Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.cer (raw, json)
Hash identifier: Z7H8xJfw9IOUwZFoZVwEN4CThAZuWvGvT7n1QMjfcwI=
Subject key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD9DCE52AC5AD2E8097180D02B76C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39812
AS: 49965
IP: 5.44.0.0/20
IP: 78.139.64.0/18
IP: 89.107.112.0/21
IP: 109.202.32.0/19
IP: 130.255.32.0/19
IP: 185.12.252.0/22
IP: 185.106.56.0/22
IP: 185.137.160.0/22
IP: 2a03:58c0::/32
IP: 2a0f:1d00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9d:ce:52:ac:5a:d2:e8:09:71:80:d0:2b:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:e0:c4:c6:83:2d:db:62:83:46:d6:ec:ed:
22:24:f5:2c:2a:7a:fc:de:4e:22:d2:78:18:18:3c:
a5:69:19:e8:57:22:6c:fe:9f:ad:02:54:95:6b:97:
5a:51:cd:bb:59:18:45:8f:c6:f7:15:95:a6:84:7e:
d9:3a:a4:9f:36:d8:a9:5d:95:cf:87:09:1c:1d:2f:
e0:bc:4a:e3:17:29:07:b8:a2:91:b4:0d:9c:3f:bd:
01:b9:6a:26:9a:88:2f:b3:1e:9e:2d:24:3d:3c:3e:
5a:8e:59:6c:de:a3:e1:29:77:23:c2:5e:62:8b:3b:
cc:7f:49:93:0a:76:2a:f2:80:33:b2:5f:75:dc:56:
9b:6f:d4:0b:78:aa:0a:21:5f:e1:73:e0:81:21:8a:
6b:8d:4c:b0:07:e9:1f:d8:38:91:2e:92:84:b3:04:
92:e3:42:75:67:f3:f5:92:9f:12:53:3e:dd:5b:44:
19:8b:1f:8c:ca:72:6f:db:90:16:2f:92:89:35:b5:
99:aa:95:b0:86:13:fd:dd:86:62:c4:50:7e:4e:93:
a9:ec:60:fe:c5:21:96:16:a1:6a:9f:94:16:43:7e:
21:d8:a3:de:93:c9:ce:f1:de:60:d5:fb:24:5c:bd:
6c:ac:be:e5:0f:17:83:df:e0:63:9c:61:36:99:ed:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.0.0/20
78.139.64.0/18
89.107.112.0/21
109.202.32.0/19
130.255.32.0/19
185.12.252.0/22
185.106.56.0/22
185.137.160.0/22
IPv6:
2a03:58c0::/32
2a0f:1d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39812
49965
Signature Algorithm: sha256WithRSAEncryption
87:c9:01:18:b6:fd:c4:f7:27:50:a2:e6:53:fb:0c:97:29:89:
92:50:ad:d8:a2:7a:01:65:0a:4a:91:5e:d8:84:48:40:cf:6d:
3c:bb:4d:4c:9e:24:e3:74:ba:b3:4d:08:60:c3:e1:a1:95:e2:
3e:5a:98:cb:42:ab:b1:07:f0:fe:6f:3e:d8:38:e1:b6:20:52:
3c:8b:9f:74:00:ba:82:b3:97:bd:9a:c2:08:c2:b3:0f:35:99:
5f:b5:d9:49:fa:fe:38:fc:0c:c0:96:59:3c:4a:68:70:3b:82:
46:e1:b2:98:c6:75:62:63:2e:e1:71:fd:2d:a9:2c:4d:8a:fe:
b5:8c:92:5a:e1:a5:ad:fa:1b:5c:0f:4b:f0:94:f2:6d:ec:a8:
af:6c:7f:34:66:42:ff:05:3c:f9:df:90:71:80:60:e9:56:3c:
b6:83:0a:38:09:f4:48:fe:7a:fa:ae:5b:e6:1a:0e:ac:d6:ec:
e4:2a:0c:eb:3f:6d:30:79:3b:21:9f:d5:04:33:99:f3:40:2b:
a3:1f:e0:b4:e2:7c:83:97:01:db:9c:4a:eb:7c:78:e6:32:70:
82:b9:cf:f1:de:68:cb:59:ea:e7:fc:48:a3:c9:8a:43:68:b3:
d3:41:db:77:7f:04:19:9b:5f:07:96:96:2b:fd:c0:1b:7c:5b:
83:ef:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net