Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
File: 01QLUY11--_WFr_ZTPBf0lukiLY.cer (raw, json)
Hash identifier: 3M/yQOS095cvLp2d0RyK5Ve80Tu+5h4N9GHiaGnPr4I=
Subject key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7060E0BB00120331E8FEF5B4C5D0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49524
AS: 205260
IP: 46.141.0.0/16
IP: 109.237.160.0/20
IP: 185.216.88.0/22
IP: 185.223.196.0/22
IP: 2a04:3d00::/29
IP: 2a0c:4c00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:06:0e:0b:b0:01:20:33:1e:8f:ef:5b:4c:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:78:50:70:d3:27:b0:9d:bf:55:75:30:7f:
76:4e:4a:c5:63:f4:c7:1b:b0:45:af:db:0e:e1:f2:
a1:e4:1e:60:36:39:37:e1:39:05:ba:d3:f1:98:66:
33:a6:43:13:ac:b0:30:ad:ed:64:0d:3f:9f:a5:84:
77:48:ed:dc:49:ca:e0:7a:9e:9d:6b:ab:85:47:3f:
8a:96:bd:e4:a5:8e:b3:d4:81:e6:e6:7e:a4:9a:3a:
40:a2:3b:80:aa:4f:18:c9:ea:46:13:6a:92:5c:7e:
90:15:f2:b2:d4:a6:2e:79:c4:32:a0:b0:18:63:46:
76:78:a7:99:5f:04:80:02:ef:3d:5b:34:4e:74:d2:
a7:d6:7a:43:ba:05:0a:99:7a:b2:c9:a1:2e:fd:b6:
7d:cf:78:17:07:db:f6:77:b2:c4:25:16:70:3f:df:
18:6e:15:a3:c5:ce:1f:69:15:b0:cd:ba:73:68:12:
f3:e3:1d:b6:bc:be:f3:a0:9f:e0:47:28:cc:0b:bc:
eb:29:fc:78:c1:9f:50:4f:7c:ab:73:54:da:32:80:
1e:f7:d0:76:c2:42:7d:18:6c:d6:04:f8:ff:8d:b8:
d4:3f:b5:77:11:af:dc:05:9b:4c:30:e0:43:1b:8a:
1d:6e:d3:65:cb:28:0c:9d:7f:8e:d1:40:77:02:36:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.141.0.0/16
109.237.160.0/20
185.216.88.0/22
185.223.196.0/22
IPv6:
2a04:3d00::/29
2a0c:4c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49524
205260
Signature Algorithm: sha256WithRSAEncryption
a0:f5:c7:e5:88:a7:9b:71:5e:8a:87:13:54:81:5e:c4:40:7b:
63:ac:89:1c:26:ba:ac:bb:be:6e:50:8d:73:1c:51:67:cb:0c:
39:1b:20:a3:50:85:1c:60:57:31:fa:ac:ca:8e:72:93:0e:b6:
49:9e:f6:65:87:f1:19:c8:6c:83:6d:70:55:4a:cf:8d:db:15:
dc:07:8f:58:60:27:08:55:64:54:0b:73:17:d1:b6:8a:a8:12:
bd:50:5d:c9:15:ad:be:44:3b:b6:1e:7c:e8:e8:90:c2:92:ef:
18:e8:d7:90:72:df:34:d5:1d:38:83:5c:f5:89:2a:48:db:b5:
45:d5:f2:dc:31:11:44:fa:67:26:d7:1d:b9:69:7c:bf:41:c6:
42:35:52:48:27:31:96:04:66:13:43:84:ca:80:e2:62:ef:1a:
8c:df:01:10:8d:3f:82:5c:0b:89:29:a6:fd:7a:3c:54:73:b0:
10:d5:b7:21:f8:62:39:24:00:d0:d2:f6:87:2b:7d:ba:32:ed:
8c:aa:32:bc:52:d6:c7:0d:b0:ac:0f:4f:89:9e:71:30:16:f8:
53:4f:b1:b2:e3:19:2a:5f:3b:96:6f:7f:b2:18:1e:c8:7a:7b:
63:ea:0f:79:ef:fe:fa:ef:fb:05:38:ed:92:18:1f:83:41:60:
ed:fd:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:25 2025 by rpki-client