Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer (raw, json)
Hash identifier: CqAbcfyeW0N2tUaYU0cMiZ6zcyHGVbVRbY++AdYuNc0=
Subject key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D943FD2A1E9A6BDDEC25049A245B8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.145.230.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:43:fd:2a:1e:9a:6b:dd:ec:25:04:9a:24:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:4d:39:61:13:69:f3:c2:54:16:16:0f:7b:
80:1b:b1:46:5d:2a:55:d8:6e:e6:a2:fc:51:79:be:
5f:87:40:a2:32:e5:a5:2b:15:98:3e:31:cb:a9:52:
18:6d:fc:ad:61:6a:02:4f:53:0d:de:95:65:5a:e8:
43:cb:1c:97:ff:7a:4e:03:ef:c3:83:96:89:33:02:
a5:6c:51:0b:a2:6c:15:3a:31:0b:32:8f:d0:28:94:
96:17:27:ea:69:dc:33:60:03:28:4d:14:ec:14:c6:
0c:39:d1:4e:73:7a:f2:b5:f6:fd:8a:3c:8d:e5:17:
c4:cc:06:51:bc:ae:f3:31:a5:10:aa:16:ec:e6:1e:
09:2c:db:18:38:77:d8:38:a8:34:8d:7d:a0:5c:27:
2c:ac:58:c2:d2:5f:a7:d0:19:99:09:56:4c:67:e6:
30:e1:93:b9:d4:ec:11:b0:42:ba:64:e3:7f:85:73:
19:1e:43:59:61:4e:3e:bb:07:5b:17:e0:d6:be:0c:
f8:28:00:23:f3:8a:c8:42:7e:93:19:76:fb:8d:cf:
bf:27:6e:c8:30:2f:f7:b0:a0:3d:06:b2:44:3c:9e:
6c:af:4a:80:6d:89:cb:88:3c:ab:8f:48:0c:0f:0d:
fe:83:f4:b0:fa:d1:c4:d8:4f:e1:87:37:5a:0f:71:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a6:80:59:e2:14:97:55:a1:56:77:24:f2:5b:28:84:d4:6a:
b2:61:47:b0:db:a4:a3:8b:65:e5:f8:81:fa:09:33:a1:e3:bd:
cc:91:ea:b5:c3:9c:2f:4d:d6:d3:47:2a:a9:12:be:f1:b1:4b:
28:64:23:c3:eb:c4:9b:52:ec:fb:38:1d:69:f4:75:a4:f6:0e:
4e:ab:6a:ec:c8:4b:16:31:c0:fc:82:d1:a5:9e:13:a1:e3:b6:
4b:01:3f:ce:03:e3:8f:0d:9f:4f:27:bc:68:27:a9:ed:7d:5e:
6f:6a:09:93:6f:8e:11:05:7d:d7:86:68:75:4d:57:81:99:34:
48:08:cd:b7:d7:ac:c2:73:6c:76:4e:ad:12:d8:27:41:39:8e:
79:97:d7:ad:15:55:db:fb:b0:21:10:f5:cc:44:dd:5e:07:67:
42:c1:78:92:07:66:67:23:fc:d9:ec:26:56:5e:a7:0d:62:fc:
11:33:43:4b:b7:b1:44:4d:50:7d:57:a2:b5:35:7e:8e:10:a1:
7d:0e:e5:1d:5b:35:b9:76:51:5b:a7:f1:88:56:3b:35:5e:cc:
d7:f4:d0:f6:08:51:e0:6e:6e:db:0f:46:11:ca:bb:e9:e9:72:
a1:67:6d:92:17:72:d1:4e:45:e7:f9:14:5b:53:5e:c3:1c:79:
e8:6a:78:7f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2UP9Kh6aa93sJQSaJFuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmM1NjQ0MWQ4M2RmOTRiYmQwZTYwMTQ0YTU1NDYzOWU0MGUwNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZNOWETafPCVBYWD3uAG7FGXSpV
2G7movxReb5fh0CiMuWlKxWYPjHLqVIYbfytYWoCT1MN3pVlWuhDyxyX/3pOA+/D
g5aJMwKlbFELomwVOjELMo/QKJSWFyfqadwzYAMoTRTsFMYMOdFOc3rytfb9ijyN
5RfEzAZRvK7zMaUQqhbs5h4JLNsYOHfYOKg0jX2gXCcsrFjC0l+n0BmZCVZMZ+Yw
4ZO51OwRsEK6ZON/hXMZHkNZYU4+uwdbF+DWvgz4KAAj84rIQn6TGXb7jc+/J27I
MC/3sKA9BrJEPJ5sr0qAbYnLiDyrj0gMDw3+g/Sw+tHE2E/hhzdaD3HzqQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKLFZEHYPflLvQ5gFEpVRjnkDgU1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzYyMTFj
NC01YTljLTQ0MWUtYjgwMC1mNjVkZGRmYTBlMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNjIxMWM0
LTVhOWMtNDQxZS1iODAwLWY2NWRkZGZhMGUxZC8xL29zVmtRZGc5LVV1OURtQVVT
bFZHT2VRT0JUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwpHmMA0GCSqGSIb3DQEBCwUAA4IBAQBHpoBZ
4hSXVaFWdyTyWyiE1GqyYUew26Sji2Xl+IH6CTOh473Mkeq1w5wvTdbTRyqpEr7x
sUsoZCPD68SbUuz7OB1p9HWk9g5Oq2rsyEsWMcD8gtGlnhOh47ZLAT/OA+OPDZ9P
J7xoJ6ntfV5vagmTb44RBX3Xhmh1TVeBmTRICM2316zCc2x2Tq0S2CdBOY55l9et
FVXb+7AhEPXMRN1eB2dCwXiSB2ZnI/zZ7CZWXqcNYvwRM0NLt7FETVB9V6K1NX6O
EKF9DuUdWzW5dlFbp/GIVjs1XszX9ND2CFHgbm7bD0YRyrvp6XKhZ22SF3LRTkXn
+RRbU17DHHnoanh/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:51 2025 by rpki-client on console.sobornost.net