Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
File: ow5KB7OUnNWacGYBZYt-PMu7qm8.cer (raw, json)
Hash identifier: cH9sKFhlH7hs9kG88PdqGUJj9TUed0InGeL439jvjgc=
Subject key identifier: A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E450D00A7C7FC9D8C86C5E61E3A6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.111.210.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:45:0d:00:a7:c7:fc:9d:8c:86:c5:e6:1e:3a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:5c:c5:8e:14:58:bf:27:f5:af:29:36:68:
c2:63:10:50:dd:16:07:7d:b6:0d:41:ea:fb:fb:82:
f0:4c:34:79:ae:25:69:38:d3:3d:b7:b5:51:fb:28:
5a:d5:db:d3:6c:8e:96:a6:2f:45:06:4b:02:66:bd:
d4:0f:0e:de:8f:b5:b2:7f:7d:c2:82:f4:e5:dd:7b:
85:ff:2a:1e:83:44:da:78:ae:d4:e1:12:5c:88:4d:
f5:7b:19:3e:d2:11:c5:a1:49:24:70:f8:26:56:a6:
13:c7:6a:7c:7b:dc:fd:b2:9f:55:12:c2:95:8f:57:
e7:a7:6d:da:ee:96:32:e3:05:e0:18:c1:7a:b4:f4:
97:70:55:a6:2e:b3:da:aa:55:ab:00:fe:79:39:26:
bb:aa:c6:2f:ce:2f:1a:3c:6f:79:a9:7b:5c:7d:02:
6f:90:29:78:cf:41:1f:7b:c3:ca:14:86:85:27:15:
f7:b7:74:36:4b:40:b6:c3:40:cc:c0:62:49:75:5b:
01:48:a2:29:22:86:5b:3b:e5:4d:3e:3c:5e:cd:c1:
cd:84:c5:b9:84:c6:d2:91:8d:b3:d1:36:79:b5:88:
c5:6e:13:bc:94:95:14:f0:51:09:c5:e7:04:0b:aa:
dc:b0:12:6c:fd:e3:81:43:bb:a4:35:66:d6:7b:6c:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.210.0/24
Signature Algorithm: sha256WithRSAEncryption
10:78:0a:e1:7e:26:15:2e:50:c5:72:d2:db:2f:2e:f2:95:99:
48:e4:6e:33:7a:8a:a5:2d:56:1e:91:40:f9:8b:1e:b3:41:a6:
0a:37:a9:3f:0e:a6:b0:0e:e3:06:13:93:6e:c9:4e:3f:16:87:
ad:68:fb:e2:d9:82:fa:d9:5c:97:69:54:32:f2:c2:5b:e6:64:
5e:d5:8d:80:ac:9d:14:fb:f3:ff:de:ec:48:9e:0b:9b:26:3a:
66:a8:da:2f:bf:0a:53:aa:6e:bb:54:98:f2:f9:e0:87:c7:68:
30:78:e9:1b:d1:98:6b:e9:b7:64:f8:07:a1:ea:26:b9:0d:e1:
fd:ca:dd:a2:a9:80:57:4e:1a:c8:c4:fb:12:e0:8c:11:64:88:
fb:0a:70:d5:db:76:ff:e2:84:1e:60:17:c8:50:47:16:c8:c6:
e5:3b:e9:f8:be:67:9c:ad:9d:55:20:1c:af:72:bf:e7:48:b3:
4b:c5:61:9e:b8:9a:2c:6c:53:2e:98:70:67:ce:bc:9d:20:22:
55:fe:71:2f:98:10:35:55:d6:1a:66:6d:55:d9:a7:8c:39:53:
7b:ce:f9:80:bf:7d:54:77:94:5f:44:68:0d:0b:7c:5a:59:85:
62:11:a2:c4:22:97:ed:9b:c0:69:1b:5b:23:b7:e7:2a:49:1c:
56:d5:e5:35
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzFbkUNAKfH/J2MhsXmHjpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzBlNGEwN2IzOTQ5Y2Q1OWE3MDY2MDE2NThiN2UzY2NiYmJhYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxcxY4UWL8n9a8pNmjCYxBQ3RYH
fbYNQer7+4LwTDR5riVpONM9t7VR+yha1dvTbI6Wpi9FBksCZr3UDw7ej7Wyf33C
gvTl3XuF/yoeg0TaeK7U4RJciE31exk+0hHFoUkkcPgmVqYTx2p8e9z9sp9VEsKV
j1fnp23a7pYy4wXgGMF6tPSXcFWmLrPaqlWrAP55OSa7qsYvzi8aPG95qXtcfQJv
kCl4z0Efe8PKFIaFJxX3t3Q2S0C2w0DMwGJJdVsBSKIpIoZbO+VNPjxezcHNhMW5
hMbSkY2z0TZ5tYjFbhO8lJUU8FEJxecEC6rcsBJs/eOBQ7ukNWbWe2yEOwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKMOSgezlJzVmnBmAWWLfjzLu6pvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzEyMzA2
NC0wZGQ1LTRmZGMtYWU4NS0wNDY0ODk2MDE4YTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMTIzMDY0
LTBkZDUtNGZkYy1hZTg1LTA0NjQ4OTYwMThhMS8xL293NUtCN09Vbk5XYWNHWUJa
WXQtUE11N3FtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwW/SMA0GCSqGSIb3DQEBCwUAA4IBAQAQeArh
fiYVLlDFctLbLy7ylZlI5G4zeoqlLVYekUD5ix6zQaYKN6k/DqawDuMGE5NuyU4/
FoetaPvi2YL62VyXaVQy8sJb5mRe1Y2ArJ0U+/P/3uxIngubJjpmqNovvwpTqm67
VJjy+eCHx2gweOkb0Zhr6bdk+Aeh6ia5DeH9yt2iqYBXThrIxPsS4IwRZIj7CnDV
23b/4oQeYBfIUEcWyMblO+n4vmecrZ1VIByvcr/nSLNLxWGeuJosbFMumHBnzryd
ICJV/nEvmBA1VdYaZm1V2aeMOVN7zvmAv31Ud5RfRGgNC3xaWYViEaLEIpftm8Bp
G1sjt+cqSRxW1eU1
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:46 2025 by rpki-client