Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
File: PZQks8jnL3RqWesZlFWqNkajpFc.cer (raw, json)
Hash identifier: lNONPOPFry/1kGaRI6MCIs+2MV5RMRwfgkV0m3c3yzM=
Subject key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E4172F998A553956C71EE2322795D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202283
IP: 185.232.220.0/22
IP: 193.109.238.0/24
IP: 2a0c:d100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:41:72:f9:98:a5:53:95:6c:71:ee:23:22:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:9d:f1:08:d0:3c:a1:4c:80:c7:e7:fc:65:
a6:1e:62:67:3a:50:ef:a2:fb:69:c9:41:ac:f8:b4:
c0:b9:35:2d:f5:84:c1:9c:09:24:2f:9d:76:84:40:
bf:e8:87:dd:27:13:80:d9:9f:60:3c:ff:ca:fb:eb:
56:c3:a0:53:ea:e8:e5:24:83:fc:1e:0f:5c:df:f2:
65:a6:54:63:78:13:fc:a0:ca:4f:75:d4:bb:5e:80:
9b:57:7c:c1:09:31:d5:12:0a:8f:d6:7f:ae:80:6d:
98:15:9f:15:95:b2:d5:1e:7c:bc:b7:39:cc:a4:2f:
08:31:42:02:21:52:67:00:63:3a:ef:35:9e:37:e9:
66:0d:28:ca:ad:26:ee:b9:61:c5:7b:64:c1:15:8f:
ca:33:40:7b:4c:5e:59:45:71:60:03:33:1c:54:48:
17:56:85:a4:aa:66:88:bc:24:a4:71:8d:be:2d:75:
17:cf:af:25:cb:42:1c:9a:37:e1:3f:41:eb:84:0f:
29:14:77:17:25:a6:ba:a8:92:dc:0d:09:a5:70:99:
2a:a1:98:f6:90:5f:9a:69:60:4c:c7:4a:b7:9c:4e:
e9:4a:1e:15:d5:bd:05:62:e1:5b:c1:f5:9c:7a:01:
e8:eb:c4:61:46:b3:f9:0b:ca:df:4c:8f:c4:a7:fc:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.220.0/22
193.109.238.0/24
IPv6:
2a0c:d100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202283
Signature Algorithm: sha256WithRSAEncryption
55:48:75:a1:b8:4a:89:91:7e:e5:d1:72:e3:6e:53:ec:5e:2f:
18:07:64:6b:0b:07:f0:ce:a8:65:6b:00:27:9b:ad:3e:6c:fc:
dd:1f:ab:3c:86:5c:68:45:b4:7f:ae:81:97:87:56:3c:87:ba:
77:ea:99:a1:01:57:94:f4:69:29:9f:19:f8:5a:3a:56:37:83:
d7:32:d9:e5:16:67:e2:f5:6b:d2:71:02:1b:69:67:07:de:90:
a7:0b:1e:da:86:70:b9:f8:b2:5d:ea:cf:6f:9a:bb:a7:ae:05:
e6:74:fd:2b:37:e3:ef:f8:4a:fc:3d:fe:b0:da:99:26:0c:cc:
fc:20:30:57:74:5f:75:5b:07:99:9a:d0:4e:19:5f:9f:67:72:
66:e2:f8:32:6a:7b:2a:69:87:9f:78:14:24:24:35:86:d5:a3:
05:63:89:35:52:5b:1b:49:23:14:2a:1a:ad:35:a9:2e:4e:4d:
95:81:98:7e:c6:9d:c1:22:ef:52:fe:60:e6:e4:30:16:c0:14:
90:b7:68:0a:fa:38:2e:c3:4d:e2:6e:64:7a:ab:ed:bf:cc:90:
c6:95:a1:59:de:68:89:e6:34:93:46:48:2b:93:4e:8d:24:1f:
4d:a7:85:01:98:17:2f:20:13:cb:f8:1b:45:62:8e:f6:db:90:
c2:67:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:42 2025 by rpki-client