Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer (raw, json)
Hash identifier: nANuQS8SLw0C4hUtfywa0+kXOgmqm7OzlEvp8BvziI8=
Subject key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9B69708F5FD5F518D751CF9442F87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51739
IP: 91.223.0.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b6:97:08:f5:fd:5f:51:8d:75:1c:f9:44:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a011a02e929c43f0199c8326302e24899c4a4151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:c6:c3:e5:64:7c:cf:db:ab:79:33:a4:aa:
24:61:ad:c7:ac:94:55:e1:ff:ab:c9:f4:f5:87:e4:
95:b9:16:d3:14:a9:ca:ae:9d:a6:e1:89:bd:0a:7d:
c7:c4:e3:f9:c7:45:b9:c3:7a:21:87:9c:c0:c1:74:
45:af:36:cd:8d:55:53:72:06:5e:76:e4:75:a0:23:
53:8c:f9:40:a6:b3:14:63:04:2b:fe:a4:fd:32:4a:
c9:4f:60:7f:5e:c0:45:77:a3:07:eb:58:44:fd:b6:
cd:19:ee:72:1b:48:5c:44:f1:68:dc:1f:dc:89:d8:
b0:c3:39:ed:0e:7d:ad:1d:7f:f8:7e:1e:ab:15:75:
cd:7e:86:56:64:ca:ac:c2:7c:25:0b:4c:e4:af:de:
e5:5d:26:a2:71:9f:7b:75:dd:52:73:e9:41:6d:92:
5d:f8:53:94:ee:51:74:35:ac:02:68:17:e7:42:1b:
12:55:bb:28:26:69:80:bc:06:99:af:26:a9:7b:0c:
ce:bc:1f:be:bf:e0:5d:60:c1:f9:a7:69:f1:2c:43:
6f:80:1a:7b:57:8f:32:28:dc:5e:c1:79:de:36:6c:
41:2d:28:e1:e3:d1:6d:20:76:fe:39:6a:32:f6:2a:
9b:a2:28:e1:a9:19:4a:90:dc:b0:62:4d:01:df:f9:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51739
Signature Algorithm: sha256WithRSAEncryption
15:58:05:a4:b9:0d:7a:f4:de:a0:21:21:a6:5d:09:61:ec:d8:
49:69:9f:b0:f8:e7:f9:9e:3e:ed:d6:3a:85:97:72:1a:08:c6:
34:4c:fc:ab:fb:cb:fc:4a:a8:4b:5f:56:79:74:a6:2c:f7:b3:
f3:a0:4e:d8:92:74:d1:a7:6b:a3:50:5d:f6:03:d0:d9:83:a5:
2d:30:b5:6f:ee:86:30:09:79:bb:31:81:f9:13:39:f1:63:2e:
86:c4:47:7b:ec:a2:56:25:8b:40:74:7e:37:01:12:3b:d3:d0:
0e:8d:b4:ef:e0:b0:7c:d8:3c:ed:21:44:af:92:63:27:6e:36:
d1:ab:1b:01:3a:cc:f7:fb:74:eb:e5:12:92:d8:eb:43:f4:5e:
96:0f:0c:a1:fc:db:8e:76:4f:8e:f1:f0:00:78:35:67:60:40:
04:fe:92:3b:7d:d1:cd:4e:92:05:59:00:0a:e5:91:22:28:64:
4d:ac:c9:fd:7b:8d:7a:d5:e6:c0:e6:c7:09:5f:4a:79:94:ee:
94:ac:af:d6:5a:ea:d6:1d:92:a8:0b:93:22:23:ed:1e:63:02:
77:34:6f:96:b0:0e:57:d8:a5:80:e1:bb:b6:02:4d:a9:cf:5f:
02:3e:bb:6e:b6:fa:27:ab:85:aa:38:36:bf:eb:d4:7e:60:9a:
1a:81:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net