Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
File: zRJC5sfr2Coj-hoI85br5as0z2s.cer (raw, json)
Hash identifier: DFu+R7EMi10cKciLLLuguu0/oZZsgtbgbSgKsTml/iY=
Subject key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E95D23F36CFEBE80B10632C71506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208978
IP: 45.10.32.0/22
IP: 2a0e:2100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e9:5d:23:f3:6c:fe:be:80:b1:06:32:c7:15:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:c8:9f:14:a5:68:79:44:29:ac:b5:06:c5:
d1:aa:76:0d:f0:83:52:f9:b6:06:21:be:05:c4:17:
e2:6d:05:5a:76:db:a2:d2:0f:19:1f:57:3a:21:69:
8b:8b:37:94:0e:c8:78:d6:d2:48:16:f9:36:97:59:
45:33:35:8b:c0:56:28:56:c1:9f:7b:20:11:79:de:
dd:6d:d1:86:65:67:45:19:2e:4f:d1:09:b9:ce:7f:
96:65:61:45:b9:f8:ca:af:01:ca:4e:fd:ca:e6:c4:
47:75:a7:fc:53:7f:b5:9e:40:04:d2:01:02:ac:2b:
7a:ba:a2:68:74:d3:5c:fc:6f:69:09:40:d0:ae:77:
fb:a6:c8:82:3f:ba:e0:7a:9c:96:2a:46:24:94:a3:
5b:15:75:d7:18:df:43:c3:2f:58:b2:0c:3c:67:d0:
e2:76:1c:8c:b6:b8:ea:b8:b9:d9:4b:e6:72:97:84:
ca:e1:f8:0a:91:64:9c:a5:95:23:1c:6b:13:74:01:
26:cc:70:ac:73:9c:eb:95:be:0f:36:d5:fb:9b:d2:
1a:fc:10:e7:d0:49:f6:96:2f:e1:cc:c1:cd:37:5c:
e4:72:38:a4:ef:b1:9c:5a:e1:99:f4:5d:bc:cc:de:
fb:fc:45:c4:70:6d:eb:c2:0d:91:cb:47:07:e4:25:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.32.0/22
IPv6:
2a0e:2100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208978
Signature Algorithm: sha256WithRSAEncryption
96:53:a2:49:5a:1a:1a:59:9d:d8:2c:f1:7f:7e:a3:0a:91:cc:
7d:b2:27:d2:55:10:3a:50:aa:ac:2f:c2:6a:b6:a5:1a:7a:92:
25:a9:48:2e:43:02:ff:22:12:bf:d0:1f:22:89:8f:f3:18:30:
93:f7:4b:be:41:fc:20:ce:20:55:18:0f:e5:7d:7d:0b:99:f0:
f2:7b:4d:e4:1d:16:77:82:83:52:59:e2:cd:78:af:94:61:67:
1c:27:83:c0:ff:43:8e:07:93:d5:62:9d:79:cf:50:67:19:1e:
8b:c2:40:df:6e:e4:7e:30:8b:90:25:61:2c:99:20:59:5a:57:
4c:93:cb:4d:0f:f9:54:ac:4a:80:5c:34:87:30:6a:51:1a:f2:
e2:be:74:5d:5e:1f:a9:7c:12:67:12:29:54:ac:be:ae:32:8e:
4c:f7:db:07:d2:a5:e7:82:06:f0:5b:02:9a:d9:8e:1f:e8:14:
e4:4b:84:6e:5b:ab:9f:39:57:14:c8:86:f9:1b:63:3c:17:6f:
dd:f7:ba:8f:98:a3:68:8b:c0:06:f8:6b:c7:ad:1a:4f:82:a0:
b9:bf:6f:34:e5:d8:2e:a1:2e:c1:dc:32:cd:06:6c:6c:49:4a:
3a:19:f6:94:48:16:32:f5:ea:85:0e:a1:f2:fa:92:fa:76:47:
71:9b:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:25 2025 by rpki-client