Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer (raw, json)
Hash identifier: LHlL9yJiM9SL2GUXFwftTLqbolKehGf3J45Lei/V5mA=
Subject key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA8098D46EBE4A4EF64B36DF9CE4CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48662
AS: 58259
IP: 45.80.16.0/22
IP: 45.89.0.0/22
IP: 91.210.70.0/24
IP: 185.234.16.0/22
IP: 2a0a:4a00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:80:98:d4:6e:be:4a:4e:f6:4b:36:df:9c:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:7a:8c:00:21:95:69:26:ae:5d:6d:9f:ce:
fb:8f:9e:ed:9c:e2:ec:e2:4a:62:5b:37:1b:ae:b3:
60:ab:e0:6c:2e:87:08:ea:95:8e:f2:8f:e9:7b:6d:
f1:d3:72:67:7a:a9:c3:42:7a:df:13:ce:5b:ba:f3:
10:00:00:35:2f:17:9c:a4:69:f9:11:0d:49:fb:71:
2f:1d:e3:c8:b5:74:59:c3:1b:a9:cc:be:e4:34:ea:
28:6a:07:67:59:1f:38:3a:ed:d4:ec:cd:a6:a1:a3:
38:cf:75:a1:2a:ce:67:68:50:38:09:53:03:c9:a8:
07:48:8c:bc:2d:72:96:80:89:8d:c8:4a:b4:89:db:
83:55:9f:36:79:e9:38:bf:72:c6:b3:69:35:6a:3c:
dd:19:d2:3f:6c:1b:00:f3:11:93:f6:e9:8b:09:db:
f7:1e:7a:ed:ed:6a:24:db:22:07:87:45:a3:82:c9:
02:18:81:6f:b9:6c:3f:d6:09:f1:8a:20:8f:95:3e:
6a:ee:d9:7e:0e:b5:fa:0e:3a:37:d6:a0:8f:a9:ac:
68:c0:41:a3:cc:f0:5e:4b:ba:95:51:64:4b:01:9f:
aa:05:08:68:53:6a:8a:b8:34:1e:a9:d3:e4:03:1f:
b3:1d:b2:c1:53:dc:9e:4b:28:09:34:2a:c1:0d:2f:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.16.0/22
45.89.0.0/22
91.210.70.0/24
185.234.16.0/22
IPv6:
2a0a:4a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48662
58259
Signature Algorithm: sha256WithRSAEncryption
ad:25:46:5e:a0:e8:23:59:b6:de:5f:ea:30:0e:3f:bf:9a:3b:
00:f8:f1:bf:2c:04:dc:41:d5:63:7c:6f:cf:3e:cb:db:39:01:
21:70:a7:7e:e6:12:0c:98:9c:6c:d5:14:ce:c0:16:98:5a:56:
0b:3f:ed:bc:40:7a:b5:0b:f1:d3:9f:8c:c9:bf:fa:80:5a:9d:
8b:de:72:ff:25:06:a3:ce:17:77:f7:ba:74:46:05:5e:1a:6a:
ac:10:1b:5e:dc:a6:75:28:df:da:58:30:f6:93:51:b3:6c:8e:
36:7c:10:7f:13:60:7d:64:fb:eb:c2:d3:dd:1d:97:62:db:11:
af:7d:73:79:23:67:7f:93:02:cb:bd:2b:fa:01:6d:b7:c1:60:
1c:17:a3:5a:aa:e7:3f:ee:24:f5:45:15:01:4f:d4:0b:f2:c9:
32:ff:d9:20:22:25:0d:27:c3:be:b6:75:16:28:7c:03:23:f8:
80:de:75:6f:d1:90:36:fe:4a:f1:d6:94:81:0e:a8:87:94:a6:
fd:6f:88:17:68:b6:7f:d5:33:50:ed:57:44:7d:94:11:b0:6b:
97:0c:0a:6d:a9:34:98:ce:ff:b5:33:0e:97:cb:29:39:da:d6:
b9:7a:91:2d:43:c7:c9:9b:1a:fb:1d:38:d4:5c:94:4a:74:7b:
05:2c:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:02 2025 by rpki-client