Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer (raw, json)
Hash identifier: 6NLu2mW2U62hxjcKQ/4Hr6nFZwWgR/s+qg2wIXSKdEM=
Subject key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369E08653558846745E5135D535491E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60631
AS: 211505
IP: 130.185.72.0/21
IP: 185.8.172.0/22
IP: 185.208.174.0/23
IP: 2a03:2dc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e0:86:53:55:88:46:74:5e:51:35:d5:35:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:4d:2f:b7:c4:f0:a7:6f:d7:75:7d:df:f8:
8a:db:7e:c5:3e:9c:38:20:b7:77:0f:b6:3a:0b:04:
be:23:7b:e0:37:c5:64:e4:8b:9d:63:6f:0c:e1:99:
f1:3e:62:97:66:4f:c6:67:a1:52:9f:8a:4a:c8:71:
b6:6c:d8:90:e8:fe:c4:4a:3c:d8:60:2d:e3:be:ed:
2e:cb:29:9a:11:59:9c:b1:e7:46:48:d5:98:89:07:
62:7c:a4:d7:23:86:8c:fa:c5:7d:e1:ba:21:b7:d3:
27:1d:93:c4:bb:9b:cb:f6:dc:c2:85:fd:d1:dd:3a:
8f:58:a7:b2:97:30:13:5d:85:fe:af:20:bc:91:64:
64:2c:86:bc:a7:fb:67:1d:cd:a9:2b:ff:30:a5:30:
71:2f:83:f3:83:62:c5:8e:80:9a:c4:8a:eb:89:c1:
af:d4:48:c9:cb:03:96:61:0a:f3:81:75:58:2c:15:
6e:b7:02:62:4d:3a:6f:ad:89:26:92:01:98:00:3c:
41:c7:13:0f:a2:53:3b:13:11:f6:1b:d7:7a:b8:07:
8f:2c:f6:f0:50:15:3d:a2:c6:77:87:11:67:0d:22:
6b:74:54:02:83:66:e1:72:2c:38:d3:33:88:da:d4:
48:14:e3:dd:32:e6:7e:51:98:5c:9a:1d:46:92:e2:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60631
211505
Signature Algorithm: sha256WithRSAEncryption
5c:9c:98:da:78:b9:0d:51:86:7f:fc:9a:07:5d:07:24:3a:00:
7c:b6:d9:00:35:a9:98:a2:70:69:67:91:c3:b9:dc:1a:75:8f:
9d:1d:44:8d:a9:25:10:2e:af:ad:6c:af:df:57:bd:f6:be:83:
9b:0d:9c:0f:28:cd:30:08:aa:ec:89:fa:8e:66:6b:da:33:04:
32:d4:86:60:da:68:6f:d3:38:ca:90:ad:3b:c8:b6:ff:e5:85:
a1:b3:f4:e0:6a:62:0a:7a:72:84:64:6b:75:23:d8:fb:01:fa:
9e:68:a4:45:22:b3:1d:88:d2:fd:cf:ee:3c:04:ec:e2:54:38:
e1:31:6e:f5:4a:70:da:3e:6c:c5:3d:2d:44:dd:44:d3:13:81:
a0:1d:e9:cf:f4:91:f7:2b:ff:91:ae:4c:90:43:51:cc:bd:4a:
69:2d:7d:83:7b:2e:cb:8c:de:cc:c9:d5:e3:1d:2e:83:fd:4b:
cd:f8:75:39:61:a6:37:ee:e1:cc:70:9d:57:63:68:72:ca:01:
8d:6c:d7:93:bc:39:79:0d:2e:2e:42:87:61:d7:0e:20:be:7e:
08:ad:9e:a8:e1:b0:a4:14:46:c4:62:4a:fb:a9:d9:7f:6a:9f:
65:5c:0d:62:68:85:aa:f6:0a:f5:4b:45:c8:03:65:93:21:78:
73:9d:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:22 2025 by rpki-client