Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.cer (raw, json)
Hash identifier: 12rdPDazaKFjTeTKTkDq4OpKQvdws8FOa1gnMppG82I=
Subject key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA6C2B3008A6CA8A2E0EA7BC78BD34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202278
IP: 80.75.214.0/24
IP: 104.167.18.0/24
IP: 2a13:5680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:2b:30:08:a6:ca:8a:2e:0e:a7:bc:78:bd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:3d:15:db:a1:89:6a:43:fd:7a:6d:41:b7:
59:c1:e0:e6:53:0e:2a:53:09:18:25:67:61:df:01:
c0:a5:3d:30:5e:ae:ec:c2:2d:e7:a6:02:e9:fe:c9:
bf:b7:91:bf:5a:d4:54:74:ce:fd:ad:ae:0b:77:ac:
e1:13:51:82:d8:5b:1f:b0:ac:f8:7d:59:4c:5b:de:
98:ba:79:70:ea:f2:c4:b6:d4:7b:fa:20:b5:ac:90:
35:14:94:d8:03:be:8f:f5:62:19:98:44:08:e8:34:
2d:bf:74:2a:97:6b:6e:f1:92:44:d7:ed:47:ae:0a:
5f:71:35:00:35:00:8a:5a:7a:37:dd:8e:79:e3:46:
79:7c:90:2b:6a:c0:6f:5d:a5:a8:7b:2a:62:7c:40:
e7:70:ec:1e:42:43:14:0c:59:e0:af:36:a2:df:69:
7d:4d:94:0b:7d:4d:66:aa:57:4e:6f:4c:36:4d:ba:
f9:49:97:3a:7a:84:c4:0a:3d:7d:1f:7f:09:dc:02:
64:e1:f2:d2:e3:2c:d6:b6:fa:6a:aa:83:37:bc:7a:
9f:9c:a2:bf:2d:3d:7e:4e:6e:0e:b8:cd:6e:e6:71:
bb:f3:1a:41:d4:81:ff:5e:d7:bd:af:75:40:0e:b8:
ff:58:29:d2:15:28:a3:ac:a3:44:e3:90:6f:02:a5:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.214.0/24
104.167.18.0/24
IPv6:
2a13:5680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202278
Signature Algorithm: sha256WithRSAEncryption
47:86:40:8e:15:de:36:13:08:2c:eb:ba:8c:1d:a0:79:d1:ec:
94:0a:87:4e:1c:fa:4b:ca:be:98:eb:7a:63:17:ac:a9:9a:cd:
5e:10:ec:10:31:42:35:c8:3f:19:e3:3a:aa:8a:03:3f:73:8f:
be:70:e3:c5:25:7b:b8:9b:8b:c6:da:f1:b2:ae:1d:1b:0e:cc:
41:c9:b9:d7:ae:bd:eb:a7:9a:3e:97:dc:42:3d:f0:40:62:43:
51:9f:77:b9:fc:f0:d6:02:33:43:e3:e1:42:73:71:c8:56:01:
e4:e2:fd:6f:1b:32:59:19:9a:e4:a1:27:34:4c:80:91:92:cd:
d3:b2:2b:9a:aa:27:82:6c:08:68:14:e2:00:33:2b:d0:f3:de:
72:c5:47:9c:0f:9a:dc:24:65:ba:6c:d1:cd:1d:e4:ec:84:31:
df:8b:70:5a:4d:1f:15:72:9c:95:24:42:74:de:1a:10:31:b5:
33:66:17:73:2c:f4:bb:3e:09:05:b0:2e:36:10:b0:b2:d0:b1:
ce:5b:e4:31:3d:a1:64:5e:46:a2:7d:cc:58:68:33:b5:17:78:
5f:66:99:8a:9e:3f:63:31:a7:95:74:8c:07:39:88:22:08:b0:
22:be:c5:f9:61:d9:95:cf:f9:6e:57:d9:63:a1:e6:08:76:a6:
8a:f5:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:21:50 2025 by rpki-client