Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
File: gQbZlKEhklejzsntkc0Ym8PZOws.cer (raw, json)
Hash identifier: 9NNxlWqlPYEwBT1hihw3JM4eRE0ZMMEV7x+KjMAHYYk=
Subject key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220818CF4B54258E6F2D9B6B31BA7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2004
IP: 134.203.0.0/16
IP: 134.221.0.0/16
IP: 192.43.212.0/24
IP: 192.55.105.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:18:cf:4b:54:25:8e:6f:2d:9b:6b:31:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:e5:8d:b0:07:1e:97:9c:c3:6b:7f:b3:0f:
8e:26:22:fd:fe:27:83:b1:7b:f5:e0:d3:8a:33:95:
5e:9a:35:e1:e8:e2:5f:35:cb:cd:84:43:b0:25:93:
47:95:50:c8:86:5a:33:fa:81:8b:5a:3b:32:e4:38:
6b:6d:8a:6d:4e:7f:b8:b2:9b:15:ad:a9:96:d9:6e:
c5:02:9c:92:e7:d2:0c:cd:9d:8f:ec:ae:91:c6:b8:
b3:46:dd:5a:e0:5c:c7:02:47:7d:bf:b2:37:23:d8:
80:6c:00:e5:2b:4b:47:ff:69:5a:8f:59:c8:1e:6e:
72:09:98:9b:6a:02:60:26:d0:91:5e:31:63:79:e4:
e5:ce:9b:bf:68:e6:48:7c:3a:9e:60:c4:09:98:72:
11:65:a3:35:94:c9:26:da:0b:04:8f:c0:97:e4:2e:
e5:d3:e8:52:73:86:9b:21:54:b8:df:ec:e9:56:16:
85:2f:ba:33:ff:62:5a:3a:45:3d:7c:e4:cf:61:03:
38:bd:5d:90:e4:0d:e7:0d:21:08:da:58:e0:d9:ce:
3d:9b:60:df:60:5c:63:f6:6d:bc:86:f3:65:84:9f:
7f:f8:fa:11:62:a6:0c:16:e2:5c:e9:cb:b7:6b:a7:
29:89:52:19:a8:ed:28:f6:83:f7:8c:c1:32:d3:96:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.203.0.0/16
134.221.0.0/16
192.43.212.0/24
192.55.105.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2004
Signature Algorithm: sha256WithRSAEncryption
06:2f:3f:0d:1e:26:af:31:b8:c1:50:bc:09:3d:f4:e4:03:21:
ae:b4:ce:82:5a:6a:48:18:a6:7e:70:4a:a3:cc:ca:0f:bd:67:
4b:ef:cd:5d:66:a3:e7:b2:32:a4:b3:41:71:25:0f:8a:f9:e7:
49:95:75:e6:53:26:9a:2f:8f:18:31:90:19:41:c8:93:23:40:
40:da:e5:9e:58:db:db:af:37:4a:a5:4c:43:a0:1b:35:43:a0:
ba:43:75:43:99:94:e5:24:aa:d3:d8:cf:05:4e:d4:4f:99:d8:
45:ac:88:99:23:6f:e1:90:72:eb:7e:49:55:d9:83:f8:3b:5e:
18:92:46:d0:01:a3:c4:cc:4e:ef:41:0b:75:71:49:f2:ea:83:
27:48:82:8e:a7:a2:7c:62:6b:ff:b9:ac:0b:43:65:4f:cb:08:
23:fc:4e:c8:41:00:19:2c:ab:ad:50:12:17:c4:95:4c:a2:36:
a6:f2:2b:ef:fd:be:ed:b7:90:a1:fe:40:05:44:cb:e9:6a:81:
b6:eb:fa:52:7e:08:47:4b:ed:70:23:fc:48:4d:d2:8a:05:4e:
35:fb:ea:b7:56:3e:56:7d:1c:c6:c9:2e:9b:21:25:1e:b0:dc:
ee:34:7b:7d:90:ed:88:eb:11:e0:6f:10:b6:ae:cb:c7:79:44:
52:17:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:47:59 2025 by rpki-client