Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
File: ZboV1Huk9EgnZEctjZcUah67v4Y.cer (raw, json)
Hash identifier: KcQD6BL52RYkz0LkuXnYm+W+mCnC0KPTzcvnqH2tnC4=
Subject key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019445E9EF74A0811D44672F6F418C6D7DF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jan 2025 12:35:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.235.174.0/24
IP: 188.227.204.0/22
IP: 195.69.225.0/24
IP: 195.88.202.0/23
IP: 2a02:7f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:e9:ef:74:a0:81:1d:44:67:2f:6f:41:8c:6d:7d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 8 12:35:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:ec:a6:7c:91:81:c3:cc:21:40:80:5e:c4:
7a:f5:ef:d4:fc:30:fb:82:74:14:17:76:c6:7e:d8:
1a:de:2f:fe:fd:0f:85:37:06:7e:87:c7:f0:c7:9b:
c1:4f:2b:05:0e:d1:4b:3b:80:4d:75:f3:8e:70:36:
c6:69:92:b1:33:54:7f:64:fd:d5:ce:2f:af:5b:11:
6c:1c:c7:9c:28:e5:f0:d5:ca:95:b5:95:21:b4:18:
2c:d2:f9:de:29:0f:56:4c:dc:03:57:42:c2:8a:d3:
30:42:7d:2c:11:e4:7a:dc:fe:ef:d1:60:03:a1:1d:
45:54:c7:11:b3:2f:83:7d:9a:d9:15:ca:51:81:fb:
c2:b3:8a:3b:e3:be:26:0e:56:4f:95:58:db:68:ba:
66:76:0e:f4:5e:c3:42:f1:1e:09:cd:e8:b0:3d:c7:
e0:57:fc:7d:20:cb:d1:7d:28:b8:4f:05:39:3a:c6:
15:c7:a1:45:82:9f:e8:a9:b8:7f:50:bb:38:40:96:
42:64:62:96:da:d0:45:03:c8:87:5d:f6:8f:ca:bd:
14:36:ba:6e:ed:c6:38:2a:3e:86:2a:4e:db:c0:36:
11:6e:68:77:d4:55:f4:cb:02:21:fa:95:50:14:79:
e5:e7:ab:eb:b3:9e:44:2e:0a:56:89:4d:10:67:42:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.174.0/24
188.227.204.0/22
195.69.225.0/24
195.88.202.0/23
IPv6:
2a02:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
af:aa:90:d4:40:3c:fe:5a:25:94:2b:a0:e1:bb:cd:ea:5c:1a:
bc:af:ac:01:6b:91:f1:30:fd:f2:a7:e4:ee:42:b0:04:e0:3b:
ec:c9:69:81:62:01:06:d7:58:0e:0c:3d:3c:b8:c5:f0:75:c4:
1e:62:f9:6f:74:a4:61:26:5f:58:c5:23:19:eb:9f:54:91:53:
b2:ae:f1:7a:47:42:3a:9c:4e:5a:ee:90:4c:98:dc:41:aa:89:
34:c9:47:19:7c:67:05:1e:b4:72:99:a1:90:7b:d8:69:b7:ae:
db:bf:82:a6:a4:74:cb:9a:5a:4b:1f:46:c5:69:7b:a6:cc:0e:
ad:ca:1a:fe:cc:ef:d7:66:e0:88:ce:a5:03:96:19:f2:23:6b:
a5:f1:a9:2c:40:5b:50:78:2f:bd:0c:b3:b3:b8:0c:97:68:34:
0d:bb:91:1d:78:c9:e9:6b:6a:a7:04:8d:84:6d:ea:33:38:32:
bc:44:04:c9:1f:25:62:0c:df:41:a3:5f:35:ff:bc:20:91:88:
cf:4b:22:81:f1:aa:f4:fc:7a:65:4d:ee:69:af:07:33:68:d1:
a7:e8:56:ac:6b:fc:a4:b4:b8:f6:ef:3e:20:28:1e:67:4b:3d:
dc:d9:2d:b1:15:95:6e:bd:1f:df:29:73:53:25:36:79:db:e4:
d7:3c:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:43 2025 by rpki-client