Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
File: Z3COBc2oa73nTtuoXR2-tz_n91c.cer (raw, json)
Hash identifier: xJP0Pv+hVqWiFPZHHSmF/OL33gNNHDhpROq3Z604VC4=
Subject key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD5EC1A06C85F19FA15BC9C87A4840
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30734
IP: 195.95.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:c1:a0:6c:85:f1:9f:a1:5b:c9:c8:7a:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:bb:69:d0:00:21:e1:d4:40:1a:12:c0:da:
ca:68:d5:e1:7f:ed:8d:93:09:7d:73:4a:20:49:2a:
6d:70:d2:6d:70:42:5f:54:83:79:2b:7e:be:84:80:
bf:84:c7:d3:75:85:9c:41:13:27:e6:28:0e:4b:4a:
ec:78:5e:6b:71:97:65:e3:fb:b5:45:f9:5f:a3:b3:
13:e1:67:7a:b2:e3:97:c3:46:4e:04:f6:e6:31:dc:
41:e5:a7:6a:8f:11:bd:c7:4a:ce:7d:a8:19:f5:72:
fc:5f:84:e0:60:cb:7c:1d:c9:21:e4:85:37:ed:cd:
e2:a0:01:71:40:08:af:7d:2a:74:5f:ba:a7:b8:fb:
4c:ae:91:da:6d:ea:03:87:a1:a4:52:3c:72:23:78:
44:57:37:95:84:ca:64:d8:3a:95:da:17:e0:c3:57:
af:67:27:c0:95:1a:92:dd:a2:c9:29:82:5a:e9:f4:
67:67:ce:82:09:d1:46:4b:6a:96:c4:84:ce:23:29:
50:75:06:65:7a:6d:72:51:f9:84:bd:be:9f:55:ad:
80:e0:97:32:09:3d:aa:92:55:37:b4:6a:e5:0d:48:
52:f5:ab:50:02:6f:2a:eb:0b:73:84:8a:d0:1f:86:
0b:4e:16:41:86:4c:44:28:ba:89:f3:91:11:ac:18:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30734
Signature Algorithm: sha256WithRSAEncryption
ad:17:ce:27:3c:a7:4f:bf:02:76:30:02:31:18:dc:94:4b:1f:
dd:45:bf:cd:d6:c8:3e:d5:9e:4b:a3:8b:3a:6f:ab:b2:3f:1f:
8e:b2:b4:a4:12:b7:f0:41:7c:87:6a:59:03:da:ab:f6:a7:26:
15:9c:05:1f:02:d8:25:14:fc:30:de:74:a2:ba:be:48:6f:e1:
0a:cd:65:96:9d:e3:29:3a:e1:4c:5a:88:68:05:e9:b3:f5:78:
91:1b:28:f4:ae:7c:03:53:01:7e:13:17:44:77:9c:0b:25:4f:
05:d4:93:60:bc:c9:17:89:fd:91:87:3a:a4:09:a3:57:3d:e6:
c1:27:a7:db:05:91:2d:80:1d:cd:11:8f:2f:ae:3f:26:73:0d:
a2:fe:21:27:ae:24:b5:f1:ef:fd:7b:d3:aa:d1:ad:3e:cc:40:
41:f7:f4:d4:20:b2:3d:6f:5c:2f:1f:d4:69:62:b4:cb:ab:60:
64:1b:6c:27:33:18:2e:09:24:77:c0:1e:a7:35:a8:8d:42:ba:
9f:a2:7e:bf:09:e9:1f:18:dc:25:3a:2f:9d:15:a8:6c:d7:e9:
11:b5:fd:f7:cc:2d:51:d5:21:b3:71:94:81:80:25:92:23:f3:
3d:54:65:77:9e:a2:4f:f0:02:f0:33:41:69:6e:d5:1a:e4:80:
b6:f4:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:15 2025 by rpki-client on console.sobornost.net