Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.cer (raw, json)
Hash identifier: nmsfkJhGUIsScEJaznvc5VLQYQY4wSz0W0uVsaXXjsg=
Subject key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62701226312A97834DC254E6A7C03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50423
IP: 193.105.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:27:01:22:63:12:a9:78:34:dc:25:4e:6a:7c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:14:4a:ae:db:91:8a:c2:25:ab:ee:62:24:
53:82:31:4d:80:b0:ef:60:4d:db:05:d3:a9:5d:41:
fb:3c:74:37:50:c0:cf:a3:5b:d6:99:fb:8b:cb:49:
e5:2d:2f:1a:3a:2a:1b:35:b8:01:ca:9f:e2:02:ce:
af:ae:d8:ca:ff:00:f6:89:9b:a1:78:9d:83:db:3b:
a2:aa:dd:f5:90:35:c0:c6:88:f4:b1:54:38:7e:b4:
f5:5f:60:c1:15:67:f9:31:c2:c8:fe:cb:0c:97:fc:
ec:cb:6c:55:d2:59:f5:86:b8:f1:08:21:76:6b:b0:
d6:cd:e8:9c:d5:64:7e:59:60:d0:4c:51:c0:e9:03:
d7:54:3c:c0:22:80:ae:81:52:b2:55:29:45:1b:94:
f7:aa:12:a4:dc:ff:73:6d:2a:77:00:18:bd:f4:fa:
53:7f:10:4a:05:aa:f4:a5:d7:72:26:52:c9:9f:c5:
31:b7:fa:7e:a4:49:39:e4:6e:59:c7:1e:0f:d0:ef:
20:35:cb:5d:e4:7e:24:40:30:79:e9:5f:d2:4d:20:
09:ec:a5:c2:4b:08:ea:78:36:6c:c4:6b:8a:f7:09:
5b:bb:43:c5:fb:a8:2f:6b:29:30:8f:17:c1:34:cf:
45:6f:2e:3c:b1:87:4a:53:d0:39:03:03:ec:f5:4b:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.20.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50423
Signature Algorithm: sha256WithRSAEncryption
7d:2a:42:70:c1:d3:e7:e3:ac:46:d9:71:eb:af:df:c0:ac:3e:
82:19:8a:51:5a:b9:e4:48:2c:7e:a6:4c:f3:a2:78:8c:bb:c8:
6f:da:5b:61:f0:13:ef:a0:5c:db:ef:d3:26:72:2b:e4:c1:16:
3d:9d:bd:0b:76:44:4e:2b:4f:6b:8d:95:a0:89:ea:6a:8f:ed:
63:c6:c0:8f:b8:6c:9b:3d:ae:ea:64:57:82:93:65:ab:1c:80:
f3:42:1f:9c:2a:46:fe:49:0b:fc:42:f9:2c:25:60:f8:13:25:
39:68:d6:f9:6d:e8:45:c1:af:98:e3:e9:1f:55:c4:31:19:fd:
e1:22:d6:a1:29:93:1c:54:24:9b:42:89:66:05:87:fc:99:fe:
e4:2f:c8:c7:b4:30:ba:91:f2:cc:91:43:b6:0b:68:0c:8e:26:
08:e2:af:58:9a:7f:61:c7:ff:29:0a:1f:db:ec:ad:60:f6:97:
88:ba:f0:ca:93:05:f2:b1:4e:e9:0a:14:29:96:66:cb:01:44:
7e:80:c6:df:34:d1:65:c4:28:6a:ea:40:59:1c:0b:de:33:b7:
4e:f8:1f:4c:4c:73:6a:ae:a4:c0:3b:94:48:bf:2d:ad:6f:99:
78:0e:fb:ac:9c:55:f8:c0:51:78:e5:e7:40:91:ff:c1:72:dc:
43:78:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net