
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer (raw, json)
Hash identifier: K4uDruZInoD2wsLhxKy7HXT/u9LbL5fFAwYAv207/PI=
Subject key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E1A4E508484DD94A5BC1AA097FFCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210861
IP: 93.190.126.0/24
IP: 2a11:7980::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1a:4e:50:84:84:dd:94:a5:bc:1a:a0:97:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:e0:e0:d6:ec:39:e6:c2:57:3c:7e:6e:8d:
15:00:6d:c9:b7:e2:c7:a6:f6:39:00:a3:ea:58:52:
d3:c0:2d:54:2e:c4:f1:fb:b9:7f:b0:d9:6d:bb:0e:
b9:23:69:3c:c2:3f:e5:2a:f8:79:57:f2:64:e5:c3:
80:23:08:12:6b:62:06:a8:3f:2f:36:32:cf:c1:be:
4d:72:d6:06:35:0a:40:3c:d8:8f:ec:e3:64:68:38:
56:de:06:93:e7:ba:6d:7d:42:9e:13:44:11:28:6e:
a7:8e:b5:18:5b:97:41:af:2d:ee:cd:04:f6:98:de:
b5:47:5a:0a:6e:c4:30:0b:5c:e6:59:fd:3b:01:8a:
af:35:dc:32:16:2a:77:7f:93:93:25:fe:dc:9b:ba:
70:a4:59:25:9b:64:27:a2:02:f5:67:bb:12:28:f8:
68:7b:6b:f2:68:f6:a1:7d:ab:d2:89:94:85:ea:27:
39:37:07:a8:68:ab:e8:7e:b7:43:b2:7e:46:87:d2:
8f:1c:b8:e0:92:7d:7d:47:67:95:52:e7:48:43:03:
eb:0b:dc:98:32:e9:11:60:a0:7c:b0:da:d4:a2:b2:
e0:53:dd:3b:41:94:9f:b3:44:2b:06:15:72:eb:65:
a7:75:12:3c:19:e9:20:75:42:5a:6c:9b:6a:6c:7a:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.126.0/24
IPv6:
2a11:7980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210861
Signature Algorithm: sha256WithRSAEncryption
64:7c:44:40:3e:f7:aa:3d:ba:2d:10:fd:ac:c9:6a:69:bc:83:
b2:b8:6a:84:7d:8c:5d:f6:06:ad:ba:ed:a6:b9:70:b2:5c:53:
7d:6d:d3:7e:13:3b:70:c4:cc:bb:a4:92:16:92:05:c5:01:e9:
2a:73:d3:07:5c:4b:ee:1c:58:99:1a:10:4b:cd:ab:f1:41:8a:
bb:1e:d5:89:a6:7a:bc:52:8b:1e:8f:60:d8:0f:cc:af:12:71:
cd:d1:36:48:88:08:ce:65:24:3d:35:a8:91:61:e3:0e:ad:b2:
1e:e7:f5:44:c1:60:dd:92:42:70:a8:e8:85:1a:03:9f:e6:b3:
e8:ed:a4:cf:b1:99:b0:34:11:e6:5b:ca:d0:a2:96:93:4b:c5:
52:37:ba:1f:e3:4d:a6:d3:82:49:14:8a:3b:e7:bc:55:bb:ad:
63:0a:ae:24:9e:f8:61:37:ef:67:37:7f:71:33:39:9f:88:5c:
55:38:2c:cb:05:f0:13:12:16:cf:ee:c0:e0:e3:e9:b5:e2:7a:
c7:3c:f6:c2:7e:4d:65:51:b4:4b:25:32:77:82:0e:49:d2:30:
e1:e7:a5:e7:36:1c:68:a8:f7:bc:53:92:19:71:c4:0c:b6:3a:
34:f5:99:14:ec:9d:ee:f8:e6:65:08:fc:25:68:91:25:5a:a2:
a8:d1:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:42 2025 by rpki-client