Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
File: ocdHG94YLbnCvBHWjl_1L0qsT24.cer (raw, json)
Hash identifier: uVtQXCjBfVlpAqVwT637pYl1GNqAFfV1IY4VaqssSVs=
Subject key identifier: A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0AB595261CD8C687A17C6F45EFA48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 158.255.76.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:ab:59:52:61:cd:8c:68:7a:17:c6:f4:5e:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8e:f7:8e:39:fd:8d:ba:04:7e:21:c4:46:49:
7f:00:67:c6:26:51:ac:bd:ed:c1:2b:90:14:39:de:
aa:7c:f0:5a:15:11:01:e1:c2:50:6a:c4:b7:f4:98:
35:f2:7e:56:7c:79:1f:78:8b:f0:b2:7a:16:83:f3:
a3:c4:e9:3d:d1:91:5f:a4:d7:e4:c4:ff:92:01:8d:
f0:4c:bb:d8:2d:5a:c3:9b:d0:35:29:48:47:26:6c:
e2:3c:3f:ec:a5:7b:db:ee:f0:79:7d:ca:23:3f:14:
92:62:83:0a:27:ae:93:58:66:8f:56:a5:26:6a:1b:
80:6a:11:7c:6f:34:ba:28:d3:a8:64:a1:ec:7a:c8:
9a:47:68:dc:12:b8:29:fe:4e:ab:b7:75:7a:98:c8:
28:aa:e2:4e:fa:56:c4:b4:95:d1:3e:70:3a:7c:7f:
59:a6:2b:cd:f4:e6:99:96:06:a7:c0:a8:e0:35:e8:
09:2d:98:7a:7f:b3:23:d0:5b:2b:c9:33:16:e3:cb:
b7:ff:73:27:81:94:9b:06:e5:e5:18:f8:45:3f:cb:
ca:eb:12:be:70:3a:33:fc:1b:b0:cb:f5:3d:94:9b:
35:da:ee:c2:cb:42:bf:75:7c:98:a0:ab:1b:6d:cc:
d7:ca:1e:b5:e7:ba:ea:1e:76:08:f0:75:ae:7c:f0:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2c:0d:0b:ad:55:25:a8:8b:ef:5e:b3:b4:2e:37:0f:f7:50:
b8:83:9a:26:6d:0d:4e:de:8b:4c:71:51:24:97:ad:59:79:69:
8a:bc:ff:35:ba:ee:31:04:41:9c:63:dc:27:93:18:de:2b:f7:
a2:95:10:0a:4b:d6:5d:11:8d:2f:da:a6:0f:f8:84:ea:ba:35:
d7:41:e2:b3:87:89:53:3b:32:9f:e0:27:e5:ab:e6:89:84:a8:
8e:ce:f4:27:19:f0:9d:81:f7:1b:de:5b:ff:ff:3c:eb:06:bc:
45:d3:f4:dc:ab:ab:d5:6f:ee:ae:5b:f0:4c:21:86:74:79:74:
3e:11:91:ee:04:f7:db:b8:71:ca:9e:05:e8:da:8a:30:a4:6b:
5d:59:90:ea:92:ec:26:e0:20:11:55:ee:65:4b:39:54:54:71:
8b:d6:3b:de:19:08:3e:fe:35:6c:66:01:e4:fd:15:87:88:07:
c6:e6:cd:b6:b9:d1:5b:5b:2c:80:52:f1:01:e4:a7:ac:13:ac:
42:27:62:a6:3c:37:b8:91:31:86:9c:fe:30:d9:c2:36:9e:2f:
6e:62:63:57:08:75:00:c0:ab:15:d6:0c:ae:e9:1e:44:4a:01:
52:82:7c:7b:5c:a0:95:93:e8:92:b8:7b:50:b3:26:88:38:08:
6e:46:59:f0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvsKtZUmHNjGh6F8b0XvpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWM3NDcxYmRlMTgyZGI5YzJiYzExZDY4ZTVmZjUyZjRhYWM0ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o73jjn9jboEfiHERkl/AGfGJlGs
ve3BK5AUOd6qfPBaFREB4cJQasS39Jg18n5WfHkfeIvwsnoWg/OjxOk90ZFfpNfk
xP+SAY3wTLvYLVrDm9A1KUhHJmziPD/spXvb7vB5fcojPxSSYoMKJ66TWGaPVqUm
ahuAahF8bzS6KNOoZKHsesiaR2jcErgp/k6rt3V6mMgoquJO+lbEtJXRPnA6fH9Z
pivN9OaZlganwKjgNegJLZh6f7Mj0FsryTMW48u3/3MngZSbBuXlGPhFP8vK6xK+
cDoz/Buwy/U9lJs12u7Cy0K/dXyYoKsbbczXyh6157rqHnYI8HWufPCjXQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKHHRxveGC25wrwR1o5f9S9KrE9uMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzc0ZDIy
My01ZGI5LTQ5YjctYjkyMS1iMTc5ZTBiMjRhNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNzRkMjIz
LTVkYjktNDliNy1iOTIxLWIxNzllMGIyNGE3Ni8xL29jZEhHOTRZTGJuQ3ZCSFdq
bF8xTDBxc1QyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAnv9MMA0GCSqGSIb3DQEBCwUAA4IBAQAsLA0L
rVUlqIvvXrO0LjcP91C4g5ombQ1O3otMcVEkl61ZeWmKvP81uu4xBEGcY9wnkxje
K/eilRAKS9ZdEY0v2qYP+ITqujXXQeKzh4lTOzKf4Cflq+aJhKiOzvQnGfCdgfcb
3lv//zzrBrxF0/Tcq6vVb+6uW/BMIYZ0eXQ+EZHuBPfbuHHKngXo2oowpGtdWZDq
kuwm4CARVe5lSzlUVHGL1jveGQg+/jVsZgHk/RWHiAfG5s22udFbWyyAUvEB5Kes
E6xCJ2KmPDe4kTGGnP4w2cI2ni9uYmNXCHUAwKsV1gyu6R5ESgFSgnx7XKCVk+iS
uHtQsyaIOAhuRlnw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:03 2025 by rpki-client