Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer (raw, json)
Hash identifier: 8NmsFgVjhrlpo/2rVGJdF9grwJ5JzpKMqk76UIu9sM0=
Subject key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942B9310B9A909F9CA79AA0DD3AF6A47F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 09:50:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21406
AS: 213635
IP: 91.211.196.0/22
IP: 193.109.152.0/21
IP: 193.150.174.0 -- 193.150.179.255
IP: 193.164.234.0 -- 193.164.241.255
IP: 193.188.208.0/20
IP: 193.246.126.0/24
IP: 2001:67c:1110::/47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:93:10:b9:a9:09:f9:ca:79:aa:0d:d3:af:6a:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 09:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:5d:f4:ea:60:78:60:da:4a:39:c7:97:e4:
70:cf:2d:62:c9:7e:79:5a:61:d4:72:22:85:f0:6d:
ff:42:3d:2b:ad:4c:a9:08:44:ae:ed:73:d3:23:5a:
92:04:6b:fd:be:12:2c:da:b7:fa:e6:37:f5:68:27:
65:82:c4:6c:d3:00:af:d5:96:0c:22:bd:85:a7:e4:
f0:4f:15:26:b9:d2:03:5a:e3:5a:f2:da:da:3b:41:
80:e1:c2:f9:af:38:34:6d:82:a4:0c:ed:9d:e3:1e:
71:0d:91:1e:63:2e:b0:88:b2:11:0d:81:81:4a:c2:
8d:a9:81:30:1a:e5:38:7a:f8:ca:b7:6c:22:39:5e:
63:d8:e9:d5:bd:6d:4b:36:5a:3c:2d:d9:27:ae:37:
2b:e4:94:84:78:22:b8:92:14:c6:0b:48:20:d1:49:
35:e1:55:74:3a:e1:fd:ac:3b:36:87:e0:48:af:cb:
9b:42:7e:ac:f6:c5:88:55:ef:ef:80:75:51:06:45:
95:41:98:b7:8b:01:bf:51:9e:b4:f8:83:cd:74:91:
17:1b:45:ff:e1:f4:a3:5d:70:05:91:dc:34:41:c2:
87:ee:df:c0:ce:1e:eb:ca:63:c1:75:68:4b:c3:62:
20:f2:0b:51:88:19:61:8c:ee:ba:12:f8:13:06:83:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
193.150.174.0-193.150.179.255
193.164.234.0-193.164.241.255
193.188.208.0/20
193.246.126.0/24
IPv6:
2001:67c:1110::/47
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21406
213635
Signature Algorithm: sha256WithRSAEncryption
a3:b7:0e:c1:a0:3f:c8:57:b0:83:1b:69:5d:6d:74:fa:d4:ff:
80:bf:5e:74:33:eb:8c:20:90:1d:50:b4:d8:2d:1a:b7:c3:93:
d1:8b:f5:1f:31:3e:77:77:e4:46:12:8d:69:c9:3f:8e:f8:7f:
37:18:21:f1:5a:05:72:1f:2c:8c:15:9a:7a:b5:9f:a0:9d:7c:
ae:7d:10:b5:b3:53:5c:ef:8c:8c:19:2c:09:24:99:fe:8b:88:
ff:7d:b6:3d:e1:5c:e2:72:fb:c4:7b:f9:ff:d3:81:4b:79:a6:
90:a0:8b:53:7c:4d:e8:de:35:09:71:e7:9c:83:f2:50:a4:9b:
ef:ae:df:ef:4e:42:69:f8:cb:59:99:d8:df:cc:39:3c:c6:c1:
28:ae:b3:03:40:49:bb:f1:75:8b:ef:e7:b2:41:4b:f1:68:5c:
a2:dc:8f:14:3b:33:a1:7b:a0:30:95:84:e7:b8:56:85:da:21:
5d:59:22:5c:59:79:d0:92:03:67:85:5b:0e:1a:47:72:c4:19:
fa:fc:aa:ec:ae:5d:d2:91:ce:4c:2e:34:81:f5:95:78:1e:92:
66:ea:4b:96:a5:2c:22:e8:61:82:40:c4:40:3f:15:66:62:fe:
f9:8c:55:31:9e:f7:c7:95:a8:56:ba:cb:95:13:62:28:12:07:
93:2b:39:46
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZQrkxC5qQn5ynmqDdOvakfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAzMDk1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjVmYzY5YjdjNmVlODY5OTMwY2UwYjgzOTFlZTVkODRjNTM0OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVtd9OpgeGDaSjnHl+Rwzy1iyX55
WmHUciKF8G3/Qj0rrUypCESu7XPTI1qSBGv9vhIs2rf65jf1aCdlgsRs0wCv1ZYM
Ir2Fp+TwTxUmudIDWuNa8traO0GA4cL5rzg0bYKkDO2d4x5xDZEeYy6wiLIRDYGB
SsKNqYEwGuU4evjKt2wiOV5j2OnVvW1LNlo8Ldknrjcr5JSEeCK4khTGC0gg0Uk1
4VV0OuH9rDs2h+BIr8ubQn6s9sWIVe/vgHVRBkWVQZi3iwG/UZ60+IPNdJEXG0X/
4fSjXXAFkdw0QcKH7t/Azh7rymPBdWhLw2Ig8gtRiBlhjO66EvgTBoPlEQIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFDtfxpt8buhpkwzguDke5dhMU0lKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzdjMTcy
Ny05ZWFmLTQ5YzktYWFmYy1mOTk0NTNhOTVhOTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvN2MxNzI3
LTllYWYtNDljOS1hYWZjLWY5OTQ1M2E5NWE5OS8xL08xX0dtM3h1NkdtVERPQzRP
UjdsMkV4VFNVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF
BwEHAQH/BE8wTTA6BAIAATA0AwQCW9PEAwQDwW2YMAwDBAHBlq4DBALBlrAwDAME
AcGk6gMEAcGk8AMEBMG80AMEAMH2fjAPBAIAAjAJAwcBIAEGfBEQMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAlOeAgMDQoMwDQYJKoZIhvcNAQELBQADggEBAKO3DsGg
P8hXsIMbaV1tdPrU/4C/XnQz64wgkB1QtNgtGrfDk9GL9R8xPnd35EYSjWnJP474
fzcYIfFaBXIfLIwVmnq1n6CdfK59ELWzU1zvjIwZLAkkmf6LiP99tj3hXOJy+8R7
+f/TgUt5ppCgi1N8TejeNQlx55yD8lCkm++u3+9OQmn4y1mZ2N/MOTzGwSiuswNA
SbvxdYvv57JBS/FoXKLcjxQ7M6F7oDCVhOe4VoXaIV1ZIlxZedCSA2eFWw4aR3LE
Gfr8quyuXdKRzkwuNIH1lXgekmbqS5alLCLoYYJAxEA/FWZi/vmMVTGe98eVqFa6
y5UTYigSB5MrOUY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:29:07 2025 by rpki-client