Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
File: CzEv6XRkvA5qHv-i8ciW96igJng.cer (raw, json)
Hash identifier: qh0JDqYNLkjM/0WO5bGMwBAxXMNISbBFGL6FGLtCQ5w=
Subject key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA724A0500D4A26C5CAD28D676A002
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.247.84.0/23
IP: 2a0d:b380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:4a:05:00:d4:a2:6c:5c:ad:28:d6:76:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:89:2a:70:d4:11:33:20:1d:f5:09:17:63:
c6:db:f9:1a:c3:8c:ad:4e:f9:d3:a5:c8:9e:b3:dd:
87:fb:e7:f4:c9:67:a1:8b:dc:ea:a0:f6:44:42:5f:
6a:13:ec:1e:4b:dc:be:af:16:bd:87:fa:05:8a:68:
fb:9e:b8:49:b8:ca:c8:42:65:98:e2:5a:93:71:b3:
27:8f:37:59:c9:4b:2c:0a:53:fa:5b:c6:aa:2b:49:
aa:4b:e1:bd:84:d8:9a:1d:af:e6:a6:9b:1c:53:66:
54:fe:d2:99:7f:e2:95:ac:24:83:6b:26:b7:02:13:
da:46:8a:f4:09:25:ec:71:50:93:18:bb:dd:3c:c6:
0f:dd:4e:1c:a6:0b:35:65:36:29:cc:f8:c4:ad:54:
e0:e3:56:bf:31:1a:9f:8e:4c:42:54:75:2f:cf:d1:
a7:9a:07:c6:06:84:47:27:41:f7:09:ed:23:32:d2:
40:6e:8c:b6:fb:04:b9:40:3f:8f:73:1b:ec:c4:93:
09:df:10:73:98:3f:21:ec:1d:d3:41:e0:f2:c3:99:
4b:71:8a:58:f3:61:c2:d8:d0:0f:35:8a:3c:81:4a:
6b:5a:6c:08:80:c5:24:df:c6:79:32:0b:a8:7f:c2:
71:43:4c:63:67:15:43:bd:1f:06:a2:79:ac:c4:ae:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.84.0/23
IPv6:
2a0d:b380::/29
Signature Algorithm: sha256WithRSAEncryption
92:c3:80:20:9c:12:88:ba:3d:71:6d:b2:40:1a:5a:03:67:24:
85:69:af:2f:27:a5:e6:09:54:05:71:8d:f4:2a:fd:94:51:c8:
f1:29:e3:d7:24:09:88:fd:10:5b:6f:81:b0:c1:f9:fa:1c:a4:
09:a8:9a:65:2e:98:98:2e:f1:66:30:40:d3:5c:44:c0:9b:ec:
ec:9a:15:e1:2e:25:ee:1f:39:08:52:15:d0:d2:c8:a4:ea:d4:
a5:ee:ef:f0:66:93:6a:63:44:f1:64:d8:db:01:14:bd:93:3a:
bf:33:b4:f9:24:e5:45:7b:ce:16:ae:eb:71:3f:5a:06:84:d0:
dd:fe:f3:5e:ee:98:f2:65:06:ea:08:66:6c:89:12:aa:42:7d:
c0:a9:00:21:a6:d7:25:33:ce:2d:1d:6c:bd:05:09:97:b2:09:
72:30:5d:50:e4:7b:cb:3e:d6:ee:cb:00:fa:be:8d:ea:45:38:
c5:c4:2f:38:5a:3c:ff:18:c7:7a:73:27:79:a3:dd:17:5d:fe:
4f:56:e3:f0:7e:da:19:b7:18:0c:08:49:98:c1:b8:37:c1:65:
d3:c2:6f:c6:cf:ad:5b:2e:ee:00:7c:83:4c:d3:37:2d:fe:20:
84:17:2c:18:52:77:51:e4:57:20:66:b0:15:1b:1a:4e:3e:5c:
df:db:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:15 2025 by rpki-client