Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.cer (raw, json)
Hash identifier: Djt3qSDoCgoCdBEXg9dyMiFx0987B3Jsr83YB9qy/t4=
Subject key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369E357139103CECEAABE6DD6BA79B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207916
IP: 37.26.74.0 -- 37.26.79.255
IP: 83.229.20.0/23
IP: 93.174.80.0/21
IP: 185.80.116.0/22
IP: 2a00:1350::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e3:57:13:91:03:ce:ce:aa:be:6d:d6:ba:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:2b:a7:ae:93:6b:74:65:90:dd:a5:99:46:
12:48:a0:a4:01:36:b4:48:dd:64:b1:b1:6d:b6:e6:
93:c4:5a:09:57:b3:5a:e7:aa:9c:9d:e4:d3:38:1e:
e7:28:dc:ea:0e:6c:5b:c3:53:69:2a:5b:d5:df:fb:
70:41:22:17:ad:19:26:0b:d3:76:7d:61:de:89:6f:
a4:75:c1:08:e2:d4:59:65:c6:02:85:63:a4:9a:48:
1c:37:3e:81:a1:81:74:91:f8:4c:9c:7a:14:06:cd:
02:33:be:df:97:17:82:a5:25:b9:62:be:d9:b5:37:
7f:75:e8:39:da:3f:1f:9e:9d:52:ea:91:58:c0:df:
cb:75:a5:00:d1:9a:27:80:c7:ee:1d:d4:58:0d:cf:
20:1b:f4:3b:76:5e:4a:a1:88:95:ad:0e:1f:93:07:
a4:f3:9c:40:e1:d4:9a:6c:2e:38:02:2e:c9:41:de:
3f:5d:f5:ec:95:7c:0a:9c:c8:c6:df:87:86:e0:0a:
e8:ff:46:cb:3b:30:97:12:8b:f8:34:13:f3:10:a8:
f1:ae:5c:b5:89:4f:d6:d9:c8:96:f9:ad:89:76:52:
36:22:e3:16:18:59:20:b5:4c:e1:43:2f:a4:38:af:
de:47:c3:0c:e8:c8:c2:de:a8:4e:3f:44:de:1b:36:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.74.0-37.26.79.255
83.229.20.0/23
93.174.80.0/21
185.80.116.0/22
IPv6:
2a00:1350::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207916
Signature Algorithm: sha256WithRSAEncryption
96:da:4d:ac:9c:6f:38:ad:96:3e:57:d1:37:6e:d6:11:6c:b0:
40:df:49:e9:6f:d2:c8:a7:0f:6f:2f:67:a2:98:78:61:a8:31:
53:7f:d9:36:31:01:43:21:70:39:b8:89:d8:60:36:b5:0d:0c:
67:e6:e4:ff:63:c1:9e:6c:40:4b:c9:94:67:bd:d1:d4:7b:c0:
8f:ef:fe:91:38:e9:52:9f:a6:30:e6:4f:9e:36:2a:62:d3:97:
4a:bd:fc:8e:64:45:c7:af:c1:a2:3c:e4:75:64:db:12:17:2c:
b7:45:11:8a:11:d2:a8:1f:f5:e9:fa:2d:e3:ec:85:6c:eb:fd:
eb:63:2d:56:f8:60:d7:96:9d:29:d5:b1:49:90:02:7a:1c:10:
b1:89:16:ae:1d:4b:fd:4a:a9:06:f1:01:ae:1d:66:9a:b2:4f:
c4:c6:ba:ad:f2:dd:2f:a3:64:de:0e:8d:d8:e5:53:36:95:5a:
2d:b0:54:00:c2:17:1c:2f:ce:36:68:9d:c3:2c:32:2f:93:54:
fc:9d:32:75:b7:6b:97:f1:66:de:0a:3f:32:ea:2d:c7:49:9c:
9f:29:bc:cb:67:ea:37:17:c4:ba:24:e6:22:6d:2d:86:4d:06:
58:6e:96:1e:44:72:25:13:4f:83:70:03:2f:24:f5:b3:91:88:
81:22:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:51 2025 by rpki-client on console.sobornost.net