Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer (raw, json)
Hash identifier: RzVHM03GO/B9RshwvwHBhu1IYGrN+EBl4PlnWhimOtI=
Subject key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1250C92BF53D8FBB837E1BC763AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211491
IP: 193.22.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:12:50:c9:2b:f5:3d:8f:bb:83:7e:1b:c7:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:b6:c2:d3:34:7d:d9:48:36:fb:0d:da:37:
68:6f:40:0c:05:71:d8:71:cb:c3:52:ca:af:d7:85:
39:82:d4:fe:4d:7b:ba:b0:1b:08:c0:8a:f8:69:94:
0a:db:d2:f5:51:eb:e6:8b:12:aa:16:c9:0f:1c:dc:
6a:2a:0a:d2:5e:a9:5a:2f:9e:ee:02:f6:21:9e:68:
f9:aa:e7:2e:22:35:3f:b6:37:84:60:81:23:d6:fe:
c7:5f:8d:73:8c:d7:86:1b:93:6a:95:f1:bd:4f:74:
6d:28:22:ec:75:10:3e:de:02:b5:20:4f:f9:fb:18:
ce:f5:78:70:8e:7d:74:89:9e:a8:a6:21:4e:09:9f:
c7:fb:98:d5:08:3a:bd:d7:a2:f0:c8:5e:8e:46:31:
78:9c:b1:29:ed:27:a2:ed:37:a2:a5:bc:6d:cb:22:
82:85:03:73:73:a1:e5:79:0e:e7:08:48:7b:4b:15:
fd:e7:1a:2b:1b:53:73:ff:37:bc:4d:8f:86:74:41:
7e:3a:80:28:9b:99:96:e9:93:c9:a9:47:a0:6f:87:
63:35:c5:45:7e:5b:28:03:19:80:9e:8c:5b:88:6a:
7d:cb:5b:c4:0e:d3:45:ef:d6:e8:5c:a8:56:4e:57:
4c:ca:32:15:f0:4b:17:a2:4d:74:cf:cd:5d:68:9e:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.20.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211491
Signature Algorithm: sha256WithRSAEncryption
50:c8:23:20:f4:c4:1b:d4:01:f2:59:46:c7:7b:3d:3e:da:1d:
27:f5:8e:f0:9b:e7:d3:d1:cd:71:a7:b3:d9:5a:d0:09:15:7d:
6a:89:b7:4c:fe:d2:cd:7f:88:d3:8c:58:a2:b5:34:17:33:9a:
c9:d8:46:5f:03:f5:de:f5:91:30:5f:a0:fb:05:24:60:69:18:
f4:75:4e:36:9b:2d:6e:dc:3e:ed:43:44:84:d1:5d:23:b2:fb:
94:be:24:5b:07:8e:53:07:b7:e8:05:dd:ac:c3:f7:e7:02:b8:
ab:22:1c:fc:aa:b8:52:93:8c:a1:80:ae:61:bf:6e:58:78:50:
ab:3e:09:b0:46:9b:a7:a5:f8:e9:14:80:30:39:5c:f1:24:25:
c0:2a:3d:e1:fe:62:bb:3f:52:31:e0:bb:46:c6:a1:a2:17:1f:
f6:05:32:61:74:8e:8a:58:57:aa:9f:1b:f6:f3:83:05:5c:65:
a5:67:eb:dd:52:13:09:ff:f4:84:aa:19:4e:c7:4a:6d:b9:db:
59:54:96:8d:95:ad:1a:f9:df:e1:de:e3:bf:02:1e:d9:21:15:
a0:e3:df:f8:13:aa:2b:5c:48:84:8b:23:2e:65:11:a6:29:2d:
3d:d5:4e:2f:78:55:ea:33:04:1c:2d:40:a4:d5:b8:f9:68:43:
e1:5c:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:42 2025 by rpki-client