Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer (raw, json)
Hash identifier: pD3aZss+t/kZBnFoD3HBg5nY5kfKbU2eR72JhGg0Ge0=
Subject key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E4D77EC37EF2AFB5B959DBEBDB8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44703
IP: 85.115.64.0/19
IP: 185.70.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:d7:7e:c3:7e:f2:af:b5:b9:59:db:eb:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:b2:45:4e:51:cc:b2:cc:ee:e3:cb:37:1e:
3f:c7:f4:dc:c4:69:58:13:da:21:8e:2b:9f:3c:28:
ce:a2:c8:4b:60:49:c0:b5:e5:7e:7c:df:10:52:0e:
7a:75:23:04:fe:e3:ea:ba:32:89:df:f4:53:f6:65:
50:db:0a:46:28:be:eb:6b:43:84:65:e4:41:9d:57:
60:3e:bc:bd:51:9c:c1:58:c5:19:e7:3c:53:7f:fb:
45:5d:06:de:ba:77:04:ae:88:5a:c2:3a:a4:d7:1a:
9a:21:8c:e5:4e:2d:d0:a6:29:7c:7a:be:06:94:79:
ce:d2:ef:a6:da:3a:85:a0:e7:a1:23:29:8c:5e:80:
dd:21:f7:27:80:35:ff:db:73:f0:42:9e:83:69:a1:
47:d9:2d:4c:46:ae:a9:83:dd:da:25:47:6b:5a:26:
5c:4f:10:00:b2:9d:54:57:79:f8:e2:33:40:ae:0a:
fe:2d:ad:8b:18:8c:0e:5c:1a:39:85:5c:26:9c:f3:
a7:4c:8b:ca:2c:b5:36:a3:36:31:54:1c:3a:a3:fa:
a4:01:ce:76:5d:84:02:d1:17:4f:12:30:e2:a0:51:
75:1f:bd:29:46:af:06:21:7b:a3:0f:b4:df:c6:cd:
bc:bd:09:89:d1:02:59:98:3a:d0:ec:d5:a3:dd:0b:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.64.0/19
185.70.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44703
Signature Algorithm: sha256WithRSAEncryption
36:7e:6d:9e:dc:4a:3d:ba:e1:82:45:d0:fc:70:ad:5e:0b:2a:
71:09:61:1c:46:f4:a5:48:98:ce:76:b3:cd:fb:99:dd:10:e5:
7c:8a:18:3a:61:18:d7:fc:33:73:43:89:4e:24:55:ea:38:09:
f9:55:4a:14:4a:d3:db:ff:ad:95:3f:86:fa:06:73:3f:65:ae:
5b:fb:84:ff:0c:76:00:92:18:62:dc:16:85:12:4b:06:53:96:
e4:6d:a7:09:c3:e4:9c:da:b9:35:dd:06:68:0f:4d:dc:6d:4a:
bc:70:45:e5:a3:a0:19:e0:f5:54:af:48:92:37:6c:3e:84:5c:
dd:16:73:a4:f0:e7:7d:28:98:db:61:1c:f7:17:f5:5b:7f:a7:
dd:5a:df:ed:5f:56:ae:0c:24:30:95:17:4e:a1:4d:20:0b:64:
b3:c1:a2:ab:d9:7c:97:f1:8a:34:45:4e:04:7f:f3:28:8e:ff:
20:f2:64:1f:e9:e6:7b:5c:43:54:eb:c9:16:11:4f:39:16:fe:
39:73:9a:58:17:a5:f7:2c:a6:05:31:7b:73:54:c6:51:00:54:
74:6c:c9:45:fb:84:73:ac:a9:7d:f1:de:fc:37:65:c8:db:b6:
e2:d8:67:de:86:45:b7:f7:28:a1:0e:da:6b:2a:b3:25:67:2e:
3c:b3:01:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:20 2025 by rpki-client