Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
File: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer (raw, json)
Hash identifier: m9x8GzjdrjtniUUx83EAiML9+JlPVjAoB8N9OQ8efOU=
Subject key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425217DE4B26D479AB4DCA8ABCE09695A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200016
IP: 193.142.35.0/24
IP: 213.226.118.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7d:e4:b2:6d:47:9a:b4:dc:a8:ab:ce:09:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:61:bf:9d:4c:e6:ad:ef:80:bc:d4:29:ac:
7d:5f:f7:5d:a7:2b:98:ba:e8:f6:0a:90:c3:99:bf:
01:87:45:26:fe:16:ce:07:26:a8:5f:ca:b4:1d:eb:
22:8e:1a:a0:12:1b:6e:c1:d4:4f:78:3f:b0:31:c3:
7f:b9:27:95:55:8c:b6:6e:86:62:72:6d:03:c1:b3:
51:42:59:24:3d:56:10:3e:13:b7:17:a6:b9:f9:fc:
ee:b1:69:01:a5:d1:c8:c0:0f:79:ea:94:83:bc:5e:
62:67:a3:01:7b:17:6b:1e:d7:71:0e:81:9d:da:f1:
48:59:19:1c:f0:19:36:02:19:52:53:b3:df:c5:30:
2d:a5:e0:14:6b:2a:d5:ac:c5:f6:3b:4f:10:b6:05:
3d:78:2e:dc:cd:8e:a4:2f:71:35:06:a0:19:b7:26:
ac:b9:2b:92:87:f0:54:e0:b6:a8:78:33:7e:bc:91:
4c:97:7f:02:d3:e2:dc:f5:05:63:9c:33:ac:4c:0e:
e6:14:94:a6:6a:f7:c2:0b:db:23:66:c9:d1:88:e1:
f0:1d:0f:5c:bc:9c:c6:c2:ce:4c:a0:fb:f2:d1:03:
c2:3d:4d:18:35:3a:55:c6:2a:48:f7:73:22:65:08:
f0:61:cc:1a:f7:6d:81:6c:f5:3c:c0:8f:06:18:ca:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.35.0/24
213.226.118.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200016
Signature Algorithm: sha256WithRSAEncryption
6c:de:15:d4:93:85:7a:48:77:80:56:3d:88:72:80:08:1b:fb:
03:17:b6:bb:fd:e6:f3:da:cf:35:0c:7f:59:f5:08:88:42:9d:
85:e5:e1:35:26:cc:10:7c:df:27:22:1b:5a:a6:d9:15:e8:d8:
b7:c5:f3:9e:1c:64:13:6a:a1:a9:0a:be:59:8b:f4:11:02:28:
5f:43:fc:71:92:26:e6:00:1a:0a:1a:87:7b:b7:8c:0c:52:42:
e3:00:0f:99:04:bf:0b:f6:39:d3:50:7b:98:2e:e4:5a:ff:bf:
b3:11:99:62:e2:99:2d:ca:ea:e7:c0:f8:fb:2d:ad:4a:f6:3a:
56:b1:df:9e:4c:9b:73:bf:92:45:f4:0a:7f:a9:42:51:12:9d:
28:3a:ee:26:7e:87:35:64:bc:13:c6:ec:0d:fc:12:74:86:d8:
77:07:9e:74:56:88:3b:46:5d:4b:ed:23:aa:ab:d1:3d:2f:63:
80:23:46:38:1d:57:b8:99:12:f9:d9:d6:73:47:89:fb:4b:b4:
27:3d:00:1d:93:8d:83:af:90:08:35:5a:74:85:ca:f9:4c:b4:
6e:24:f2:5b:07:33:74:94:63:f5:ca:a2:43:5a:ce:47:76:78:
21:a0:5a:b2:6a:9a:b6:bd:49:c8:d0:b4:34:ea:de:b6:1c:a6:
08:e2:2b:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:36 2025 by rpki-client