Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer (raw, json)
Hash identifier: dxbXWwmlvlRbl3DJ3IdrfZ4dscWeoTr8Lkgs1OOCR+Y=
Subject key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444AD02D70CFE3F499B51014F33BA33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212604
IP: 31.42.178.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ad:02:d7:0c:fe:3f:49:9b:51:01:4f:33:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e90391d244173f3e1aa821db77484b1ada53557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:23:94:25:c9:36:ad:c7:04:8f:23:51:27:
cd:84:d2:37:8e:11:67:c0:fe:b1:9a:19:8a:e5:d4:
4c:e5:f7:48:12:7a:f6:a3:80:e9:76:9d:26:63:bc:
b7:31:e1:af:2f:75:fd:1d:af:df:1d:19:93:52:45:
d4:b6:7f:f9:7b:aa:f8:69:6d:11:f6:26:f9:9e:23:
f8:ef:d7:89:14:6f:1a:46:3e:56:a8:2b:e3:e9:e7:
53:b3:65:b2:bf:d3:54:7c:b5:b8:7b:d9:b5:59:5c:
fb:e4:73:a0:7c:14:8d:94:a9:35:a3:22:25:87:97:
23:44:c7:17:2c:39:56:fd:be:79:17:37:e9:61:04:
30:36:91:df:29:79:c2:90:cf:ad:66:62:76:82:07:
c9:52:6d:cf:47:88:fd:ab:28:3f:df:2c:e7:3f:66:
9a:08:5b:ce:0a:0e:36:17:b2:8b:8c:dc:4f:59:24:
c6:ef:2e:c8:59:12:af:05:e1:75:db:fd:56:fa:af:
dc:92:a5:c4:4e:0f:1c:e7:07:c3:c8:e4:0b:1f:1b:
fb:43:85:14:00:14:10:86:30:58:2e:75:81:1e:3a:
d4:28:f8:1a:3d:8e:fd:1b:38:cd:da:57:3d:21:e0:
8a:c6:8f:b1:6d:8e:47:d6:04:a8:f0:b4:1c:3c:0a:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.178.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212604
Signature Algorithm: sha256WithRSAEncryption
ad:f9:ef:b8:18:02:f9:04:34:08:4c:ac:94:90:77:76:51:26:
9a:7e:1c:34:ea:c0:b3:38:d9:b0:e2:c8:5c:20:41:c3:5d:5f:
62:aa:d1:cc:a0:42:f5:9d:8d:bd:3d:35:65:c2:8e:b1:47:a6:
b8:1b:90:9d:5b:a6:2c:15:43:7c:a6:45:94:41:3b:af:34:1f:
fb:55:1c:cf:b2:28:b0:90:a1:a8:5f:28:ea:93:2d:f6:ae:10:
fb:aa:65:c5:49:f2:bb:8b:0f:fe:95:a9:f0:1a:d5:80:cc:a0:
10:f8:27:1d:4a:9c:10:25:bc:25:45:96:49:95:42:b1:b0:f8:
f1:5e:1f:61:f8:62:a4:0b:4d:a8:b9:18:92:75:96:01:ab:5f:
0d:1b:b4:9e:8e:50:6a:e5:c0:b6:ff:6d:e3:b7:a8:60:63:fd:
11:82:2f:f0:6b:87:f4:0c:41:51:30:2c:4d:22:79:8c:d3:c0:
50:cf:21:a0:bf:66:ac:32:28:ba:b1:be:6d:10:3e:c2:7d:37:
1b:d9:c3:48:1d:0c:1b:1e:7d:8a:6f:68:6e:22:a7:95:81:83:
d9:73:ef:18:7c:ee:fe:b7:d8:30:1b:f2:55:9f:e1:e0:30:21:
54:ca:cc:ff:c4:54:cb:cf:f7:99:8a:6e:73:12:d9:ee:df:44:
c9:a3:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:19 2025 by rpki-client