Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.cer (raw, json)
Hash identifier: wT2T7Lfeucmvv59zvCrUCBlciJNegQMpjaaLppV8agw=
Subject key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBE1FE95B450B02EE268CD22C10F8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212416
IP: 2001:67c:f18::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e1:fe:95:b4:50:b0:2e:e2:68:cd:22:c1:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2735b19db27d3f2d77d408188453be26b34550ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:92:50:dc:9b:33:e4:90:65:34:d0:b5:fe:
eb:bb:26:08:17:f1:41:20:94:e8:82:05:a4:64:44:
ed:94:de:ed:27:61:81:81:2d:68:2a:f2:d5:6b:2f:
8e:40:76:f5:bc:bd:4d:2f:a7:37:18:98:64:3a:80:
f0:8e:71:9c:b9:40:26:7a:b6:30:bc:b6:f6:49:29:
3f:3a:6d:0e:87:49:70:bb:db:f6:c1:7c:56:6b:27:
65:0a:0a:ef:c5:a1:8d:df:c8:61:c7:9d:c7:1a:90:
a1:a2:a1:95:19:41:72:a5:b7:b8:3c:89:7f:82:67:
20:c5:80:0e:f8:bf:22:ad:dd:5d:16:c6:a7:9b:b7:
0e:9a:22:0a:ff:a4:8d:0b:a1:6a:d0:d0:6d:29:e8:
c3:49:2e:fe:17:74:51:23:f4:1a:b4:04:ee:52:20:
e3:68:d3:ba:c7:e7:63:d3:e7:b1:30:55:62:ef:c7:
68:5d:a8:21:fb:90:36:8c:a2:7c:e1:f5:7a:93:6a:
0d:b7:1f:9a:d7:29:7d:74:2f:60:ae:08:0e:ae:1e:
a5:63:e5:45:38:be:62:d2:d0:ae:ac:b3:60:e7:f3:
53:32:41:15:a9:b6:a4:62:07:8a:27:8a:64:63:99:
cb:13:f2:fe:18:93:59:3c:62:5e:83:80:a4:b6:36:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212416
Signature Algorithm: sha256WithRSAEncryption
43:2b:ed:ce:aa:23:03:b3:e8:ce:95:65:b3:97:18:35:19:ad:
3d:1d:55:ff:1b:c9:46:40:cb:ca:13:08:1b:01:80:16:33:c7:
76:c1:95:a4:34:f3:fd:71:27:34:48:eb:e0:23:5d:dc:e3:0f:
fc:b7:87:a0:e3:df:b7:25:4f:bd:9d:6e:44:a7:66:2e:94:6f:
a3:7e:c9:1c:82:d1:57:9a:05:62:5f:df:36:82:d6:99:09:6d:
af:98:91:0e:a7:19:fc:6d:fa:0d:c4:c5:f0:3e:74:1e:e2:85:
9f:eb:da:76:e6:3b:f6:65:b0:d7:84:b6:e1:b7:2a:1d:1d:d0:
22:b9:b8:91:c3:be:50:5b:ae:da:e2:cc:c5:c3:44:1e:7e:d2:
65:6c:74:f3:2b:61:55:b1:0d:0c:17:ea:a5:7a:7b:d6:7f:41:
98:06:ca:ff:d1:c4:b6:da:58:40:74:4d:ed:b6:ea:9e:f2:da:
c8:22:28:05:17:88:94:8b:5f:71:9b:ff:9a:9a:53:d3:ae:11:
10:4b:e5:91:f3:8e:6f:80:bd:67:9b:5f:80:78:f2:e7:85:8d:
64:ee:6d:7a:81:bb:af:30:7c:60:1e:e8:98:22:92:80:4c:e4:
db:72:6f:11:97:34:58:25:76:d5:12:ab:08:df:14:45:76:dc:
dd:55:47:1c
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQi++H+lbRQsC7iaM0iwQ+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzM1YjE5ZGIyN2QzZjJkNzdkNDA4MTg4NDUzYmUyNmIzNDU1MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlmSUNybM+SQZTTQtf7ruyYIF/FB
IJToggWkZETtlN7tJ2GBgS1oKvLVay+OQHb1vL1NL6c3GJhkOoDwjnGcuUAmerYw
vLb2SSk/Om0Oh0lwu9v2wXxWaydlCgrvxaGN38hhx53HGpChoqGVGUFypbe4PIl/
gmcgxYAO+L8ird1dFsanm7cOmiIK/6SNC6Fq0NBtKejDSS7+F3RRI/QatATuUiDj
aNO6x+dj0+exMFVi78doXagh+5A2jKJ84fV6k2oNtx+a1yl9dC9grggOrh6lY+VF
OL5i0tCurLNg5/NTMkEVqbakYgeKJ4pkY5nLE/L+GJNZPGJeg4CktjYkqwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFCc1sZ2yfT8td9QIGIRTviazRVCtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzAwNjgy
Yy1mMzBlLTQ5NDUtYWQ4NC1jNWIwZWY0ZTdiYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvMDA2ODJj
LWYzMGUtNDk0NS1hZDg0LWM1YjBlZjRlN2JjNi8xL0p6V3huYko5UHkxMzFBZ1lo
Rk8tSnJORlVLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8YMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM9wDANBgkqhkiG9w0BAQsFAAOCAQEAQyvtzqojA7PozpVls5cYNRmtPR1V
/xvJRkDLyhMIGwGAFjPHdsGVpDTz/XEnNEjr4CNd3OMP/LeHoOPftyVPvZ1uRKdm
LpRvo37JHILRV5oFYl/fNoLWmQltr5iRDqcZ/G36DcTF8D50HuKFn+vaduY79mWw
14S24bcqHR3QIrm4kcO+UFuu2uLMxcNEHn7SZWx08ythVbENDBfqpXp71n9BmAbK
/9HEttpYQHRN7bbqnvLayCIoBReIlItfcZv/mppT064REEvlkfOOb4C9Z5tfgHjy
54WNZO5teoG7rzB8YB7omCKSgEzk23JvEZc0WCV21RKrCN8URXbc3VVHHA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:33 2025 by rpki-client