Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.cer (raw, json)
Hash identifier: TqUAvBWVowAhg5m0DJYFvHQSlFTio9kbG4SY7fw/UcQ=
Subject key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F8E1285CC6CB68FFBBF9345BE48FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201723
IP: 2001:678:3d4::/48
IP: 2001:67c:6bc::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8e:12:85:cc:6c:b6:8f:fb:bf:93:45:be:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:90:47:5a:32:7f:bc:47:59:8f:86:d7:01:
19:1e:65:44:16:e0:ea:f7:fe:eb:a1:40:c8:87:f6:
c3:ab:3e:f3:a7:37:6b:d3:df:7a:10:b5:cd:20:ac:
bc:28:6a:e0:92:89:8b:ca:b5:e5:a6:6a:fb:90:a6:
4b:7c:7c:ce:81:77:f6:a2:10:e9:cb:e7:0d:45:bb:
61:22:f7:fe:bb:78:18:03:e6:66:c3:c0:33:69:05:
33:60:92:33:7a:58:30:dc:50:d0:a0:5a:04:bd:97:
0c:43:53:9b:3d:78:e7:ec:ce:09:20:5d:9a:cb:d9:
b6:35:03:15:29:5f:fe:18:1b:c3:ec:3e:4c:92:b4:
ce:74:54:ac:06:6c:16:7a:88:1b:49:14:f1:a3:1c:
0d:a2:57:6a:83:21:45:3a:63:fc:cc:6d:c4:63:05:
31:e2:a9:32:5e:2c:59:43:f9:3a:e3:5d:c9:68:ec:
c1:5d:2c:fd:0a:a0:fc:40:1d:38:d6:0c:bf:1d:bf:
29:50:23:16:83:52:70:ae:16:2b:3b:cf:ae:96:10:
47:93:3d:ef:86:bb:e0:55:1a:7d:5c:e3:aa:2b:be:
3d:20:04:43:87:74:8c:7a:39:20:0d:e3:b1:0e:76:
39:d4:48:ee:85:25:11:a9:82:70:3c:ef:fb:02:10:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3d4::/48
2001:67c:6bc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201723
Signature Algorithm: sha256WithRSAEncryption
1f:7c:84:ba:94:e9:a5:39:63:d9:b7:95:42:79:68:46:2d:95:
d0:7d:1c:a9:da:b9:31:d7:e8:89:b0:a6:4f:4f:0b:4e:f7:35:
11:ab:39:08:ea:b9:39:a7:59:e4:48:71:3b:d6:03:d3:d0:75:
e3:c4:f9:51:9c:d5:64:4f:c2:f8:64:d8:2e:7d:55:3b:56:3a:
cf:7e:cc:ee:ce:64:0a:46:11:9e:19:d1:a2:d2:98:fb:a1:bc:
a1:3b:27:8e:fa:05:9e:51:69:9d:ef:4c:f3:d8:50:c8:a8:2f:
a7:37:cb:08:02:f7:7a:93:a5:13:7e:2b:3f:d8:1e:9a:6d:88:
4b:eb:0f:7c:b6:a5:de:ae:06:68:1e:88:f1:a7:62:9c:b5:cf:
71:08:64:1a:d2:a3:26:b9:e4:29:b2:74:a6:ba:67:12:6a:60:
91:6a:e3:60:61:ed:bf:15:c9:0a:4c:ff:85:53:28:d0:28:27:
d1:88:fe:f1:c1:5f:fd:37:a1:7d:91:0a:bf:67:7d:68:a6:8a:
30:70:47:d7:bb:48:b1:ff:23:e0:80:81:ce:3d:62:cc:94:d6:
4b:30:79:ad:89:40:48:93:8c:29:0a:a9:32:da:29:bd:c8:bf:
52:64:71:57:ab:6f:d1:bf:95:1c:84:90:4a:f8:63:ce:71:78:
ec:dc:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:49 2025 by rpki-client