Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer (raw, json)
Hash identifier: 8oFp4ezS2Jk0XoQoNygXZCmYQ3GVA5HB19mjBU4yaWA=
Subject key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216F0A156620B07154B125E314B938
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207822
IP: 94.142.128.0/24
IP: 2001:678:b98::/48
IP: 2a0a:f00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:0a:15:66:20:b0:71:54:b1:25:e3:14:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:d6:f1:86:7c:ca:ad:a5:17:c2:b4:4c:cb:
33:4f:d1:b1:7d:7d:8f:9d:20:b0:5c:7c:fd:e9:3d:
73:7f:60:8a:e8:41:48:05:86:39:6f:d7:6e:0c:f5:
53:e0:17:37:ac:37:24:a9:1b:37:f8:b6:c2:8c:73:
98:a0:cb:7b:31:37:1f:a6:9e:af:55:11:b2:aa:d5:
53:f0:f1:05:64:cd:fc:ef:19:02:eb:fb:42:be:94:
94:d4:2d:11:32:9f:f2:18:7f:b5:ad:24:f3:a5:78:
08:ed:84:67:6a:62:7c:c8:49:03:4d:d1:ef:9e:83:
74:c7:30:bb:f1:50:43:db:2a:f6:a1:80:e9:6f:6a:
7a:f1:4c:78:db:2e:b3:89:0d:94:cf:47:ab:88:6f:
56:a1:58:27:0d:b0:5c:04:6a:7f:7e:23:36:b0:95:
1a:a8:7a:e9:0e:7b:e2:25:66:97:d2:80:61:19:7a:
be:14:5e:c3:56:32:45:f0:f4:3d:70:92:5c:30:96:
70:47:4c:27:31:ef:87:e7:2e:74:1c:99:01:b3:97:
ce:eb:6d:97:ec:84:66:7b:25:03:ff:e2:5b:d7:9a:
7b:08:29:c2:3d:69:9a:77:0e:b9:ec:ef:ac:10:14:
48:14:be:39:4b:ae:ba:08:c1:09:6a:d0:4b:37:31:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.128.0/24
IPv6:
2001:678:b98::/48
2a0a:f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207822
Signature Algorithm: sha256WithRSAEncryption
4f:70:25:52:a7:a6:5e:b6:7f:e1:40:48:23:c1:39:af:23:86:
61:bc:d7:26:83:5f:ce:3f:b8:6a:1b:58:cc:f5:e2:67:13:6a:
87:a4:f3:16:d0:5d:8e:d1:0c:12:e7:6d:8a:7f:77:2e:5a:bb:
78:3a:84:a5:02:c4:71:7c:ce:ad:33:93:c8:1d:e6:f9:a1:3f:
c2:c2:42:e8:f8:ff:a5:4d:af:1d:21:b3:96:0f:00:49:0a:49:
bd:a0:45:39:7a:e2:ed:8e:8a:7f:20:60:db:36:92:85:ff:1e:
95:6d:7f:59:ec:1c:38:b2:a1:f0:f8:b0:83:6e:a4:c9:b0:eb:
03:be:ac:5a:81:60:8d:21:f3:c1:17:47:96:ad:72:d3:d3:11:
4a:76:e2:4f:ab:41:a9:46:6f:aa:44:d1:85:04:bc:3e:81:59:
2e:39:dc:42:5b:d7:b2:7f:cb:29:64:e8:9b:f3:90:b4:eb:d7:
cb:53:9f:ff:ae:9f:32:46:23:a8:d6:88:f7:7d:e7:64:da:c6:
5b:4b:01:0a:5c:c3:eb:ee:03:d1:29:91:89:02:ad:e8:cb:b3:
6f:fa:57:9a:8f:e4:0f:54:7e:3c:d1:68:c5:d8:3a:a1:69:a8:
d9:4a:bc:e0:57:0d:ca:38:7e:f3:4e:79:f3:50:c5:4e:90:99:
df:7e:86:e8
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZQlIW8KFWYgsHFUsSXjFLk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWFiNTFlOGU1OGNjMTRlZDljYjM1NzMxYWYxZDAxMWRiZTJlMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvW8YZ8yq2lF8K0TMszT9GxfX2P
nSCwXHz96T1zf2CK6EFIBYY5b9duDPVT4Bc3rDckqRs3+LbCjHOYoMt7MTcfpp6v
VRGyqtVT8PEFZM387xkC6/tCvpSU1C0RMp/yGH+1rSTzpXgI7YRnamJ8yEkDTdHv
noN0xzC78VBD2yr2oYDpb2p68Ux42y6ziQ2Uz0eriG9WoVgnDbBcBGp/fiM2sJUa
qHrpDnviJWaX0oBhGXq+FF7DVjJF8PQ9cJJcMJZwR0wnMe+H5y50HJkBs5fO622X
7IRmeyUD/+Jb15p7CCnCPWmadw657O+sEBRIFL45S666CMEJatBLNzEFywIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFGWrUejljMFO2cs1cxrx0BHb4uEuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2NlZmYx
YS1lYzY2LTRkNDUtYmE5Zi00ODhhMjIyOTljYTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvY2VmZjFh
LWVjNjYtNGQ0NS1iYTlmLTQ4OGEyMjI5OWNhMS8xL1phdFI2T1dNd1U3Wnl6VnpH
dkhRRWR2aTRTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAMBAIAATAGAwQAXo6AMBYEAgACMBADBwAgAQZ4C5gDBQMqCg8A
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrzjANBgkqhkiG9w0BAQsFAAOCAQEA
T3AlUqemXrZ/4UBII8E5ryOGYbzXJoNfzj+4ahtYzPXiZxNqh6TzFtBdjtEMEudt
in93Llq7eDqEpQLEcXzOrTOTyB3m+aE/wsJC6Pj/pU2vHSGzlg8ASQpJvaBFOXri
7Y6KfyBg2zaShf8elW1/WewcOLKh8Piwg26kybDrA76sWoFgjSHzwRdHlq1y09MR
SnbiT6tBqUZvqkTRhQS8PoFZLjncQlvXsn/LKWTom/OQtOvXy1Of/66fMkYjqNaI
933nZNrGW0sBClzD6+4D0SmRiQKt6Muzb/pXmo/kD1R+PNFoxdg6oWmo2Uq84FcN
yjh+805581DFTpCZ336G6A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:58 2025 by rpki-client