Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer (raw, json)
Hash identifier: eA1iJSY61+ySBZRf6q0clZHc/fIpYDvX1qESAjqUG5A=
Subject key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01959EDB65187DFAEC5F7FD4DFFC734C0506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 16 Mar 2025 12:08:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34970
IP: 91.195.206.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:db:65:18:7d:fa:ec:5f:7f:d4:df:fc:73:4c:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 12:08:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:32:50:87:2b:be:18:60:d4:65:bc:9a:60:
fe:97:56:08:fd:38:ff:c4:d4:36:5d:2a:90:ca:96:
25:e7:17:1d:31:b0:ba:c1:c2:e5:58:07:38:50:c3:
1b:4a:61:20:53:c4:38:d9:6e:bb:cf:70:22:e1:2f:
82:0a:18:8c:73:9f:0f:32:e7:8b:82:da:c0:e6:a9:
88:b9:a8:f2:f4:df:6e:08:ef:22:37:ee:06:fc:9a:
f7:c9:c2:d8:47:d4:7c:73:d9:0d:94:66:b5:c9:d0:
1a:a9:83:4e:84:7f:e3:9d:1f:a6:2f:d5:0c:24:f4:
9b:6e:86:9b:90:45:5a:19:72:98:ff:a4:fd:0b:60:
4c:75:91:cd:df:b6:16:68:39:5f:5b:9b:ed:44:dd:
9f:51:65:d5:27:7b:d5:1e:ed:f3:89:69:ad:5d:e5:
3a:66:3b:5c:fb:70:0a:db:82:93:57:6c:aa:63:36:
7a:65:1e:d6:d9:f7:fc:9d:32:6a:dd:e6:01:c0:cb:
59:a6:4a:17:5d:ff:38:19:30:cb:ed:09:d5:7e:7e:
03:4b:bd:dc:df:f1:41:1d:21:e9:50:cd:71:98:3e:
88:5d:29:12:59:0e:62:25:74:6a:43:24:90:29:8e:
6b:da:1d:37:f2:e3:9a:3e:91:39:19:a9:c0:16:95:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.206.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34970
Signature Algorithm: sha256WithRSAEncryption
26:c4:b1:5d:1a:b1:8d:7e:ba:a8:1b:45:20:f4:35:eb:9c:ac:
0c:6a:ef:c0:2d:0f:e4:66:5e:23:05:79:6d:89:16:bf:4c:ab:
0d:98:52:63:3c:ec:3e:a8:9a:94:d9:8c:cf:fa:f6:d2:4d:51:
46:8f:ac:dc:88:fe:ad:0f:a0:09:cf:9a:a6:86:f9:0f:5c:f8:
13:b3:b6:be:6b:c4:39:45:04:01:4b:dc:2a:4b:e9:fa:6e:d8:
b9:b1:59:8e:3d:4f:1f:e3:64:26:35:f5:78:1d:d2:09:98:ea:
f6:fc:0c:43:7e:af:24:48:41:41:56:73:6f:44:e9:58:19:9c:
b4:b9:22:90:fa:d3:87:ae:41:41:d3:09:de:49:21:41:ce:dc:
92:b6:0d:f1:dd:a8:7c:28:7b:d6:04:3c:6c:70:10:24:be:38:
65:f3:c8:cc:8b:d1:d4:db:96:29:a2:61:13:d9:1b:81:b6:32:
1c:ef:66:fd:bb:76:29:7e:5f:c4:6f:64:8d:01:b3:65:a3:d0:
ba:e0:a2:03:db:c6:3d:12:7d:b4:38:8e:64:8a:2e:95:33:bc:
c1:0f:30:dd:8c:9b:de:38:27:e5:0b:44:d6:77:2b:81:8b:1b:
f9:4a:e2:7b:e9:f8:b3:1d:27:3f:9b:a8:c0:5b:33:7b:81:91:
d0:07:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net