Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
File: xoxl5pm1dqsROnm-iCiUjx5swmA.cer (raw, json)
Hash identifier: f0Ie2TUd2xMDpAvZniM6azSRLD8naSSuHPSJT8DSnY0=
Subject key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C2822AE9EAAAE4FE8D34AEE7A3A67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50395
AS: 62075
AS: 209419
IP: 45.140.208.0/22
IP: 82.115.216.0/22
IP: 2001:67c:1b0::/48
IP: 2001:67c:18d4::/48
IP: 2a0d:2d40::/29
IP: 2a0e:c6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:22:ae:9e:aa:ae:4f:e8:d3:4a:ee:7a:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:9b:66:6b:43:8c:5c:3e:1c:b6:4c:59:2a:
d2:7b:1f:72:52:ed:e1:39:5c:6b:19:c1:37:8e:18:
04:71:c4:69:fb:93:05:1d:55:3c:57:4d:4a:68:5d:
67:a6:46:0d:0c:9c:ef:4b:15:4e:91:ab:3c:4c:03:
96:c6:ee:ed:c5:36:a7:ce:ea:68:06:06:79:58:d8:
0a:3a:52:dc:9a:d7:dd:f7:19:d1:05:af:94:ba:75:
05:5c:ed:7f:db:ab:eb:ac:32:54:93:94:1b:44:1e:
99:b5:fb:da:5c:4b:11:77:87:7a:c5:26:dc:6c:7c:
e9:71:96:05:c0:38:65:4c:e0:a6:a5:72:3e:80:3b:
7d:f3:5b:bb:30:6c:f1:f3:cf:05:76:96:d0:a4:b5:
da:b2:7e:12:b4:01:4d:14:2a:a7:54:9a:89:27:b1:
bc:e9:bb:8b:be:f5:4d:24:3b:22:08:98:af:34:49:
55:68:43:91:ca:47:23:ce:b7:2f:4b:8a:99:ad:e8:
c2:93:5f:37:31:a9:fd:b1:16:1c:55:14:76:41:b4:
7e:57:02:28:b3:62:43:c8:eb:0c:37:f9:9c:1c:a0:
a1:88:ee:42:24:0d:6a:b2:67:af:b8:04:bd:bb:54:
c5:0c:74:bc:bd:1f:0f:82:26:53:7a:9e:8e:a6:d1:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/22
82.115.216.0/22
IPv6:
2001:67c:1b0::/48
2001:67c:18d4::/48
2a0d:2d40::/29
2a0e:c6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50395
62075
209419
Signature Algorithm: sha256WithRSAEncryption
17:59:a0:43:e1:8b:30:c6:99:59:0b:8d:79:4c:de:cf:a3:50:
91:71:c4:1c:ab:c8:94:23:1b:31:f5:71:00:38:c7:be:4e:a9:
f4:dc:8a:82:cd:02:61:14:10:67:95:38:2f:1e:44:d1:88:3b:
91:96:e2:42:a7:f8:d6:b5:3e:65:29:b6:d3:67:52:fd:c0:44:
36:62:27:02:9e:8a:57:62:8a:33:47:9b:19:16:c0:e0:61:81:
18:fe:f2:a6:78:d9:21:0e:4d:68:35:e0:b1:54:b9:86:fa:0e:
09:e3:b9:9f:f1:a6:49:cc:08:e1:58:21:31:f6:19:ac:d7:1f:
5f:1b:8f:0f:e7:8e:ab:7b:1d:b5:f0:20:47:63:72:45:62:15:
6f:ed:42:69:13:aa:80:49:5e:14:e9:a7:8f:9a:13:33:a8:d2:
02:a6:e3:41:6a:3a:b6:5d:e5:02:d7:68:38:50:cb:0c:3b:89:
5b:61:0c:2c:f9:18:f9:06:26:6c:ce:ac:8f:f8:e0:35:d7:07:
00:37:ea:52:b6:00:a5:f9:ca:f0:da:2e:21:7e:8d:87:90:1f:
7c:e9:68:2a:f9:6e:2d:03:a5:36:70:00:23:cb:76:d8:a6:60:
77:6b:84:72:1d:68:6b:a5:41:46:bc:88:8a:8c:b9:36:48:e8:
54:4c:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:39 2025 by rpki-client