Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer (raw, json)
Hash identifier: 4HeXVSpsTdYiOQk6wfW6V/2U/LnU4FD2eKdarxP2jRc=
Subject key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423697511D22EC6FC9331283D626A2F4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204796
IP: 185.240.0.0/22
IP: 195.158.252.0/23
IP: 195.190.11.0/24
IP: 2001:67c:11f8::/48
IP: 2a0c:6880::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:75:11:d2:2e:c6:fc:93:31:28:3d:62:6a:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:10:a7:a7:76:fe:93:25:94:51:65:72:5c:
18:0d:be:d8:2d:e7:8a:f3:ad:e8:25:21:4d:45:aa:
1f:52:25:44:3c:ee:b6:d2:61:4c:3e:55:aa:c3:ce:
d5:0b:df:2f:a1:d8:ca:22:71:1a:79:b9:70:40:e8:
e1:f9:49:c5:f8:5d:a6:b9:e1:02:f4:9a:73:35:05:
3d:81:c4:eb:83:7a:63:0e:f3:0c:2d:83:c2:b7:d8:
55:81:e3:ba:48:5c:df:77:fe:00:7b:d0:76:58:4c:
53:88:d4:30:5f:4c:c1:6a:12:f2:e0:df:24:cd:d9:
33:83:2c:98:12:d7:02:5f:6a:a5:4e:77:19:75:bd:
0a:88:87:d9:29:bb:18:e0:fc:91:3c:10:96:42:49:
3a:94:3d:89:82:30:b2:82:0c:8b:12:e5:f8:df:48:
90:0c:46:b5:c0:9b:a3:7d:60:0b:6a:9c:07:3a:0d:
73:51:1b:4a:d8:c3:fb:48:de:de:fe:8e:29:85:26:
a8:6d:47:4b:42:c1:e6:ee:fd:ca:aa:49:94:d4:2e:
86:26:c9:a2:70:26:09:f2:ad:11:cd:de:58:01:fc:
82:d4:ae:d4:17:e3:5a:f4:87:85:fd:c6:f1:eb:59:
94:de:19:c2:09:a2:bd:5e:03:02:3f:ef:9e:79:ac:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.0.0/22
195.158.252.0/23
195.190.11.0/24
IPv6:
2001:67c:11f8::/48
2a0c:6880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204796
Signature Algorithm: sha256WithRSAEncryption
58:9a:6a:c1:8b:a6:e4:5f:0a:0e:cd:1f:94:13:60:a6:4c:6d:
ae:7b:c8:33:b8:13:7a:9f:6e:a1:f8:39:22:03:b7:03:9e:42:
cc:26:64:74:4e:af:71:7f:f2:7d:6a:3c:51:d3:41:f3:92:0a:
15:49:a4:c8:f5:f5:b8:bc:18:40:41:1f:7f:4f:1b:34:f1:b6:
23:1f:59:eb:35:e0:e5:9e:19:48:7d:5e:1c:b6:56:67:a2:2f:
bb:5a:2c:7b:8a:99:9c:f4:63:c5:11:bf:8d:f0:62:98:54:9b:
11:9c:c9:b1:47:0b:7c:ce:cc:62:2f:50:d2:a9:94:58:7b:2f:
97:5c:2b:0b:ec:64:9d:30:71:67:a6:06:05:56:37:67:46:49:
d0:e9:d2:c8:d9:0b:81:d2:07:ed:fd:74:e5:9d:bd:26:ef:0e:
e9:c7:96:4a:ca:cb:f4:72:a4:03:57:0b:41:5d:5e:fe:e8:01:
66:66:92:46:5e:ae:04:75:9a:37:bb:63:8e:a4:22:08:0a:67:
a2:0e:b3:44:89:22:bd:e7:97:a2:50:8c:a4:60:7f:7e:4f:5a:
be:8b:8e:52:18:e2:a3:a0:d1:cc:8f:3b:11:50:68:f0:b7:15:
b5:57:00:ad:c0:e0:c4:24:1b:6c:33:24:ae:d8:ec:60:e3:1a:
1c:d8:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:52 2025 by rpki-client