Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r3OSLFEhuimq6kvQmPrvo4iCGOk.cer
File: r3OSLFEhuimq6kvQmPrvo4iCGOk.cer (raw, json)
Hash identifier: /5rGYKU47GdTCS1VK7cCiXKrDaBcGJkJkWaaBeAIyNY=
Subject key identifier: AF:73:92:2C:51:21:BA:29:AA:EA:4B:D0:98:FA:EF:A3:88:82:18:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2F848DECF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:01:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.153.0.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699950227151 (0xa2f848decf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af73922c5121ba29aaea4bd098faefa3888218e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:3a:16:ff:5f:4a:c6:53:b6:f0:f5:8b:80:
22:aa:df:45:b3:ca:4f:90:78:81:92:42:1b:a8:82:
bb:e3:0f:4f:8b:63:e7:85:ee:fe:91:41:98:ae:7c:
6f:ac:55:a1:58:2a:4c:4b:57:40:5c:5e:b5:fc:5e:
b7:1c:84:ed:34:5a:f1:06:5c:ce:ed:7a:d6:45:da:
61:e5:80:19:7e:6a:b4:1e:6a:ff:a3:83:21:f0:7b:
3b:bc:11:2f:51:5a:33:73:5c:ac:25:86:63:38:6a:
15:6d:5f:3b:9e:35:40:2d:8c:2d:89:11:d5:e6:aa:
97:7a:37:90:db:f5:ad:d6:e5:71:1b:be:aa:21:cd:
f1:c7:f5:78:2b:bd:f5:6e:47:48:f8:d8:9a:9c:27:
41:1b:5f:97:dc:7a:b0:ba:b5:ae:ea:d9:df:f2:28:
dc:f5:7b:b5:a1:9a:8d:b4:31:29:1c:76:87:1a:a9:
1e:cf:8d:bb:8b:a2:f9:9a:1d:be:a2:d1:98:f4:99:
f5:95:f1:4f:91:af:84:b6:18:02:2b:bd:a5:67:4f:
cb:14:64:48:68:77:9a:89:57:f5:b8:f9:f6:4b:b3:
88:b2:ae:4a:c9:dd:e2:96:c7:ed:64:08:fa:6e:c6:
98:76:a1:0f:57:3d:9e:68:04:0f:16:5e:7b:7f:04:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:92:2C:51:21:BA:29:AA:EA:4B:D0:98:FA:EF:A3:88:82:18:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d8:b1:d6:66:d3:e5:84:f0:50:40:8c:39:0d:ae:02:55:db:
aa:9e:42:da:d6:96:63:f6:72:9c:c3:be:01:12:5b:53:9a:b2:
e9:4c:79:82:07:12:a5:f0:ed:22:d1:20:31:80:a9:50:1d:be:
b5:40:9d:2a:2b:89:f2:d0:3c:96:33:a6:35:f3:87:5d:45:8f:
01:44:98:2a:9d:3a:ff:a4:ab:83:6f:a5:dc:80:c7:83:e5:ad:
16:8d:0e:cb:53:8c:4a:7f:74:82:bd:7c:91:3d:84:5f:62:ed:
45:99:3f:b8:a2:04:34:15:c8:a4:b6:f6:35:1a:e1:9c:b8:0f:
75:0f:b7:96:91:e7:4d:93:4f:66:c0:41:5e:51:40:39:af:c1:
dd:1c:ac:7a:ac:76:65:5e:ee:9d:f6:3c:ff:44:8f:1b:21:06:
d2:64:89:c0:f4:2d:7e:36:bc:58:bf:4a:e2:28:5a:38:e7:93:
ed:55:79:a8:32:78:18:5f:0c:a7:16:16:4a:b3:bd:c4:32:3c:
ba:83:17:42:a9:ec:18:a7:22:08:8d:56:d2:c5:20:eb:3d:3e:
7a:c7:87:e4:b8:fc:dd:3c:94:eb:d9:3e:cb:46:5a:8d:66:2e:
f4:5a:da:bc:e2:fc:c4:0b:e9:1c:66:7e:db:c2:90:bc:25:ab:
45:b7:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:28 2025 by rpki-client