Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.cer (raw, json)
Hash identifier: BEgT81WstjTFhUL48q2Dp1O5MIJckOQtaAQIS9i4mpU=
Subject key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC092580D3A06C580E8FAC05C5652E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.153.94.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:09:25:80:d3:a0:6c:58:0e:8f:ac:05:c5:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:a3:9e:d1:d1:d3:e4:99:b8:96:28:39:20:
a0:ed:2e:35:6f:a8:2c:5e:b7:a3:6a:c4:bf:f4:c9:
d2:e8:f0:41:60:cb:a8:36:cb:a6:f9:5d:9b:5a:ce:
6f:3d:31:cc:f9:42:19:e8:c6:af:dc:db:3c:a6:3b:
d6:cc:f4:98:22:22:64:f5:e1:0b:31:21:5a:f1:1a:
63:30:08:e0:e7:3b:72:22:7c:58:d5:13:75:d5:b0:
b9:1a:c3:c2:b7:73:e5:68:3e:f3:3b:fc:ea:04:74:
12:30:29:c1:58:14:d0:53:ee:82:76:9e:a4:a9:7a:
23:d2:83:4c:b0:c0:97:0b:14:06:ee:d6:53:55:d5:
fb:a8:df:20:17:e1:51:59:3d:6d:ee:7c:bb:fc:c1:
ca:24:ea:eb:04:95:88:eb:21:15:8d:a7:8c:94:8b:
30:99:9d:11:9d:cd:09:da:57:9a:0d:4f:2c:43:85:
47:c3:bb:7d:b6:4c:ec:3f:01:4f:46:77:c4:73:60:
4f:df:92:5b:8f:82:e8:cc:e2:4b:fb:a1:5d:dd:dc:
af:48:a4:83:d2:35:b4:00:32:53:b9:83:b2:0c:5b:
9e:aa:99:e5:f4:84:77:3b:15:80:c7:19:cf:9e:cc:
57:3a:65:69:5c:eb:a2:62:81:ca:8b:df:b2:ce:bc:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ff:53:b1:38:e2:14:84:f6:f3:8b:a7:06:b5:d2:fc:67:40:
35:73:0b:ff:73:0b:1d:af:56:cf:92:c8:91:91:6a:7b:15:87:
d2:55:e7:fc:96:01:bc:1f:1a:1e:63:6d:2f:3b:cf:c4:6e:0a:
04:ce:83:4b:33:07:b6:e8:30:46:41:1d:9b:eb:3d:cf:08:6d:
8d:e6:4b:87:3a:63:d2:0e:b3:07:2a:bc:11:76:a9:87:bb:4e:
f1:cb:b9:05:93:89:c8:00:09:43:fe:63:6d:b7:64:ee:42:1a:
80:5e:9c:c2:75:9b:1a:42:32:7c:51:c6:ae:f5:0d:57:d2:8e:
74:1d:96:fb:38:d8:8b:92:05:8c:6c:97:66:68:d1:0b:53:91:
f3:43:d6:97:24:f8:b0:f4:cc:a4:6b:a4:50:c7:5e:cf:1a:1b:
f9:b8:66:d7:8e:66:75:e9:75:87:70:61:f6:ff:e8:d1:91:40:
a7:a0:9e:da:06:b5:3f:01:58:14:5d:ab:3c:59:6d:cc:7a:c9:
62:f8:7a:9a:34:06:c0:e4:25:73:f0:5c:cb:b5:5b:24:01:58:
ce:79:ed:d1:1e:a3:a8:b1:87:50:44:04:dc:fd:62:b8:31:5e:
c2:f7:79:8f:da:53:d3:2e:45:da:66:a6:eb:76:19:5c:e9:c3:
e8:46:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net