Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer (raw, json)
Hash identifier: 1kt1B3K8h6xqZCdkf8TO1sQzHaGJXd6x4h46f/IwhLc=
Subject key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA090EF06C3C8BCFF273C49EC79158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20972
IP: 185.100.12.0/22
IP: 195.32.0.0/17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:0e:f0:6c:3c:8b:cf:f2:73:c4:9e:c7:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:2d:03:23:5c:7a:fa:b9:da:1d:da:a5:a8:
0f:9b:67:77:7c:b6:ec:62:94:d7:e3:44:d6:7b:ce:
5b:96:64:d4:81:69:eb:a7:4b:ad:9f:53:d2:a8:2b:
0c:f1:12:23:80:4f:57:a7:d5:4c:0c:d2:df:83:dc:
5c:19:01:29:2b:d5:98:5b:2a:24:27:d0:13:bb:14:
b2:f0:20:5f:c1:a5:18:b5:d3:d7:a4:ee:4f:2c:1a:
7c:62:24:da:8f:a9:33:d8:dd:6c:08:d7:a0:ca:e4:
50:64:7a:39:41:c8:98:31:cc:a6:71:dd:c8:b9:77:
2a:75:4e:4c:25:ca:43:b4:0c:f2:c9:4f:7c:7d:2b:
6d:3c:8b:a1:95:f3:1e:23:27:c6:77:b7:39:ae:5c:
28:87:55:ae:06:b0:20:e4:e9:2c:16:d0:ed:c8:0c:
e3:62:cf:5c:ef:2b:aa:98:73:ac:8d:2a:ee:0e:8b:
57:c7:0d:76:25:46:3a:6b:09:64:c9:64:09:20:9b:
ca:3d:95:d4:72:a3:53:13:5b:e0:81:ea:82:51:ec:
2c:71:d5:1d:3a:a5:00:d6:fe:ea:15:a5:c3:56:5a:
49:43:ab:d2:69:57:5d:00:d0:ab:11:3c:e3:3b:f2:
b9:a7:6d:2b:d3:0a:05:39:a6:bb:59:ff:93:2d:5d:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.12.0/22
195.32.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20972
Signature Algorithm: sha256WithRSAEncryption
a9:a3:37:8a:7c:2a:ba:65:2c:1c:74:8f:31:04:78:51:dd:cd:
d3:3b:cb:da:74:ce:68:03:ea:a2:97:2f:b3:b8:4b:3b:c0:6b:
eb:b1:4f:c4:9a:32:c0:35:96:a3:8b:e3:e9:7c:f3:b8:e6:44:
86:51:71:60:df:28:b0:b0:f3:71:02:50:21:f1:47:01:0a:61:
4a:ed:50:9f:36:2e:04:42:1c:97:1b:35:33:5c:76:dc:d8:32:
70:bd:76:e5:f7:ce:66:ae:ea:8a:92:07:c3:89:d1:80:39:2a:
01:b0:43:2b:20:64:0f:73:1c:a8:75:eb:24:56:cd:78:5f:da:
c3:a8:8f:ca:0f:f3:fb:2f:4d:ae:27:73:90:04:e1:e1:ba:fa:
74:e7:31:29:4e:4b:9f:40:bf:1c:32:78:c1:02:5d:9e:85:69:
06:a8:7e:b8:73:ae:07:ed:7e:c0:d2:aa:fc:e6:43:96:cd:94:
74:a1:52:3f:53:f6:20:65:fa:bd:4e:0b:39:e9:33:55:d5:06:
b6:bf:fc:29:06:15:ce:b5:1a:64:2e:20:e2:31:f9:3c:5b:a8:
f7:d7:19:72:25:1b:c2:8e:ca:d6:c2:5d:10:b6:b7:1a:1d:47:
02:c9:62:58:30:5a:97:dc:0b:88:ab:e9:d1:20:6e:af:e9:6c:
fe:c3:08:72
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZQf+gkO8Gw8i8/yc8Sex5FYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTlhNDdjZGM4OWY0NjM0MmY5MGIwZGEzYzMwZDllYzVmZDYzMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7otAyNcevq52h3apagPm2d3fLbs
YpTX40TWe85blmTUgWnrp0utn1PSqCsM8RIjgE9Xp9VMDNLfg9xcGQEpK9WYWyok
J9ATuxSy8CBfwaUYtdPXpO5PLBp8YiTaj6kz2N1sCNegyuRQZHo5QciYMcymcd3I
uXcqdU5MJcpDtAzyyU98fSttPIuhlfMeIyfGd7c5rlwoh1WuBrAg5OksFtDtyAzj
Ys9c7yuqmHOsjSruDotXxw12JUY6awlkyWQJIJvKPZXUcqNTE1vggeqCUewscdUd
OqUA1v7qFaXDVlpJQ6vSaVddANCrETzjO/K5p20r0woFOaa7Wf+TLV2BZwIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFNmaR83In0Y0L5Cw2jww2exf1jI4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2QzMGVl
Zi00OTVlLTQzYmQtOTE5Yy1hMmEwZTJkYjQ5ZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZDMwZWVm
LTQ5NWUtNDNiZC05MTljLWEyYTBlMmRiNDlkMC8xLzJacEh6Y2lmUmpRdmtMRGFQ
RERaN0ZfV01qZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCuWQMAwQHwyAAMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAlHsMA0GCSqGSIb3DQEBCwUAA4IBAQCpozeKfCq6ZSwcdI8xBHhR3c3T
O8vadM5oA+qily+zuEs7wGvrsU/EmjLANZaji+PpfPO45kSGUXFg3yiwsPNxAlAh
8UcBCmFK7VCfNi4EQhyXGzUzXHbc2DJwvXbl985mruqKkgfDidGAOSoBsEMrIGQP
cxyodeskVs14X9rDqI/KD/P7L02uJ3OQBOHhuvp05zEpTkufQL8cMnjBAl2ehWkG
qH64c64H7X7A0qr85kOWzZR0oVI/U/YgZfq9Tgs56TNV1Qa2v/wpBhXOtRpkLiDi
Mfk8W6j31xlyJRvCjsrWwl0QtrcaHUcCyWJYMFqX3AuIq+nRIG6v6Wz+wwhy
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:25 2025 by rpki-client on console.sobornost.net