Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
File: o95MO22qWmmL8wfMORKCqymH1hc.cer (raw, json)
Hash identifier: Rh1GWqvXYvJ963AwmcdtYT0bD9Y8dXiwvR0dIRhjOwQ=
Subject key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252181F67D3D33A76768C4C5EE763782
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57711
IP: 171.25.248.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:81:f6:7d:3d:33:a7:67:68:c4:c5:ee:76:37:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:17:54:bd:87:ff:db:9b:3e:89:7b:2a:37:
68:bf:b7:54:f8:2f:d6:38:5a:17:be:2c:b5:eb:09:
7d:08:d2:e9:83:93:d8:84:9d:ea:62:3f:fb:7a:6b:
32:cf:4c:9a:5e:c1:b4:d2:3d:7e:2a:44:6c:f9:1a:
d1:b2:32:ab:cd:6d:e2:e6:84:94:e0:eb:88:fd:01:
39:2b:11:c8:0e:1b:3a:e2:11:0d:a7:77:92:9c:fc:
9f:05:36:92:d7:66:a5:01:ab:22:21:ca:c8:ee:41:
5f:2b:3f:65:4a:b0:7b:98:6c:a1:cd:63:6f:3a:8b:
7b:eb:69:a9:e4:80:a4:9a:b9:3e:5e:87:29:15:0b:
cc:bf:22:57:a3:e3:c6:45:7d:df:f3:d8:c8:6f:0c:
dd:a2:b3:5c:c9:f2:f5:01:58:1a:49:dc:a0:ac:9c:
53:b7:73:5e:63:0d:48:bd:40:d1:a9:99:e9:f0:ad:
2f:0e:b0:ab:ae:7c:5f:35:ae:5d:89:8a:b5:df:1b:
49:32:66:d6:69:2f:91:9e:d0:59:4b:00:21:59:b3:
ef:ae:51:ce:e1:c7:f5:9b:fc:f0:7f:1b:1b:bc:12:
c2:74:12:40:6b:8e:3f:39:57:ca:4d:72:33:09:76:
a7:aa:ab:12:05:c8:5a:69:d2:7b:e1:b9:f4:0f:01:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57711
Signature Algorithm: sha256WithRSAEncryption
78:53:6b:fc:78:fd:2d:a4:2b:de:5b:b9:c3:1f:54:bd:95:25:
cf:ab:fd:88:1e:6b:9f:a3:4a:c3:e5:2a:da:a4:2e:e0:3f:ff:
9a:e7:80:db:56:7e:72:b2:7c:1e:a5:f6:b2:59:c5:04:39:5f:
77:ab:47:86:59:e7:80:8a:8a:e8:0d:c5:fd:67:d3:67:0e:bd:
2b:a7:f7:d0:d9:e7:99:03:da:03:02:1e:36:31:a4:00:49:2b:
c3:d4:9f:d1:76:4c:c3:26:9e:15:a9:2a:d8:b3:64:da:8b:46:
cf:0c:b4:1b:af:2e:a1:5b:18:c4:b9:5b:41:6a:ea:7e:71:af:
f5:cc:37:57:8d:98:3c:2a:64:f2:e3:c7:08:30:82:4e:56:a3:
97:99:60:a3:4a:de:92:04:df:50:aa:aa:a2:b7:ba:88:f3:6b:
ae:32:00:49:da:93:bd:3d:49:99:0f:c8:a7:84:65:02:43:cd:
31:2a:13:4a:60:de:e1:9d:b0:66:34:28:e1:f7:87:ac:4d:e1:
04:60:54:3d:97:9d:59:01:ec:30:d4:27:96:7d:b6:29:a9:25:
7c:72:fb:5b:10:d9:47:d9:ba:53:6d:9f:f0:ea:77:c9:07:f3:
b1:fe:73:71:dc:49:0a:9d:0c:44:be:9d:d9:cb:b3:c4:44:bd:
a2:45:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net