Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
File: OhZp0d72mq2VjU5W4b_5xk01DF8.cer (raw, json)
Hash identifier: y1kcyC9YivXTFmbViT7YgN/x1xXxA8f+8midvicbZvo=
Subject key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A07B1F4FE2A281CFF5F4EA68BEC04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61260
IP: 45.150.96.0/22
IP: 92.119.92.0/22
IP: 185.11.84.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:07:b1:f4:fe:2a:28:1c:ff:5f:4e:a6:8b:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:2f:4b:d7:63:69:61:95:5f:62:1b:b6:88:
e6:81:7e:b2:a3:dc:50:23:f6:96:7e:b0:2d:83:e2:
fe:0d:4a:2f:ce:63:2f:be:5e:36:37:75:fc:b0:45:
69:33:fa:ce:08:ca:8f:e5:70:e5:b9:f8:54:81:33:
c0:28:69:1b:20:7f:8c:cd:a8:72:60:46:e3:87:8a:
2a:ad:5d:df:c2:4a:a9:99:73:ec:b6:67:a8:51:2b:
5a:ef:33:f2:f4:f8:a1:ca:4a:f6:7e:93:92:3f:62:
14:04:11:64:a5:55:b2:93:2d:1b:c3:1a:dd:47:bb:
5b:c1:6d:d2:17:74:3e:49:34:02:5b:d6:e2:42:78:
c7:6b:9d:30:05:93:a1:ad:a4:6e:0c:0d:cb:07:2e:
17:e1:5a:d7:57:46:35:03:01:68:20:c0:20:40:94:
f3:1b:35:7c:d0:5b:6f:09:0c:00:88:0d:88:e5:64:
d4:48:4c:c3:bd:2b:55:04:4b:eb:34:28:56:70:40:
49:ce:65:0c:a7:7c:ea:0e:df:ed:da:bb:1d:7b:51:
11:e2:d8:36:a3:d7:62:f5:15:7c:8d:84:b7:ce:dd:
9c:99:c1:62:64:8c:4d:da:65:ec:00:2c:25:91:ec:
65:d0:b9:2c:e1:e2:a4:90:4f:1f:53:d3:cc:eb:19:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.96.0/22
92.119.92.0/22
185.11.84.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61260
Signature Algorithm: sha256WithRSAEncryption
25:15:ea:27:f0:f7:e8:12:f5:3f:43:2c:13:53:95:a4:7f:5a:
b7:66:b3:e4:ef:97:e0:ba:b4:26:d0:10:23:bd:fe:e0:cc:9e:
1b:c8:93:d4:d6:2f:d7:66:87:d4:cd:2f:58:20:0c:b1:b8:46:
ed:45:79:91:61:45:12:ea:2c:8d:e5:d1:f6:b5:21:8a:e4:d1:
74:f0:dc:f2:ca:60:19:a9:d0:b2:00:ff:00:cd:3c:eb:c8:09:
ce:aa:d3:0b:fd:3e:39:96:3c:d7:3f:c8:82:b7:dc:3a:be:6a:
4c:06:09:db:17:2e:ec:eb:f5:06:2d:5e:a3:3e:8a:41:2a:54:
6c:1b:d5:60:a4:11:8f:09:2c:f0:63:07:6a:1e:b2:da:70:d9:
8b:4a:52:46:cc:51:07:d4:51:be:95:ec:c9:ec:75:c2:9f:5c:
fb:a1:ac:05:65:2e:fb:01:4b:9f:01:15:b0:26:82:58:b1:86:
c5:af:3d:1e:80:e9:54:51:c9:4b:72:01:92:29:5c:47:01:a7:
77:f8:c9:bf:5b:48:05:53:3b:6a:40:09:1a:8e:b1:61:ec:98:
e0:c2:90:a3:f2:ee:e0:07:e2:1a:84:b2:cd:f6:a4:5c:b2:66:
67:27:21:fb:75:7b:fa:9f:aa:bc:31:ac:37:62:42:eb:84:40:
ca:d7:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:51 2025 by rpki-client on console.sobornost.net