Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
File: oGBriq1VPwlIx6iU1oZxhw64LLA.cer (raw, json)
Hash identifier: U2NxYgywIkcY8E9fweq50qW+qEneUsDLUZ+9uEbAWNc=
Subject key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420685047283EDB48FDAFCC96EC9F73BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 138.102.0.0/16
IP: 147.99.0.0 -- 147.100.255.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:47:28:3e:db:48:fd:af:cc:96:ec:9f:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:2c:29:ab:18:04:20:aa:b5:4f:f8:6f:ee:
db:17:b7:ba:1a:c1:ae:00:ea:ee:bc:f6:31:d4:4f:
02:5c:93:91:56:28:d7:2c:cd:af:d1:f7:e6:86:e8:
ad:2f:f8:8c:99:9f:39:db:30:13:87:88:12:8e:9d:
c3:a8:aa:66:9f:8d:89:89:b4:85:5a:22:43:ea:c4:
06:2d:2c:32:74:f3:df:36:ae:c8:f2:7d:10:33:df:
e1:d0:c3:30:d3:db:5f:54:cf:ba:3f:c4:e1:d6:91:
f0:13:78:14:de:db:4d:0e:8a:eb:53:1a:60:91:3f:
6b:ab:3c:c8:22:06:28:ac:91:c6:3f:c1:14:2c:d2:
35:13:23:8a:28:2e:cb:05:ca:61:b9:07:2b:cd:b1:
20:b5:da:c9:be:d1:74:b6:72:89:ba:6f:2d:4f:56:
ba:c8:be:ce:7d:19:41:55:90:60:5b:9d:a2:8e:6b:
4b:0c:9f:91:2d:24:3f:4c:20:32:14:a0:90:f1:23:
25:d1:df:bf:d1:2d:a0:82:cc:3b:dd:2f:12:d9:27:
06:e1:b3:9f:99:46:c7:48:9e:83:a2:49:fb:35:8b:
86:b2:72:e1:cf:0c:97:16:e7:de:99:87:d7:c1:50:
20:1a:f3:99:78:57:54:58:c3:ee:77:1e:b7:6d:c0:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.102.0.0/16
147.99.0.0-147.100.255.255
Signature Algorithm: sha256WithRSAEncryption
8e:72:8f:29:0c:78:60:d2:22:8f:c5:52:9f:a3:0c:01:ea:4a:
89:13:5b:1e:13:0a:9d:34:2e:11:44:27:da:73:2c:d4:21:7c:
73:f4:6b:ea:c5:68:67:71:18:05:cb:65:6a:85:92:2d:d8:7a:
36:83:57:0b:7f:92:1a:44:83:4f:42:07:c7:71:53:f3:eb:20:
16:45:24:8a:ee:48:32:89:6f:4e:f0:cb:5d:4c:dc:da:df:5a:
0e:50:51:50:0c:97:f5:cc:52:d8:be:cf:28:ba:5a:b0:2f:de:
9a:a1:95:dd:74:7b:96:2f:91:58:e3:af:d5:27:8b:61:05:f4:
10:e8:5e:bd:c7:b5:f6:33:57:eb:d8:76:9c:65:da:82:07:9a:
8c:e4:a3:fa:d6:7e:c4:04:26:2f:b1:ea:a6:54:55:1f:cc:e4:
44:a2:e2:97:a5:70:6d:ba:18:3f:08:f7:9a:41:74:c3:84:69:
59:a2:4c:bc:b9:ea:a8:90:0a:ec:9d:e1:62:c5:c9:75:eb:ce:
3d:7c:f0:eb:16:c1:33:8a:fb:b3:22:59:b5:77:38:bf:a0:e1:
05:50:31:f4:52:ed:49:f6:bb:ff:7d:eb:fe:cd:0a:dc:51:d1:
7b:f2:d4:2b:d6:67:21:cd:1b:ab:4c:37:49:0e:f2:ed:0d:14:
9a:f7:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net