Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.cer (raw, json)
Hash identifier: m9dzHL7DyW8C28E7+Audiep3hBW4IkEQ6QCBYCSYd2Q=
Subject key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F8AD20683BE0DCD7C6BAE82DC7FFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31671
IP: 194.150.240.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:d2:06:83:be:0d:cd:7c:6b:ae:82:dc:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:c0:ab:16:ca:f6:ab:5f:e1:55:df:ef:b7:
4d:ba:7d:a9:55:5e:cc:ec:d4:e9:8a:ce:22:2d:e2:
7a:46:3b:bd:1b:31:27:b8:96:19:a8:ae:f5:1e:f7:
40:39:97:95:8d:c9:8d:8c:9e:e6:8b:62:33:4e:a6:
d7:d6:7b:5a:4f:47:7a:37:a3:67:9d:56:5b:af:56:
fb:86:d7:03:ae:27:12:9c:44:94:36:4a:15:43:a7:
db:85:1b:7c:c4:1c:6a:98:96:bc:29:5e:c0:74:f7:
b8:50:7a:78:e2:d3:9d:c4:ff:83:8c:4c:57:cf:c9:
e6:91:38:95:cb:ee:90:5e:30:77:be:d3:34:4c:ed:
bc:1c:3c:bf:6a:7b:b0:bb:ea:07:22:26:c9:80:ad:
c3:0c:76:37:34:46:01:56:ef:8f:05:12:c1:7c:24:
d4:79:a5:da:2c:28:64:be:ac:c1:24:db:1c:7e:72:
77:fa:b8:70:13:89:c9:a2:62:62:cc:91:76:de:a3:
c8:1f:37:9b:e8:75:04:3c:2a:12:47:99:af:b7:56:
88:a3:8d:8e:e6:92:ae:27:53:bf:21:ce:8f:76:ec:
3f:51:74:c1:ee:59:4c:d3:d8:a5:11:31:d6:57:5a:
90:16:a1:b9:83:c3:48:c1:e0:ed:cd:d8:79:0f:c0:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.240.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31671
Signature Algorithm: sha256WithRSAEncryption
51:90:21:d3:c7:46:65:49:32:ed:ed:03:e5:77:eb:40:4a:45:
52:3a:39:d2:cf:b5:93:87:c3:3f:80:f7:2a:7f:f1:c2:39:fd:
fa:af:8f:1b:ef:a4:21:0c:94:fc:d0:fb:af:e4:60:1d:da:0b:
37:fe:23:b0:69:0d:04:16:f3:48:70:f0:bc:38:0c:e2:dd:d7:
e3:70:d5:da:a8:0b:71:cf:8d:c3:62:a2:84:bd:36:f5:2e:8b:
76:de:97:a1:a0:9f:07:8c:11:08:fb:85:c9:91:d4:00:26:b2:
88:1b:94:73:31:e8:16:4a:cd:ac:8e:72:f2:54:4c:3b:8f:53:
25:d3:89:c6:2b:7a:2b:c8:2a:00:d1:07:b2:d9:ab:40:18:5d:
f8:a2:6d:04:62:b9:81:be:5a:0c:ca:5b:9d:84:fd:50:6b:b3:
d7:98:16:43:f1:d0:64:61:4e:51:12:69:fe:ea:60:04:e3:db:
a3:2a:76:3b:15:c6:4a:1a:3b:05:a4:f1:7b:a2:78:22:1c:34:
a1:a2:5c:2d:d2:a0:07:e2:ae:f7:69:54:29:4e:53:34:33:01:
3c:88:43:18:b3:26:04:f5:0b:62:b0:d8:1f:4b:9b:7f:e0:d2:
25:43:c6:a6:7e:ab:98:5a:82:c6:25:21:05:ad:ca:81:14:2c:
81:1c:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:53 2025 by rpki-client on console.sobornost.net