Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
File: csZGC0-x70a8dFf_DPRjvcTgP6k.cer (raw, json)
Hash identifier: LoBGeGO1YGSmRKPr8sxTGrSgB8WRJr9k/WbGcZdq+tY=
Subject key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B4135F51B9E8AAC3948EC374511AB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.253.134.0/24
IP: 185.81.120.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:13:5f:51:b9:e8:aa:c3:94:8e:c3:74:51:1a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:48:6c:3b:27:2f:3c:3d:c0:d7:05:fc:10:
87:63:14:be:59:03:0d:93:a6:49:a1:8e:2c:d9:b1:
ba:ba:7a:3e:6b:e9:14:dd:47:f3:75:84:a5:33:34:
45:cb:e7:28:00:77:6f:98:8f:ed:0a:98:b2:24:3a:
0f:d5:d1:1b:a4:78:5f:a0:f4:b1:b3:9f:bd:41:4c:
9d:db:fd:75:b7:76:6e:ae:40:08:d4:2b:16:05:57:
46:ee:c8:1d:c1:42:43:db:04:6c:4b:dc:d3:c3:40:
e5:0e:35:e1:a7:11:5e:a8:1d:b4:ff:0e:64:45:1d:
ce:5a:11:01:05:be:4b:a9:5d:12:d1:f2:e6:19:2f:
91:2d:81:31:fe:e5:fb:e9:36:b8:c2:52:2c:9c:24:
67:d8:90:23:b4:89:8e:28:c5:e9:70:b6:d4:8b:10:
19:27:f4:d6:7b:69:18:2a:ad:44:26:33:1f:4d:fe:
db:d2:8b:c2:98:7b:59:f9:6e:c3:31:70:f1:f7:31:
8e:ed:fd:1d:17:66:0a:9e:9b:5b:b8:6c:57:e2:39:
73:3d:7a:af:0b:de:4b:98:52:8a:fa:36:02:df:8b:
9b:10:e4:15:40:54:7f:8e:a3:30:57:88:04:59:75:
fa:18:94:7a:29:e5:35:19:7b:3b:54:73:5b:9c:07:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.134.0/24
185.81.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:07:9f:2f:0e:93:cf:61:75:2c:e8:24:59:12:a0:56:cf:1a:
95:7c:dd:25:fb:d5:03:a0:92:ac:8e:13:be:46:e6:92:e0:46:
00:b2:20:7c:2e:18:5d:d3:de:ec:f1:16:6b:71:e0:98:46:4f:
b5:37:bf:9e:d1:d6:13:87:0b:ca:6c:77:98:ca:af:da:15:1d:
bf:b0:46:6d:3f:e2:43:47:35:ac:29:51:37:6b:84:79:ee:32:
a5:2e:e7:65:34:6f:38:8f:33:3a:7c:92:72:23:c8:9e:04:eb:
2b:67:87:f9:61:af:68:31:0f:a9:a7:c2:32:f9:f7:af:aa:1a:
1d:5a:10:b5:15:15:43:fa:f6:2b:5a:3c:b2:f2:99:b8:06:71:
1c:56:2a:02:ac:24:74:69:a4:40:46:34:1e:f3:d2:08:7e:59:
20:7b:b7:b0:5c:a7:0f:ba:a0:56:66:1a:28:d9:de:bf:95:1d:
12:64:62:4f:80:f3:c6:02:87:7f:e9:b1:4d:20:ac:ea:17:e4:
3c:29:28:1a:79:2d:ca:96:8e:d1:96:45:b7:bc:b3:c2:d3:7f:
b7:96:d5:9b:30:c3:06:66:81:fd:cb:90:0f:b1:9a:73:00:78:
a4:f0:c9:bd:34:13:d5:cd:f5:a8:0d:2d:99:e5:80:7f:45:ab:
2a:bc:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:40 2025 by rpki-client