Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z1AJ71eA0aT05nfmK_o7R_6-kO8.cer
File: Z1AJ71eA0aT05nfmK_o7R_6-kO8.cer (raw, json)
Hash identifier: El0QR/UtR8UK/+yqr4vOLYTa7NCfc4h10RmmEGwisg0=
Subject key identifier: 67:50:09:EF:57:80:D1:A4:F4:E6:77:E6:2B:FA:3B:47:FE:BE:90:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F28E4B7A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.228.32.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683585877923 (0x9f28e4b7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=675009ef5780d1a4f4e677e62bfa3b47febe90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:08:44:2e:e5:b9:2f:c2:29:0f:5f:9b:11:
dc:65:5f:dd:da:d3:da:c5:6d:c8:7f:bd:06:37:4d:
68:66:c2:d5:5b:7e:45:3e:3b:0b:6d:b4:af:d0:5f:
09:26:fc:00:e9:a6:54:d0:55:aa:79:6d:af:1a:de:
69:4e:52:d1:63:fe:a4:44:1f:ef:d7:d6:bd:e3:ca:
72:62:63:41:8f:96:49:65:8d:f7:b4:7a:7b:08:cf:
a2:7f:d1:45:9d:70:f4:83:5e:88:39:d6:05:65:81:
98:27:0a:6a:b0:f0:06:8f:ab:c4:2a:a9:8a:32:4d:
b4:79:e0:4c:82:41:45:46:ab:99:23:8e:c8:2b:b8:
e5:8e:5a:48:e2:27:48:05:ce:81:f9:d2:f0:b5:7b:
95:4f:9c:e0:6c:46:ec:9d:d3:76:3f:ec:65:23:8d:
e4:9f:fe:0e:02:8b:d9:da:5c:5e:b7:3c:bd:3f:50:
e5:5d:46:fa:68:79:6b:bb:29:e6:66:b2:5a:b3:77:
4c:32:6b:12:b1:77:0d:5c:7a:78:8b:9d:f7:1b:16:
b9:81:55:68:3e:0e:52:f6:50:11:ae:c3:fc:70:9b:
8e:15:5a:11:d1:62:ba:81:99:bf:e9:20:61:37:df:
4c:88:b5:39:e5:e8:8b:ae:16:f1:6e:75:09:7a:4c:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:09:EF:57:80:D1:A4:F4:E6:77:E6:2B:FA:3B:47:FE:BE:90:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d5:a7:1e:02:c9:43:ec:f6:c3:b2:53:9b:3a:01:ea:25:3c:
87:4c:6e:8b:8f:67:5a:8d:ed:93:28:60:8f:0c:d6:2e:21:76:
df:4c:ca:cd:61:df:f2:1e:ff:54:c6:d7:39:15:99:a5:9a:5d:
7b:47:24:2d:78:bd:dc:83:e5:20:4e:b8:67:f1:7d:ec:db:e3:
d7:2b:80:0f:9b:0a:6e:66:c6:51:84:5e:8d:5c:c2:b3:96:f8:
0d:8b:0b:12:24:62:33:ab:40:1b:1d:eb:58:5d:a4:2c:4c:58:
79:13:75:82:0f:12:10:1a:9e:75:5e:3f:cc:46:33:3b:d1:dd:
b8:61:e8:9d:4d:93:11:24:34:b4:7c:74:38:47:e5:a2:5d:51:
e7:c1:5b:28:ed:f7:bc:59:63:65:31:0d:da:58:f2:44:cf:56:
66:77:e9:f0:b3:ec:a6:2c:cb:bc:b8:be:1f:0e:7c:1d:9f:f5:
be:7b:79:a2:4c:a8:17:c2:70:bb:2d:b4:cc:06:d1:8b:4e:c5:
eb:65:19:45:8d:a2:d5:f1:ac:74:70:3e:fb:c8:85:13:45:be:
fe:e2:b9:ef:99:cf:8d:67:b5:28:5b:bd:f7:16:c4:15:e0:f5:
61:bf:1d:fd:a7:c9:61:3b:0f:77:fc:de:3e:45:75:b3:ea:55:
4c:38:08:44
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ8o5LejMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1NzIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NzUwMDllZjU3
ODBkMWE0ZjRlNjc3ZTYyYmZhM2I0N2ZlYmU5MGVmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsfAIRC7luS/CKQ9fmxHcZV/d2tPaxW3If70GN01oZsLV
W35FPjsLbbSv0F8JJvwA6aZU0FWqeW2vGt5pTlLRY/6kRB/v19a948pyYmNBj5ZJ
ZY33tHp7CM+if9FFnXD0g16IOdYFZYGYJwpqsPAGj6vEKqmKMk20eeBMgkFFRquZ
I47IK7jljlpI4idIBc6B+dLwtXuVT5zgbEbsndN2P+xlI43kn/4OAovZ2lxetzy9
P1DlXUb6aHlruynmZrJas3dMMmsSsXcNXHp4i533Gxa5gVVoPg5S9lARrsP8cJuO
FVoR0WK6gZm/6SBhN99MiLU55eiLrhbxbnUJekxyzQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFGdQCe9XgNGk9OZ35iv6O0f+vpDvMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzI0NWVjOC0yMGE1LTRmZmEt
YWI2Yi03YjVlOTIwOGMwZTEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMjQ1ZWM4LTIwYTUtNGZmYS1h
YjZiLTdiNWU5MjA4YzBlMS8xL1oxQUo3MWVBMGFUMDVuZm1LX283Ul82LWtPOC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCueQgMA0GCSqGSIb3DQEBCwUAA4IBAQB+1aceAslD7PbDslObOgHq
JTyHTG6Lj2daje2TKGCPDNYuIXbfTMrNYd/yHv9Uxtc5FZmlml17RyQteL3cg+Ug
Trhn8X3s2+PXK4APmwpuZsZRhF6NXMKzlvgNiwsSJGIzq0AbHetYXaQsTFh5E3WC
DxIQGp51Xj/MRjM70d24YeidTZMRJDS0fHQ4R+WiXVHnwVso7fe8WWNlMQ3aWPJE
z1Zmd+nws+ymLMu8uL4fDnwdn/W+e3miTKgXwnC7LbTMBtGLTsXrZRlFjaLV8ax0
cD77yIUTRb7+4rnvmc+NZ7UoW733FsQV4PVhvx39p8lhOw93/N4+RXWz6lVMOAhE
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:37:03 2025 by rpki-client