e:5f:fe:77:55:0e:97:4c:ce:1c:82:a5:12:84:cf:9e:08:db:
96:a0:f0:17:b1:02:52:4a:ba:12:9a:01:62:9c:49:fa:7b:53:
e0:c6:7d:3b:05:c7:ee:02:49:d9:69:90:ec:e3:38:4b:2e:d0:
2a:57:c9:19:80:da:9c:40:95:fe:18:5e:b6:ad:2a:bc:ff:cc:
e6:08:bc:f8:de:4d:a4:fb:bb:0d:f3:02:a5:1d:c2:75:88:d4:
ff:c8:8e:05:88:13:45:72:59:41:06:56:75:ec:d0:ad:62:7e:
53:eb:cc:1c:73:b2:ec:f4:05:0a:ee:69:b4:14:83:6b:5c:4e:
f3:43:60:57:e7:78:67:bb:8c:68:f2:15:af:5f:af:59:45:7d:
aa:29:ae:af:f5:6e:ef:88:23:4a:58:fc:99:79:2c:4f:e2:a1:
72:6c:a0:a3:02:64:1c:5e:1e:d6:40:d9:66:a3:6b:9b:18:46:
95:cc:eb:0b:85:c6:2c:b0:b7:25:a4:83:41:ff:6e:e8:1a:ff:
b1:9c:cc:d6:ba:4f:56:e5:91:ec:bd:9e:45:32:de:56:28:ab:
fe:60:c6:94:f7:f6:a4:f1:9f:50:0e:45:80:7f:af:cc:d6:e3:
d9:0f:8b:f6:b5:ce:d9:5d:3d:28:34:d2:21:ff:83:2f:77:52:
9c:f4:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:50 2025 by rpki-client on console.sobornost.net