Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
File: LZrhAubK20caMKDIWTPgOQvy-co.cer (raw, json)
Hash identifier: hAtf+QWKPYTN/8beSKoutGgZTDXGWEeDOm4Q9+IkDxw=
Subject key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3EEE879DB041370DEA54E7894B87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.21.72.0/22
IP: 2a00:40e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:ee:87:9d:b0:41:37:0d:ea:54:e7:89:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:5e:94:7b:ef:bf:02:bf:1a:17:a5:bd:d0:
78:d3:f2:23:ce:ff:cb:2a:80:16:b8:f7:6d:73:d0:
8d:66:4f:b7:b5:58:ca:c1:60:10:bb:1f:7d:a3:af:
bf:1a:dc:2d:98:a8:ef:2c:aa:73:9f:41:e9:d8:e6:
60:2c:17:b6:60:76:a7:68:bb:44:1a:7b:34:e7:41:
69:63:eb:1a:32:7b:c2:bb:8f:16:a6:5f:45:d0:bd:
84:55:87:94:eb:b1:8d:23:db:c2:9e:36:7d:ba:50:
6d:a8:08:51:dc:0e:95:66:fd:d8:a7:14:4d:83:d3:
bd:a1:43:ec:7f:eb:19:61:7f:c9:13:a0:ef:eb:32:
63:8d:d1:21:03:88:ff:60:38:b8:99:81:61:21:75:
5b:15:04:77:7f:c9:b7:1c:e0:8e:ed:72:58:dc:a6:
f9:45:c9:fd:8d:da:8f:c5:f2:d1:40:47:83:36:21:
10:da:cb:f3:8a:85:2b:0c:e2:c8:c0:b7:23:9f:91:
07:f3:78:65:3f:b7:ce:3b:59:bb:b6:f5:63:99:0a:
fa:ad:2b:3f:48:b1:9a:dd:c3:55:6f:06:d2:67:35:
a6:4d:3b:31:70:1e:ca:46:43:31:82:3b:7a:47:61:
62:51:e1:ba:9b:08:af:35:ac:4a:81:36:ae:42:5d:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.72.0/22
IPv6:
2a00:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
42:2d:62:30:e3:62:71:62:0e:c8:3e:d5:80:31:02:d0:b9:7a:
76:77:ae:ca:ef:18:b7:28:28:2e:a7:c8:f4:63:ff:bc:b0:e2:
0d:35:e1:92:ef:1c:dd:83:4f:3a:a4:14:e1:64:46:ba:eb:d1:
8b:db:f9:b9:17:83:fe:21:33:0e:7f:18:9a:3a:db:77:63:b2:
6e:dc:d3:15:c5:a9:ff:5d:af:05:39:c5:5b:4a:50:82:2f:25:
38:c7:50:d8:8b:4b:ce:f9:b6:a4:78:13:a5:73:ab:62:af:d9:
6b:4f:06:f5:5f:58:2c:4a:68:52:05:33:b3:a2:f3:d3:d4:c2:
ea:61:2d:43:fb:b0:40:cc:8c:cb:8f:8a:a1:17:dd:87:60:f4:
6a:89:a2:18:75:20:7d:08:54:6d:36:e8:b1:86:ad:b4:5d:59:
d6:9a:ae:7c:35:27:b3:27:3b:75:dc:5f:4f:89:b7:65:64:8c:
4d:1d:32:34:71:48:25:0c:d2:28:0e:9c:bd:45:73:67:f7:52:
b9:35:a4:1c:96:c7:24:82:3d:c3:ca:8d:c5:1e:8b:fc:21:48:
85:05:66:f7:74:25:59:21:7f:d9:79:44:df:29:0e:d7:04:ce:
59:4a:08:c1:41:df:97:62:e4:37:d1:a5:74:94:b8:45:81:11:
f9:7d:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:31 2025 by rpki-client