Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer (raw, json)
Hash identifier: FdJBkHUIUxvDeJ6xtV+XrqFWJ0KeSVoj+67hxQZRq9U=
Subject key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D4F0A76A3F3F95D7DB0B6F3E9B333
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201422
IP: 185.75.128.0/22
IP: 2a03:4d20::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4f:0a:76:a3:f3:f9:5d:7d:b0:b6:f3:e9:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:7c:26:f3:d6:4d:fb:a2:e4:7e:c8:33:b5:
45:a9:68:69:d2:2e:4f:de:d1:a4:b4:57:af:66:20:
5d:cc:3f:4b:0d:fe:32:3e:6d:82:19:fc:7a:2b:91:
f9:95:ad:64:62:0f:af:98:c0:17:d0:f7:6b:4b:5d:
43:dc:06:3b:3f:80:1c:65:2f:12:13:ae:82:96:e0:
8d:ef:3d:cb:b0:1b:a1:50:7e:f1:e8:28:10:e5:58:
b7:93:15:62:57:f1:7d:8e:3e:2a:1c:f8:d7:1e:a7:
eb:3e:1a:a9:de:c9:29:60:62:d0:03:fd:e8:98:4c:
03:7a:9f:f7:55:86:38:6d:5d:fe:7a:67:be:a4:3c:
2f:69:02:10:47:33:17:10:1a:24:66:b2:e4:3c:ce:
ef:19:bc:91:25:54:b3:b0:1d:33:42:0b:b6:87:57:
50:15:2f:c2:3e:7e:75:e4:f2:dc:5c:f6:e5:ef:c1:
20:a9:97:66:c5:86:54:a6:8e:60:1d:ea:7a:b5:af:
96:eb:58:cb:d0:1f:a3:d4:cf:ec:96:e1:83:08:1a:
49:a7:51:d2:ac:20:f9:bd:ae:46:26:7f:d6:68:01:
0d:9b:df:a2:b8:74:d8:70:75:5f:55:67:2a:ba:a8:
05:54:ef:7b:c9:80:c8:0c:0c:71:5d:b9:22:61:25:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.128.0/22
IPv6:
2a03:4d20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201422
Signature Algorithm: sha256WithRSAEncryption
68:e6:4b:ba:c9:dc:da:1b:0b:26:e4:c5:9d:94:30:8c:1e:07:
78:53:31:9e:7d:31:f0:5c:c6:45:15:0e:4a:8a:42:9e:2e:03:
38:bf:e0:48:eb:14:c0:83:b3:aa:a3:3c:1e:a6:be:b4:da:2b:
e2:af:51:e7:8a:a7:c5:e8:eb:b6:57:7e:95:eb:34:73:a1:ff:
4b:de:e6:08:d2:ac:41:e1:7b:3f:cc:07:c1:89:cb:03:c8:ba:
9f:15:02:99:ee:41:54:2e:bc:5a:cc:c6:25:55:aa:3e:c7:c9:
af:ef:22:82:11:d7:a4:24:c3:b0:bb:50:4e:82:85:97:e9:9f:
6e:cd:4a:2c:34:7a:f0:2c:68:45:7c:54:0c:11:af:6e:eb:c0:
a0:18:d3:01:a0:c4:49:01:6a:71:95:11:6f:a4:0c:35:fd:5b:
b6:81:5c:10:d4:c3:4d:b5:88:ca:33:66:b9:a6:ef:d5:f8:99:
c5:54:5b:83:88:24:3c:85:a5:44:86:06:9e:80:45:f9:32:04:
79:d8:a4:0d:37:be:03:58:67:dc:9b:2d:23:16:e3:d5:94:3f:
47:04:13:c8:a6:55:2c:ae:35:d5:01:dd:c1:65:d4:85:a6:56:
b6:10:60:7e:4a:c3:de:e6:e8:fe:0d:96:8e:65:49:ee:3b:f7:
ac:67:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:02 2025 by rpki-client