Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer (raw, json)
Hash identifier: RtFUUTGhP4YMJsjJVQZVUfJDVzIbYEIpQWz/DjbVMf8=
Subject key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F7641130EF77D150785BE40C0DBBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.206.228.0/22
IP: 2a0d:c440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:76:41:13:0e:f7:7d:15:07:85:be:40:c0:db:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:26:0d:30:06:b3:89:f6:f6:dd:bd:66:23:
20:62:1e:b3:a1:eb:e1:26:0c:48:2f:d0:cc:c8:c2:
2c:3e:9e:79:2d:c5:1b:f3:59:a0:9e:43:2d:d4:c8:
2b:f1:6e:d7:ee:ec:81:5f:be:21:e7:25:f3:72:bf:
94:71:39:f4:24:d8:ee:ee:aa:25:6f:ad:b8:43:39:
d6:6e:6c:73:30:c2:92:b0:8a:88:0b:1c:03:63:e1:
dd:a1:29:92:7e:07:e5:6e:28:4f:37:ce:04:c7:de:
11:93:e9:3c:92:15:62:ca:ab:c9:a6:da:77:1c:56:
8e:13:71:16:07:f7:c5:cc:d2:82:2c:ad:e7:1a:9d:
d0:ba:c8:7a:11:f2:cc:35:81:9f:80:3c:8a:e4:e8:
48:32:7c:4b:11:07:e5:47:b5:74:08:9c:f8:d3:19:
a6:80:1a:a1:dc:ed:96:fe:fe:99:1e:b2:a1:cc:ac:
5b:8d:c0:be:9d:ca:d0:df:81:7d:6c:69:af:9d:42:
4e:e4:ca:a1:66:fa:6b:e8:fe:d3:d1:28:72:19:83:
af:90:6c:17:2a:42:24:e6:f4:b8:1f:9d:87:9f:2a:
c1:c6:59:b1:78:a3:61:37:c3:d0:11:a1:d6:a0:23:
1a:9d:e3:30:71:01:a4:15:89:6c:75:09:27:83:ee:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.228.0/22
IPv6:
2a0d:c440::/29
Signature Algorithm: sha256WithRSAEncryption
7b:c4:cb:79:4e:1d:76:85:3a:30:2c:69:9e:2f:b9:f3:24:9f:
47:44:f4:89:60:a8:84:94:70:42:d9:be:53:69:5d:6f:1e:51:
c1:21:f1:9e:7e:f0:60:ff:93:07:e0:b7:17:c6:c8:98:6d:7e:
f7:d8:fa:95:fc:46:9b:e6:5a:7a:e4:a7:c0:da:86:1a:95:7d:
47:99:7d:a5:a2:28:35:69:a5:73:55:27:02:ba:a2:90:98:17:
df:81:5e:56:34:e3:0a:67:41:2b:f5:a0:12:1e:c1:20:4e:c4:
d1:a1:5b:b5:b1:27:c9:c6:c7:df:55:e6:f8:28:92:38:1d:24:
1d:fc:a8:5e:6d:b3:72:ea:fa:d3:6b:9c:fe:50:42:2f:99:e1:
1a:e5:6f:57:5d:4f:b8:5e:0d:b1:31:ea:7c:ad:e9:d4:66:64:
01:70:da:de:99:81:45:60:12:56:9e:0a:af:13:aa:17:0d:97:
bb:19:93:74:76:f6:2f:35:1d:80:24:6b:54:1f:e4:af:7c:ae:
5e:43:9a:f9:77:d9:45:f0:1e:9e:a5:99:11:bc:1b:d8:08:71:
ef:79:83:1e:f2:12:12:d4:ae:57:17:f9:ca:a1:09:93:21:53:
fd:86:d7:9b:71:49:8e:32:a0:aa:c4:bd:e4:bc:bd:a4:ca:03:
54:eb:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:03 2025 by rpki-client