Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
File: PQSDU4c3RT4vV_-1dJnDki6DY20.cer (raw, json)
Hash identifier: d65FJ4SYGuP9AD0y25/I6DavLOOXoFWMKWmrXLbmkyo=
Subject key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FCC1E677C2AD84B92A8EC9EC3762B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44592
AS: 213030
IP: 45.156.84.0/22
IP: 91.245.220.0/24
IP: 185.150.24.0/22
IP: 194.62.1.0/24
IP: 194.62.6.0/24
IP: 194.62.29.0/24
IP: 194.62.157.0/24
IP: 2a07:6d40::/29
IP: 2a0f:5480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cc:1e:67:7c:2a:d8:4b:92:a8:ec:9e:c3:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0483538737453e2f57ffb57499c3922e83636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:2e:a4:02:82:19:d7:44:93:19:de:81:c9:
91:95:21:eb:dc:ea:73:47:5e:64:46:1c:ca:9b:0a:
80:de:19:87:ec:71:eb:2c:69:98:1c:3c:5c:9b:f5:
72:62:71:ab:66:a3:9b:35:2a:31:ca:59:4d:31:5d:
d8:e6:ea:72:8d:57:81:ab:8f:ac:a0:c5:49:f2:95:
c8:51:09:4b:76:85:33:6d:62:b9:fe:62:25:dd:64:
f8:47:13:07:6d:5a:98:ff:df:17:6c:56:89:5d:f8:
47:91:0b:df:bd:37:94:d4:1e:b1:bb:79:0f:25:d0:
5f:c9:38:0e:f8:f6:57:f7:c0:33:3f:ec:75:d8:76:
44:84:d6:d5:af:69:70:49:32:00:59:de:27:1d:d8:
7c:9a:4e:02:b5:87:8b:87:87:96:9b:ec:8b:f0:a1:
00:a9:85:63:ef:0b:85:84:de:a5:0c:c1:e5:2c:e8:
42:3d:5f:e0:5a:86:83:f3:30:a7:82:5c:c9:69:fc:
08:56:b1:bc:9c:25:cb:04:9e:63:2f:3d:f1:7e:f0:
4c:36:45:7f:66:f1:43:a0:7b:bc:88:89:fe:17:d3:
f0:fc:5b:9a:72:7d:3b:a8:3a:bd:8c:4a:cb:50:3f:
af:69:ba:d6:23:4d:e9:5e:90:2b:9b:3d:f7:70:cb:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.84.0/22
91.245.220.0/24
185.150.24.0/22
194.62.1.0/24
194.62.6.0/24
194.62.29.0/24
194.62.157.0/24
IPv6:
2a07:6d40::/29
2a0f:5480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44592
213030
Signature Algorithm: sha256WithRSAEncryption
59:3a:95:57:bc:a0:c7:f8:28:fd:14:41:de:a8:8e:5c:59:23:
3b:1b:e0:6d:9a:c4:fe:20:80:48:90:14:39:97:5e:68:48:23:
7e:32:37:68:5c:47:70:15:50:45:db:0e:ce:89:62:13:af:8c:
11:b8:47:3d:1e:f5:75:be:27:e9:30:17:78:9b:78:6a:c4:41:
62:a1:c2:8a:0e:be:12:66:9f:b6:6b:be:42:e0:16:17:03:cd:
e5:04:a5:4a:ed:c6:74:35:ff:ad:16:b8:2f:1f:3b:b8:ff:c0:
0e:40:3b:16:3c:22:3c:65:99:2e:fa:ea:35:d2:bf:cf:fb:d7:
7d:d4:84:2f:66:51:50:15:6a:d7:f7:0c:24:1b:e9:64:22:2f:
7e:14:11:aa:b5:3a:ba:fc:81:ee:24:1f:8b:47:6d:c2:e6:e4:
8a:6b:98:b8:a7:9a:b4:25:86:08:7a:ad:29:e3:ee:c1:2f:6e:
1e:9d:bc:dc:86:ab:22:f4:7c:70:c2:4c:0e:ef:1c:45:c9:31:
d7:4e:de:01:d3:f9:fc:07:01:db:3d:05:90:4d:c8:e8:0b:8a:
7d:ef:56:23:77:fa:3b:75:66:ac:d2:55:85:25:a9:11:b1:16:
0d:dc:99:3a:7e:c1:59:48:b6:f6:6c:6d:ef:d4:7c:ab:fb:21:
be:e4:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:05 2025 by rpki-client