Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer (raw, json)
Hash identifier: 7Jp23ju3Poz0Hp3hueaDZVFRf0G1DvisNG0xQZeOMRs=
Subject key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B225A78AA0BC77FDB0F3183D66B1C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.197.244.0/22
IP: 195.138.214.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:a7:8a:a0:bc:77:fd:b0:f3:18:3d:66:b1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:92:51:fe:8e:88:ac:ac:d3:fc:58:1d:75:80:
0b:9c:98:2f:be:51:1f:a9:47:c8:ad:ad:b9:a4:1f:
8b:31:d1:63:16:64:02:39:4f:cd:f9:1f:c3:5d:2f:
d9:62:8d:c8:4c:7a:de:24:76:02:3d:f6:54:93:7e:
30:53:30:91:bc:39:20:55:86:4a:72:53:7b:43:4a:
12:03:91:53:e5:fe:b8:aa:87:3e:e8:af:9d:6f:ec:
90:f3:65:ce:69:6d:49:2b:40:79:0d:cd:66:38:ff:
8f:20:de:f8:8c:b1:04:f8:ac:1b:00:e7:72:89:53:
ee:7d:e3:db:34:9f:77:7f:64:cd:51:93:a0:50:8a:
79:a4:e9:ca:24:92:9c:7f:c5:1b:02:29:08:45:cb:
95:44:8e:7e:a6:ff:44:41:5e:1a:fb:35:c0:de:28:
db:96:bf:46:64:01:fd:3b:28:37:d2:be:56:57:fb:
5b:66:b1:bb:7c:d7:de:19:d8:0e:9c:4e:39:11:ee:
74:ce:33:dd:98:6c:f3:0a:ed:97:61:1f:31:fc:2f:
49:c7:61:0f:bc:df:9a:b6:42:a8:8f:2c:3e:69:6a:
5a:57:0d:04:29:62:ca:79:14:3f:37:22:10:45:fe:
b5:57:3d:ff:c3:3c:a6:ce:6c:54:87:b6:03:bf:32:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.244.0/22
195.138.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0f:1a:4a:9e:cf:1c:e8:92:84:4b:b3:23:1b:00:63:b3:d3:
bb:ee:f5:fe:f8:5e:7e:be:cf:00:6f:b6:1f:90:b5:85:03:0d:
9b:10:ed:9c:a9:f3:cc:d0:5f:73:7c:33:d3:21:08:e2:61:a8:
02:75:55:94:e8:b7:69:ac:37:8c:24:2d:b5:b8:d0:f6:f1:03:
f7:01:5a:9b:dc:41:36:68:80:ac:18:cd:9a:72:31:e4:de:14:
52:0a:f7:59:b1:c2:a7:f3:bb:48:36:8d:03:7d:66:c2:0b:2c:
bd:b8:63:4b:38:6b:bc:9c:3e:81:73:d4:2a:44:5e:d5:cb:ff:
a3:8a:16:2e:32:8a:03:2e:80:e0:f5:fb:41:89:e8:60:c6:bb:
4e:f9:c0:02:49:7e:60:73:75:48:72:ae:46:7a:b3:55:04:72:
ef:b3:f0:91:e2:f4:f0:fa:71:39:4b:41:39:70:0a:23:39:b9:
9b:5e:8f:c5:04:8f:b5:48:0a:f9:58:e2:bc:fe:57:18:12:b6:
80:a4:e4:81:af:de:4c:9f:c0:8e:19:1c:fb:52:fd:20:26:c9:
41:77:5d:92:58:b0:f5:82:52:e3:69:37:cd:ca:6c:20:d4:f4:
7f:60:8c:1a:0e:ec:8a:0e:1b:58:1a:d1:a7:7a:68:e5:87:e2:
1b:3a:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:27 2025 by rpki-client