Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
File: otlSJFuzTkDNq11LCQFDwNhYE5A.cer (raw, json)
Hash identifier: T+TAJwTn3Z5ORGSSViYBKT7iYGvpXyFwltXM+Xeu/mQ=
Subject key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424458B0BDB738F80F4AA7EACB4B1E562
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206656
IP: 185.179.192.0/22
IP: 2a0c:4140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:0b:db:73:8f:80:f4:aa:7e:ac:b4:b1:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:e2:a6:0e:75:57:02:7f:a8:74:ba:3c:2a:
b3:a4:90:38:25:d5:05:95:2b:0e:b3:1e:1c:50:85:
e0:9e:d5:ff:9b:fb:9e:61:ab:d5:9f:55:0f:b5:6d:
1f:08:5f:d9:f1:69:1f:a3:36:8f:2a:61:51:ba:28:
96:0c:40:e2:3b:72:c4:36:c0:6b:98:ed:86:8a:aa:
e7:a5:41:9a:e7:ec:db:53:41:44:38:37:24:9c:8a:
ac:4f:8c:54:84:d4:12:b9:ed:f8:f2:c5:5a:fa:9c:
2b:55:9a:29:77:c6:64:db:a5:c4:04:50:4e:5d:7a:
c7:2a:c3:3f:b6:8a:fa:e5:1f:f2:05:57:8f:4d:b2:
b4:dc:08:8a:20:dd:12:1c:03:21:9d:f5:2c:41:d3:
81:d5:04:3c:62:4e:78:c9:2c:56:32:bf:df:85:9b:
ea:79:83:f8:a3:93:c5:c4:71:2c:f0:47:76:41:7c:
3f:a9:39:a7:cc:bf:ec:37:13:41:da:36:a6:88:ea:
7b:16:50:d5:c9:ae:22:ff:ed:c2:dd:c1:c2:bb:f6:
e9:0d:a5:c7:a2:0c:1c:c6:b9:6a:46:d1:aa:07:76:
51:65:c1:82:df:61:86:8b:fe:13:fe:b4:00:2d:ac:
11:45:e2:45:e2:ea:31:bf:ef:2c:65:10:54:11:5c:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.192.0/22
IPv6:
2a0c:4140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206656
Signature Algorithm: sha256WithRSAEncryption
9a:77:73:da:80:ce:67:45:c5:48:47:d5:71:89:91:3b:3a:5a:
56:d9:14:61:17:e0:24:93:c4:81:3f:61:59:3d:c8:04:25:cb:
ee:4e:95:83:d0:32:a5:21:47:0e:fd:6a:05:d1:fd:86:47:c3:
15:17:6e:92:5d:97:c4:17:6d:d7:b4:f7:0c:7d:fa:2e:49:94:
d1:87:ff:44:a3:51:0e:26:13:7f:a6:73:9f:a7:63:5d:b7:6d:
10:d9:b8:52:ff:1e:d5:a1:b8:af:ae:cd:03:e4:d4:6a:ac:6b:
d3:bd:02:6c:97:b7:0c:01:d9:ed:06:da:0c:f4:8e:b2:39:5d:
22:f9:19:94:26:b5:0f:42:e4:4f:34:39:31:d4:db:8c:cf:51:
04:c6:43:7b:b5:20:01:ec:09:38:73:9b:fd:2a:b0:ac:4c:4f:
00:af:d9:51:27:19:82:12:30:b7:c4:23:6a:1d:74:36:77:0e:
f1:9d:e7:f6:a6:9b:71:be:24:fe:a5:d4:19:23:40:3e:58:8a:
4c:6b:1d:9a:d3:21:e5:a8:82:a7:0e:12:33:b7:cc:77:ab:d3:
34:27:23:e9:a6:12:41:db:6e:dc:b2:24:33:25:91:ad:38:2a:
08:c8:00:72:4c:cb:71:4a:43:29:c9:c4:4d:55:cd:01:5d:75:
b1:74:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:22 2025 by rpki-client