Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer (raw, json)
Hash identifier: LHpbF0jbNdxBAyuRacsYCooa0PjWF7QvtSK1iqJrTxQ=
Subject key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827D5BDFCAF6A9C6BFB06F455697A5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57027
IP: 80.75.213.0/24
IP: 2a09:2b80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d5:bd:fc:af:6a:9c:6b:fb:06:f4:55:69:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a665b90069bd71850602e7400c529793269e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:48:e1:49:28:65:e5:16:38:a4:bc:be:07:
cf:a7:a6:dd:a5:54:3c:a9:2b:82:50:b9:b5:d8:3f:
26:3c:00:ff:6f:0d:39:9e:7f:48:e9:3d:45:33:0a:
ec:f7:79:fa:0c:7c:34:e2:89:c3:25:c7:ed:9e:72:
37:0a:b0:1b:44:29:7e:2f:9f:bb:1c:65:93:84:ec:
2b:cd:94:5b:43:be:a5:22:22:9d:15:8c:06:3b:f2:
ee:f8:4e:2e:22:e7:02:58:37:f6:1e:fa:40:5c:80:
4d:bb:e1:ea:52:9d:89:2c:7e:ba:13:53:84:46:06:
38:ce:d2:34:79:1a:f0:8a:32:e9:21:c1:83:0b:d5:
1c:bd:1d:02:7b:b7:bc:e0:8c:e9:6c:df:0d:11:be:
bf:64:07:72:4a:98:fe:f7:35:bc:f6:c6:98:27:9e:
ed:a7:e4:b7:ba:ce:18:ce:2e:30:77:9c:18:46:bd:
e5:3e:52:85:0d:27:c7:c5:4d:d8:9f:c0:4f:14:e7:
70:54:5e:33:50:3f:ef:96:2c:94:64:63:70:57:fd:
3f:9c:de:84:54:7c:e3:46:19:c4:44:f4:dd:4d:8b:
97:a9:4d:a7:a3:69:91:8b:82:b0:d6:cd:22:2e:28:
ff:c3:c2:2f:4b:fc:02:c4:47:ed:c8:2b:29:d0:f2:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57027
Signature Algorithm: sha256WithRSAEncryption
79:57:06:50:d3:43:7e:2d:43:03:7c:32:35:14:ae:52:86:28:
b6:9d:03:55:60:be:2e:88:55:3e:dd:e4:1b:b0:f3:ae:02:ac:
1a:ae:67:00:42:0b:f3:b8:f9:da:dc:9d:c6:38:9f:8e:eb:f0:
88:25:58:93:21:1b:d3:07:e6:91:a1:e5:47:fa:bc:c3:a2:04:
82:65:ab:bb:45:af:de:b7:39:5a:be:0e:bf:b0:18:72:b9:99:
18:55:6c:7f:46:99:f7:c6:0e:52:ee:6d:7c:b9:88:1c:c7:ab:
57:1a:c1:28:57:4d:eb:ce:fa:26:d0:f9:5e:5f:f6:ec:04:d2:
fd:3b:05:b0:29:d7:4b:6c:5f:34:e2:df:cb:b1:e7:c6:0a:bc:
dc:3b:9e:25:2b:08:d6:f9:20:75:99:26:37:e1:89:d0:54:e7:
59:16:7f:17:bf:61:fc:44:95:ac:c1:a6:cf:63:fb:4c:2a:74:
6f:36:e4:57:a4:e4:84:f8:ca:6c:aa:01:31:42:66:1f:5e:3b:
27:9e:81:2b:f4:e5:71:67:d7:21:46:b1:36:04:f4:c5:5c:02:
3f:32:6f:80:58:e9:fd:cd:f8:8f:6d:74:32:67:2c:fe:c4:ad:
53:9c:b4:b6:f0:45:25:71:7f:bd:29:47:58:58:f3:4a:f2:e4:
b5:47:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:04 2025 by rpki-client