Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
File: z81z-CwmDahzhtz3vibVxURVJvo.cer (raw, json)
Hash identifier: kDjRs824IlD3Z1VbO5leZ7TK5FAESABWWr1VqASWiag=
Subject key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F6E9516526BCD853095F0B5C63107
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35246
AS: 49181
IP: 2.57.36.0/22
IP: 45.144.40.0/22
IP: 2a09:d2c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6e:95:16:52:6b:cd:85:30:95:f0:b5:c6:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:89:89:6a:21:30:e1:69:69:fc:fc:7b:ef:
cd:f3:3f:cb:38:46:ed:76:b7:73:60:f5:e9:aa:c3:
4c:5a:82:7e:33:ad:aa:02:ae:4f:bc:3f:5e:b1:ef:
94:41:93:e7:2d:df:a8:32:d7:de:d0:ae:5c:eb:59:
25:62:97:4b:c7:71:cd:c9:b9:70:1b:0a:36:4f:0c:
62:1d:de:94:a7:d6:77:63:e0:08:ad:f8:d2:20:5b:
c7:2d:7f:a1:a7:92:24:35:24:fe:8f:c2:0e:89:2c:
c6:d0:1e:07:a1:ef:3d:16:c8:54:92:2a:08:98:ce:
cd:05:98:1a:d3:1d:8e:f5:68:49:22:b1:f4:6e:91:
6d:5e:82:ff:6c:ab:ee:29:3a:7a:89:b7:cb:0d:2b:
19:19:5b:36:9f:51:b1:8a:5e:79:47:2c:7b:0a:11:
82:da:cf:4a:25:11:e7:13:dd:be:a1:ff:19:83:cb:
9a:4c:2f:a0:82:eb:b7:d1:e3:35:ae:e5:c3:f8:15:
c8:3c:ee:e1:90:dd:48:b3:09:dc:d4:28:28:0f:ae:
a7:ee:f8:fe:64:f2:ea:d3:e0:bf:64:74:fc:9c:df:
57:bf:21:35:15:8c:df:fb:e2:a0:b0:e7:5d:c3:be:
af:27:10:ab:55:e1:4d:f1:08:52:86:57:8e:04:5d:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.36.0/22
45.144.40.0/22
IPv6:
2a09:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35246
49181
Signature Algorithm: sha256WithRSAEncryption
7c:53:13:d3:62:f0:f2:5e:30:3d:48:87:87:87:2b:c3:01:a1:
1e:97:5e:20:6f:cf:8b:38:6a:65:bb:a7:88:18:8e:ca:5a:3e:
26:47:c0:eb:8e:fb:8b:bc:b1:20:2d:d1:f5:49:0d:5d:92:6d:
96:c6:ea:d2:e8:ae:68:a0:92:64:f2:b7:61:41:48:17:db:57:
9e:22:03:de:da:96:bb:5d:ae:69:2b:c8:af:79:a9:4d:24:d9:
9d:58:b1:f9:6c:b4:a8:db:46:b0:aa:e4:74:ed:44:19:f9:6a:
eb:5b:6f:37:03:68:41:02:b6:d8:34:32:91:88:34:48:eb:ab:
46:cf:df:e4:53:b8:46:25:fd:a3:f8:08:6c:f1:5f:e0:22:25:
bd:92:6a:e9:3d:c9:cb:a4:c7:4c:63:5f:28:9b:93:f6:73:e3:
f4:42:3c:09:45:9d:50:0e:aa:de:12:bc:48:02:2d:40:14:0e:
ac:5f:12:37:fa:53:a1:47:f4:52:17:e9:7a:8c:03:06:8a:63:
11:f2:fd:86:b2:11:4d:6a:19:2b:72:7d:01:5a:8a:9a:52:08:
fc:8d:70:0c:9a:87:a7:8a:b5:a3:20:fe:ff:53:26:57:ca:c7:
95:7d:c9:55:e2:16:5b:66:60:76:0b:8f:d4:72:60:11:cf:9d:
58:c2:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:45:32 2025 by rpki-client