Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer (raw, json)
Hash identifier: I1QNd9pkL4nvDPSiwlTrQCSkDXRAadW4dmnzFHqa9iY=
Subject key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520BE2E2D0ADCFA571791A5FE85AFA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207114
IP: 91.207.249.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:be:2e:2d:0a:dc:fa:57:17:91:a5:fe:85:af:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdba6d5704fd290d0e073376eda688717564d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:d9:fd:67:1c:e4:b8:3d:5f:62:41:b0:56:
d5:19:c2:cd:e1:47:0d:1a:b7:3e:2b:1c:9a:59:39:
10:5a:e7:32:e7:12:4c:8d:52:3f:47:87:c1:c9:89:
d2:6d:6e:b8:2b:b1:98:77:49:01:78:19:df:a0:17:
4e:77:57:4a:f0:37:ba:da:86:2f:0f:61:10:3b:9d:
ec:a3:77:57:23:67:56:d3:d5:75:52:d1:d6:f2:32:
fc:3c:68:9e:27:5e:2f:98:86:58:31:25:cf:ce:46:
19:d1:49:78:39:6e:a9:51:8d:00:ad:1b:33:7e:2c:
4c:ae:1c:da:57:80:86:db:ec:7b:8b:cb:6f:55:a3:
38:f5:41:a1:c5:1f:58:88:71:71:62:cc:8e:f9:5b:
df:8d:57:18:46:0c:ea:a8:20:42:83:a4:d0:ad:b3:
3a:eb:30:cd:90:8f:f0:21:90:8e:2e:11:4b:0e:12:
1b:64:dc:94:de:df:1b:d7:02:23:1b:14:67:66:38:
07:ad:04:7f:76:d8:ce:8f:f1:63:98:85:33:d4:da:
bc:bf:69:21:0d:05:89:72:f7:c7:9b:70:db:57:a4:
66:2f:80:24:44:e1:c3:fa:1f:85:c1:b0:9f:85:42:
80:df:f8:c1:8e:35:35:01:c4:7d:e2:80:00:91:71:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.249.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207114
Signature Algorithm: sha256WithRSAEncryption
16:36:2a:ed:3e:75:61:f5:0f:d7:b2:94:36:0f:7d:b9:85:e6:
07:dd:fd:1d:93:71:b1:90:55:82:e2:0a:21:68:3a:d3:73:df:
99:27:09:25:93:6a:95:c2:e3:b9:a5:a6:a1:71:36:ce:d4:d9:
4e:1e:d2:56:db:65:09:e5:67:5a:e1:dc:b0:21:0b:f4:8f:40:
0d:0f:aa:a0:16:99:26:a6:4f:97:d9:b4:b3:62:6c:13:46:03:
fc:ee:01:ca:22:c2:7e:12:a4:51:cd:fb:54:4b:28:39:1a:7c:
29:98:83:8d:81:ba:3d:cf:ab:ea:30:40:26:a4:52:e9:64:67:
03:e0:66:9c:4f:be:30:15:56:ce:cc:66:cd:13:26:c4:43:3a:
8d:82:a7:4c:77:c1:33:8e:de:f4:ad:27:f9:76:9f:fa:80:56:
7e:38:78:c4:83:9e:9f:7a:f4:bf:ba:70:b8:70:e5:a1:96:40:
fa:35:e9:3e:50:0f:68:f5:bd:4f:07:6a:43:40:70:42:66:df:
d0:1b:92:a4:1d:c4:7e:aa:f7:f0:b8:52:a7:a9:24:56:a6:93:
ec:32:58:ff:d7:93:f9:65:b6:18:67:57:da:e3:8a:c0:a6:e6:
20:b7:86:bb:a0:b8:54:41:8f:5d:a2:51:89:42:d6:ea:c1:d9:
13:0f:4f:7f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQlIL4uLQrc+lcXkaX+ha+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGJhNmQ1NzA0ZmQyOTBkMGUwNzMzNzZlZGE2ODg3MTc1NjRkMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxbZ/Wcc5Lg9X2JBsFbVGcLN4UcN
Grc+KxyaWTkQWucy5xJMjVI/R4fByYnSbW64K7GYd0kBeBnfoBdOd1dK8De62oYv
D2EQO53so3dXI2dW09V1UtHW8jL8PGieJ14vmIZYMSXPzkYZ0Ul4OW6pUY0ArRsz
fixMrhzaV4CG2+x7i8tvVaM49UGhxR9YiHFxYsyO+VvfjVcYRgzqqCBCg6TQrbM6
6zDNkI/wIZCOLhFLDhIbZNyU3t8b1wIjGxRnZjgHrQR/dtjOj/FjmIUz1Nq8v2kh
DQWJcvfHm3DbV6RmL4AkROHD+h+FwbCfhUKA3/jBjjU1AcR94oAAkXFZEQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFM26bVcE/SkNDgczdu2miHF1ZNGWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2QzMjgw
Yi01M2Y3LTQzOTQtODU1OS1hNDYxMTY5ZjFkYzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvZDMyODBi
LTUzZjctNDM5NC04NTU5LWE0NjExNjlmMWRjMi8xL3picHRWd1Q5S1EwT0J6TjI3
YWFJY1hWazBaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8/5MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMpCjANBgkqhkiG9w0BAQsFAAOCAQEAFjYq7T51YfUP17KUNg99uYXmB939HZNx
sZBVguIKIWg603PfmScJJZNqlcLjuaWmoXE2ztTZTh7SVttlCeVnWuHcsCEL9I9A
DQ+qoBaZJqZPl9m0s2JsE0YD/O4ByiLCfhKkUc37VEsoORp8KZiDjYG6Pc+r6jBA
JqRS6WRnA+BmnE++MBVWzsxmzRMmxEM6jYKnTHfBM47e9K0n+Xaf+oBWfjh4xIOe
n3r0v7pwuHDloZZA+jXpPlAPaPW9TwdqQ0BwQmbf0BuSpB3Efqr38LhSp6kkVqaT
7DJY/9eT+WW2GGdX2uOKwKbmILeGu6C4VEGPXaJRiULW6sHZEw9Pfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:31 2025 by rpki-client