Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer (raw, json)
Hash identifier: MxrUMres7FS5MWxWr4rJrXFXFfqXIOErJHg3lEyGTNQ=
Subject key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F32606219BFFFC8C89DA2F983ADF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57834
IP: 185.197.124.0/22
IP: 2a0a:7940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:32:60:62:19:bf:ff:c8:c8:9d:a2:f9:83:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:7f:29:93:2a:94:8e:0b:b7:d4:b1:59:fd:
41:46:01:7c:84:96:2f:26:04:4b:c0:2f:e0:92:ed:
66:e4:1d:dd:44:78:e8:e4:94:6b:fc:79:68:e6:23:
6d:d1:24:c2:d0:05:73:22:e6:6d:95:c8:c4:b1:2c:
24:a4:10:70:a2:cc:6b:a9:fb:58:05:6e:bb:c6:b8:
f5:e3:28:8d:d4:e7:e6:aa:17:ab:51:9a:f8:72:d2:
df:e8:68:fc:77:b2:b9:d6:18:66:cd:55:f7:3a:1a:
04:d7:85:00:05:b2:43:37:44:5f:ad:6d:0e:af:12:
98:b9:b4:f9:1a:f4:0c:c0:a9:9e:43:21:50:a9:82:
2b:a2:7c:d5:82:92:c4:f3:49:43:b2:92:8e:25:6d:
40:7f:4f:45:e4:1d:22:55:4f:98:d7:0a:71:ee:e1:
a6:f0:14:3f:31:7a:a6:c6:2a:db:60:85:5c:60:49:
46:f4:da:4d:aa:82:47:cd:04:0e:d9:cd:f8:41:47:
9f:c4:9f:01:a3:cf:d1:14:bf:e3:45:d0:5d:2d:99:
2d:22:ab:da:40:6c:f1:f0:85:59:a3:b5:0a:b8:f9:
ff:fa:6d:ab:3b:19:fa:f7:27:d3:07:fd:2d:fd:34:
f6:ad:32:25:de:d6:be:e9:a8:65:59:97:2a:06:ef:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.124.0/22
IPv6:
2a0a:7940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57834
Signature Algorithm: sha256WithRSAEncryption
30:f3:f6:39:69:42:fe:9d:1f:57:0a:75:a9:89:ed:05:9e:96:
b2:40:8b:ca:1a:40:8a:df:c8:91:ab:d5:d5:3a:c1:92:29:0f:
9c:49:08:b9:e8:d5:48:93:c9:89:e4:da:aa:6a:0b:e1:bd:74:
29:7c:da:7b:ff:6c:9f:8d:ef:98:df:7a:ac:38:32:1f:61:b1:
32:97:e1:ba:ba:32:82:fb:aa:13:29:2d:80:c1:9e:6e:b3:36:
e7:d7:e5:1f:0f:c5:47:6c:16:de:e3:94:e3:59:b0:6c:24:92:
81:5c:79:32:50:dd:aa:9e:65:4a:95:82:0b:9d:83:98:c7:db:
f7:d3:25:03:20:51:e2:d1:ce:be:2d:17:c5:c7:66:a8:c6:60:
8e:db:a9:b2:38:28:d1:52:ac:02:6c:a1:85:c0:d9:8e:60:5b:
f4:57:d3:90:d0:3a:db:a6:ce:02:07:cc:73:c3:fc:87:2c:34:
83:3a:35:fc:da:be:ef:2d:24:a0:89:cc:da:68:f2:cb:a9:9d:
19:cc:73:f0:63:f8:dd:55:e5:b6:30:ed:42:f2:8f:10:dd:20:
c7:2a:99:9a:70:8c:c5:2c:07:7b:60:18:24:90:51:85:0e:cf:
87:a8:42:2c:74:c3:46:1b:1e:97:1c:56:38:3d:63:88:84:98:
62:c6:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:19 2025 by rpki-client