Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer (raw, json)
Hash identifier: 1fbk+xsxNrDoB8H1AhpSeisbHuka4h0NT/I+z6NxOYU=
Subject key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F8F8978F000E329DB93209AEC94D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207975
IP: 194.32.166.0/23
IP: 194.32.204.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:f8:97:8f:00:0e:32:9d:b9:32:09:ae:c9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:82:7f:03:b7:b9:94:e4:06:9e:03:16:5a:
08:c3:80:30:cd:bb:46:4e:65:c9:16:09:1a:16:31:
fd:c0:7b:e9:3b:28:b0:61:5d:d6:d5:e2:76:ce:c3:
51:24:de:8e:4b:90:00:86:af:51:55:b3:4f:29:f1:
f5:94:94:cd:d4:5f:ca:b8:ee:b0:76:eb:ff:c1:eb:
02:01:2c:26:0a:8d:43:cf:00:68:2d:86:65:75:d5:
14:26:80:ea:a6:0b:74:85:8e:f8:4a:77:39:cb:d2:
4b:5b:bc:83:23:5b:21:44:d3:5a:76:5e:97:8a:44:
d4:84:c8:10:fd:40:b2:bc:6c:88:e4:b8:df:e2:63:
57:11:86:67:b8:41:29:1b:73:1a:b6:49:41:0f:94:
8a:21:4e:4a:3c:2a:ea:b3:62:c5:db:b1:3c:e4:87:
c6:8e:64:33:e3:92:61:23:e9:a0:6c:7b:34:9c:bf:
33:dc:c5:58:70:f7:5d:15:f3:e8:39:60:24:0f:20:
d0:1e:98:09:00:9d:6b:08:74:f7:c2:ef:a4:0e:af:
c6:91:8c:57:00:98:ad:75:21:c5:a4:69:2a:6f:3c:
27:4a:e4:b2:72:4a:82:b9:3b:7b:2a:3e:b9:ff:bb:
d9:4a:c7:f3:2e:63:b1:d0:57:7c:41:51:81:ec:a3:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.166.0/23
194.32.204.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207975
Signature Algorithm: sha256WithRSAEncryption
2a:b4:48:8f:5a:f1:25:6f:16:24:6c:90:88:23:7a:b2:6d:db:
fb:eb:5d:91:b6:e0:ac:7c:ee:83:2f:fe:cb:3c:09:51:35:38:
18:e7:89:82:3d:0b:08:10:e9:32:5e:f7:ca:72:32:0a:56:2d:
b8:b3:1a:7b:86:d2:c1:9c:c4:17:54:39:dc:30:cb:99:db:26:
31:55:32:33:ca:43:02:6c:b6:42:fc:4f:eb:22:dc:49:2d:f6:
7d:c6:03:9d:78:64:fe:87:12:8f:3f:dc:49:7d:26:c1:c6:d2:
ef:fc:c4:9d:92:25:cb:bb:d6:38:f3:ae:0e:20:f3:4f:3a:1a:
78:34:0e:14:c7:d6:20:5b:a6:b7:9c:cc:23:93:97:3a:b9:ec:
54:6b:1a:3d:2a:3d:ea:13:96:68:06:2f:5f:6b:07:36:91:04:
47:f7:08:c0:ee:7f:60:09:fd:03:e0:9d:6a:e9:b7:2c:77:d1:
0a:75:59:3a:4b:44:fd:d8:54:1e:7f:fa:72:fe:c9:e0:f3:d1:
ee:ea:18:00:5b:f4:c0:cb:da:ff:c2:38:cd:05:53:f9:65:50:
d3:0e:e5:53:fb:cd:56:04:42:d4:4f:20:92:f3:b3:2f:07:c2:
53:ae:5a:16:ec:98:8c:45:cc:fc:bc:55:44:89:e4:d0:d9:12:
86:86:c0:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net