Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
File: oXoqrHNkVjHvkxHUssqdNV9_jBs.cer (raw, json)
Hash identifier: 5CvhJOAowXQk4ZJHCVmvNeWOrCgl9n3jQpVhBtsgahM=
Subject key identifier: A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A83F31F56F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.247.61.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722614744431 (0xa83f31f56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:44:6e:19:be:5e:60:04:54:ab:ac:04:87:
7e:5a:8b:64:da:93:22:99:c2:d9:95:32:63:88:cf:
12:a3:85:6f:74:e8:20:fc:ab:a8:16:2e:55:0b:a5:
eb:f3:52:c5:63:ea:45:8d:87:41:12:92:d7:52:81:
71:b1:33:3e:44:29:bc:57:ad:6c:77:e6:a9:25:2d:
ea:06:c4:8e:6e:47:0e:68:39:76:8c:a6:6e:a8:08:
fb:a4:65:64:43:f8:97:6a:0f:ed:96:4a:9e:7d:4f:
75:11:7b:49:d3:5f:3f:75:85:7d:88:d7:1b:68:43:
af:1b:9f:f0:7c:d2:d7:48:fe:5e:d2:bf:f8:a1:e2:
ab:ae:51:d8:85:06:e1:01:36:ae:6f:dd:71:75:c7:
09:df:d1:2f:1a:dd:aa:de:5c:0b:28:3b:64:18:43:
e9:11:46:76:51:9f:f6:79:68:bc:ec:05:47:89:57:
ad:c1:ca:31:a4:07:c8:8c:16:3c:9b:db:34:67:2b:
2f:39:ba:bb:00:64:e1:b2:dc:e8:9c:d1:e7:91:de:
af:3f:e0:ef:62:26:27:c7:7d:8a:17:9b:69:6b:cf:
d9:99:51:6e:1b:7c:a6:7a:54:05:6e:2d:78:03:30:
17:06:e2:70:0b:d3:eb:79:4b:1b:e2:2d:9c:7d:30:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.61.0/24
Signature Algorithm: sha256WithRSAEncryption
73:92:20:44:53:94:52:3c:7a:3c:66:af:98:fa:80:7b:56:e3:
3b:f3:6f:f3:a7:3c:32:27:bd:81:ca:92:a5:6f:8f:b6:33:3c:
67:bd:42:c6:92:69:1a:b6:48:dc:52:25:f1:04:b2:31:fd:24:
7f:7b:36:93:c9:50:e0:90:fc:df:34:b0:a7:0e:50:fe:74:b6:
49:d4:26:db:65:2d:57:0d:f1:70:a5:24:74:19:15:43:9d:36:
ae:96:e2:7d:c5:01:8a:52:b6:8b:6b:11:df:b2:a4:d9:0e:54:
bd:b9:e4:83:12:18:bd:d5:b3:c3:c1:61:f2:c4:5c:35:c0:8c:
b5:ce:ff:5c:aa:fd:5c:41:e3:26:79:b0:7d:e8:a2:4e:11:29:
db:9e:cd:27:87:85:ac:11:f3:37:eb:92:18:3e:e6:83:a3:19:
83:c2:2a:b4:0a:cf:8c:46:62:fb:57:52:ae:17:f0:4c:04:7b:
fe:6b:8f:78:bb:a4:34:79:01:ea:26:d4:6f:6e:96:a9:ce:80:
3f:95:bb:35:71:51:e1:39:a9:f4:31:1a:72:8a:c7:cf:9b:9e:
38:4a:ed:b4:7c:05:03:65:a8:d7:51:1a:c6:9f:f6:de:37:f2:
41:48:66:83:b7:2d:43:20:1a:bc:f4:a3:f8:4a:56:de:13:a5:
eb:9f:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:25 2025 by rpki-client