Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
File: dbzo8Ite_ESvr41wY-GulRglFCs.cer (raw, json)
Hash identifier: FwiFA/c7t5xZOi3WVTsQi9KJ7E1bnpp1wNQuJ14hC3E=
Subject key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428273997DFB26050BDACAA5FADAC0B4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198916
IP: 178.23.200.0/21
IP: 185.109.68.0/22
IP: 2a01:6080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:39:97:df:b2:60:50:bd:ac:aa:5f:ad:ac:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:7a:9a:38:54:49:31:fb:62:57:0d:d9:a6:
78:cd:49:a4:60:54:dc:92:d7:b6:2c:b4:fb:fe:29:
31:9f:e1:ac:3c:77:34:4b:7e:ed:bd:78:91:93:57:
91:6d:d9:e3:7b:c9:f3:dc:3a:48:a8:e2:61:47:bd:
e5:9b:e4:bc:bf:a8:6a:4c:55:0e:e4:74:c4:bc:2c:
ac:f9:96:51:d8:a5:14:18:a7:77:f6:0a:ec:cb:ce:
43:89:48:9a:a7:e3:86:00:4c:ce:0f:e3:1f:13:d1:
43:bb:86:dc:aa:d5:d0:19:8f:70:1c:30:da:eb:d3:
83:7d:28:89:7b:a1:f9:50:46:30:57:56:b1:fe:61:
0e:b8:53:ee:ac:1a:5f:93:6c:4e:ca:6d:58:c2:2c:
88:d8:80:7f:70:b1:ed:6c:a1:cf:a7:d8:52:6b:c8:
91:4a:98:84:bf:3f:45:fc:a9:55:f4:5d:99:17:49:
89:fd:5d:23:93:3d:37:d6:95:4d:92:78:15:56:b9:
78:03:ae:4a:81:2d:10:cf:d7:96:5c:33:8e:b0:c7:
76:3b:77:22:72:19:4b:53:54:13:b8:64:4a:3d:78:
fc:ca:1c:15:ba:dc:9a:17:4a:d8:e3:c7:c8:44:40:
62:34:50:6a:e7:bc:8d:54:75:32:d0:01:21:48:42:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.200.0/21
185.109.68.0/22
IPv6:
2a01:6080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198916
Signature Algorithm: sha256WithRSAEncryption
a7:70:4b:97:f1:0d:24:16:61:47:b4:6b:55:7e:2c:2f:66:da:
cb:29:09:3f:43:9b:32:de:5d:65:e2:ce:d6:77:8d:7c:43:0c:
4f:12:e2:62:11:ff:d3:7f:e0:c6:04:de:f4:db:72:89:23:0c:
c7:18:20:1a:87:0a:e3:ab:44:8a:e9:df:c7:7c:0a:78:3e:19:
0c:b6:51:02:c5:cd:5d:fc:5b:78:d9:18:f0:5f:f2:a5:3a:f9:
27:a5:c8:db:c0:e2:8f:c6:e6:38:66:8f:fd:42:6e:63:30:f7:
b7:4c:de:c8:97:a1:68:2d:9f:36:84:bd:2c:d6:0d:19:57:97:
14:43:53:bd:72:8b:15:f8:fb:59:07:07:42:a4:15:14:9a:fb:
62:b1:36:02:2d:51:1f:89:08:3c:82:36:8e:86:0f:75:b6:5e:
d3:08:b7:08:4c:2a:87:2c:29:7d:16:ef:97:ee:86:29:bd:df:
53:45:22:85:72:07:11:c3:19:ff:9d:49:08:49:90:25:d3:0a:
25:31:69:2d:24:b9:90:ea:a6:35:4f:9f:f2:96:b8:ed:7e:5a:
da:8b:20:5f:8c:f8:b0:b5:1b:77:f7:d6:9c:90:14:71:7f:59:
ab:88:3e:b6:d4:f7:3e:08:45:95:6c:31:27:8d:10:ec:85:eb:
11:8c:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:59 2025 by rpki-client