Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer (raw, json)
Hash identifier: Spye9GJ1Pkw8h7JtNuPv3jC/ZBm/F/5fudLIOMRV1lk=
Subject key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63F9AFE50857E2B062FC55B9B5726
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201682
AS: 202521
IP: 87.76.16.0/20
IP: 89.34.16.0/22
IP: 165.84.208.0/20
IP: 176.126.168.0/22
IP: 185.33.100.0/22
IP: 185.67.44.0/22
IP: 185.145.12.0/22
IP: 2a00:cca0::/32
IP: 2a03:2420::/32
IP: 2a07:45c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3f:9a:fe:50:85:7e:2b:06:2f:c5:5b:9b:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:68:86:b7:1f:24:e8:99:ce:fd:1c:29:9c:
96:2d:a8:2a:72:5b:64:b0:94:72:27:1b:24:8b:74:
9e:aa:de:5d:26:82:c5:e5:f2:43:83:51:c5:3f:9c:
4f:24:80:12:c3:9d:6d:09:ee:eb:2a:5d:e3:12:1b:
2d:1c:6e:1e:81:c0:26:a5:50:cd:c6:21:59:1f:b6:
55:52:ab:26:12:e7:8d:9d:2d:b2:a1:50:f2:8e:03:
f0:81:31:5a:9b:94:05:7c:ab:93:6d:da:cc:9c:7d:
9a:ac:3a:96:e0:16:92:73:04:6d:80:0c:1d:19:9a:
b6:dc:c3:a2:e1:6d:5c:b6:f9:fe:18:d4:c5:e5:2a:
65:2a:0e:75:ed:d6:79:ff:f6:23:d0:99:34:62:01:
eb:2b:85:37:1b:8b:d3:8e:73:a9:73:ab:f2:53:50:
ae:20:11:e0:18:8c:03:7c:eb:d3:0a:d2:40:da:98:
2d:61:b2:ff:88:fb:c1:07:68:0e:77:8f:93:6d:2e:
56:56:fd:56:db:4a:4f:d7:c1:b6:26:16:94:fa:11:
17:8e:52:79:d0:85:47:8b:f3:47:4c:81:61:61:3f:
d2:d7:dc:92:95:83:97:df:f8:3b:14:01:2a:b6:97:
9d:f2:d2:80:1d:c0:6e:02:f7:a5:e4:8d:cc:4f:fb:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.16.0/20
89.34.16.0/22
165.84.208.0/20
176.126.168.0/22
185.33.100.0/22
185.67.44.0/22
185.145.12.0/22
IPv6:
2a00:cca0::/32
2a03:2420::/32
2a07:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201682
202521
Signature Algorithm: sha256WithRSAEncryption
35:47:1d:3c:7c:52:e8:b3:bd:be:c5:d9:dd:b5:d1:05:c1:c0:
ef:cb:ed:1f:d4:c1:6b:94:a4:1e:26:60:fd:8c:d3:5a:db:14:
e3:0d:46:9a:35:d3:86:58:42:b8:3f:e5:57:7f:72:76:1e:50:
87:c5:bb:38:28:8a:54:cd:e6:ee:04:97:20:92:14:2c:87:dd:
2b:a8:dd:7b:10:ea:97:b2:0f:89:b8:8c:72:f7:f5:35:ec:69:
30:cf:98:87:db:4c:29:57:21:1a:a6:a3:dc:ac:e3:bd:7b:0b:
b7:4d:e0:51:da:f5:04:2c:41:9c:08:7f:49:f0:93:07:33:d8:
32:00:58:28:32:5b:0b:e4:ac:22:07:58:14:f8:55:fa:8a:a7:
ce:7c:39:85:b6:ca:69:c9:61:63:17:8b:26:f3:79:3b:14:59:
ff:3a:c6:b5:aa:d5:00:0a:69:68:39:72:57:9c:a4:2c:b0:55:
67:6c:4d:71:ad:0c:dd:68:80:38:b3:a4:13:99:a4:62:68:1e:
55:7a:75:ff:ae:d0:4a:c7:59:9d:ad:ee:13:2f:34:47:7e:dc:
09:29:8d:5b:0f:59:76:5c:ea:61:85:65:65:99:4a:22:90:16:
e2:b0:f2:52:0c:18:e6:f9:a2:ae:06:15:e9:95:ce:ae:46:2d:
28:41:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:25:54 2025 by rpki-client