Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer (raw, json)
Hash identifier: /Trny8laW4ULDDe9N08bcJF8DGH/CGOqRzr5CqLCgTs=
Subject key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C9287D3973CB5CFCD9E82F2C40085
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51773
IP: 46.28.208.0/21
IP: 2a00:ce00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:87:d3:97:3c:b5:cf:cd:9e:82:f2:c4:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:48:e3:6e:cd:e4:5d:8d:93:f0:20:3b:11:
db:46:65:ef:09:ee:58:1d:3c:20:41:99:a2:8a:48:
24:20:28:a9:4b:a1:36:af:c9:7f:76:87:b9:5a:9f:
6d:b8:07:a4:ff:f9:7a:b1:44:41:b1:8a:a0:e0:fc:
a5:57:d3:5a:6f:12:51:96:79:a3:4c:c2:58:ee:5d:
e8:0d:a6:21:25:6a:28:bc:6e:6d:c0:83:3d:d4:d1:
6c:29:c4:f5:de:d1:bd:c4:ed:28:8a:3e:9f:4b:29:
c6:00:e8:a6:58:bb:84:90:29:55:ec:79:20:51:b0:
87:a7:8a:8a:d5:12:de:9c:26:bc:9a:f4:fe:9f:94:
39:8e:2d:af:bc:a3:ca:74:2d:bb:81:e4:cd:6b:19:
ab:a3:67:d6:8f:6e:81:6e:57:84:85:94:56:87:fd:
1f:49:b8:2d:15:95:43:b6:66:36:ae:16:a6:7e:60:
64:4c:f5:12:4a:84:16:4e:6d:55:bb:a3:d5:ab:b4:
04:1f:b4:51:e6:3a:f7:28:1e:5a:66:38:77:96:ee:
99:6e:4a:18:3f:eb:f3:71:fd:da:1f:32:6a:1c:82:
8d:6c:be:6e:b6:a7:66:4d:d4:23:82:3a:b3:d1:b8:
d2:1b:1f:fa:90:44:a3:ae:a7:e9:7f:69:b1:cb:c5:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.208.0/21
IPv6:
2a00:ce00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51773
Signature Algorithm: sha256WithRSAEncryption
18:22:7a:63:cb:9c:12:22:85:19:00:00:25:4f:72:24:92:d2:
80:1a:f1:ca:51:98:1e:74:8c:1f:21:63:66:db:39:f2:47:3e:
0a:f8:8c:e7:c5:bc:47:96:92:b1:97:d5:c1:21:83:bb:a6:c7:
18:90:a4:eb:1f:d7:1d:1f:a6:e1:08:dc:95:01:97:9a:2a:43:
5e:97:f9:03:a9:e2:e8:41:67:27:b6:64:a6:ad:3c:a2:da:a5:
be:00:2c:0b:49:d6:dc:7a:e2:e1:63:0d:59:cb:ba:32:d3:c7:
6d:21:39:b9:a9:13:5a:b9:d8:be:3b:40:a2:58:1b:2d:b6:6f:
70:b1:b0:04:5d:8a:d4:99:52:02:96:93:81:19:71:4f:19:21:
d1:55:51:1c:40:cb:49:45:1b:f8:75:74:84:85:a5:92:fa:45:
de:e3:2c:4d:bf:60:02:70:6b:bb:e8:34:a0:f9:ed:21:86:5e:
fb:68:c6:fc:99:05:16:ac:95:59:28:54:12:81:35:de:fb:93:
26:1b:fc:33:ad:ad:c6:ff:35:09:00:d8:56:12:0c:92:03:46:
3c:cb:66:b2:cf:4d:e9:f7:30:fb:25:0b:8f:f4:2f:0b:68:df:
cb:f1:b6:a7:bb:92:da:68:76:36:00:0d:1a:e1:ad:00:4d:95:
c2:7e:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:35:32 2025 by rpki-client